Privacy Policy

Last updated: November 5, 2026

eHelp is a Windows desktop application for subscribers who schedule and publish posts to social media accounts they own or manage (Facebook Pages, Instagram professional accounts, Threads, X, YouTube and TikTok), view their own recent posts, and send live video to their channels. This policy explains what data eHelp uses, where it is kept, and how to delete it.

1. Data on your computer

Most of eHelp's data stays on the computer where it is installed:

• Connected accounts: the account ID, name and profile picture of each account you connect, and the access tokens the network gives eHelp. Tokens are encrypted with Windows' secure storage.
• Your posts: the text, photos, videos, schedule and publishing results of the posts you create in eHelp.
• Livestreams: the source and destination addresses you enter. Stream keys are encrypted with Windows' secure storage. Live video goes directly from your computer to the destinations you choose.
• Studio projects: your video projects, brand kits, templates and exports.
• Your eHelp sign-in (a session key for your eHelp account, not your password), encrypted, and a short signed licence from our server.

Posts and statistics shown under Streams are read from the networks when you view them and are not saved.

2. Data handled by the eHelp Cloud server

eHelp uses a server we run on Cloudflare for these things:

• Your eHelp account: your name (to greet you in our emails) and email address, your password stored only as a salted one-way hash (PBKDF2), and, if you turn it on, your authenticator key (encrypted) and one-way hashes of your recovery codes. For each computer or browser where you are logged in we keep a one-way hash of its session key, its kind (app or browser), the computer name the app reports, and when it was signed in and last used, so you can see and sign them out on your account page. To block password guessing we briefly keep counts of failed attempts per IP address and per email. If you use Continue with Google or Continue with Microsoft, we receive your email address, whether the provider has verified it, and an ID for your Google or Microsoft account; we keep only the email and that ID, to recognise you next time. We never receive your Google or Microsoft password, and we ask for no access to your mail, files or contacts.
• Your subscription: we keep your name, email address, which networks your subscription includes, its start and end dates, and when the app last checked in. It is linked to your eHelp account. If you pay online, the payment is handled by Stripe on Stripe's own page: your card details go to Stripe, never to eHelp. Stripe tells our server whether your subscription is paid, renewed or cancelled, and we keep the Stripe customer and subscription IDs, the status and the end of the paid period.
• Logging in to networks: when you connect an account, the network sends eHelp a one-time code. Our server exchanges that code (and later renews the token) using our developer app credentials, which never leave the server. The resulting tokens pass through the server to your computer and are not stored or logged on the server.
• Media for Instagram and Threads: these networks only accept photos and videos from a web address. eHelp uploads the file to our Cloudflare R2 storage under a random, unguessable name, the network downloads it, and eHelp deletes it right after publishing.
• Security records: to protect accounts, the server records security events (log-ins, failed log-ins, blocked requests, password and two-step changes, data downloads and account deletions) with the time, IP address and browser name. Passwords, codes and keys are never recorded. These records are kept 90 days. When you delete your account, your email address and account ID are removed from them.

AI features in Studio

• eHelp AI (AI animations and the Studio AI chat): what you type, the earlier messages of that chat, your comments on the preview, your brand kit (colours, fonts, name), the names and lengths of the media in your project and, only when you attach them, small previews of your pictures or video frames, or a drawing on the preview, are sent through our server to Anthropic (Claude), which designs the animation. Your full-size files never leave your computer. Our server does not keep these requests: it only counts how many animations each subscription makes per day. Under its commercial terms, Anthropic does not train its models on this data.
• Your own Claude Code or Codex (optional, in Studio settings): the same request goes from your computer to your own Anthropic or OpenAI account, under your agreement with them, not through our server.
• Auto subtitles: speech is turned into text on your own computer (whisper.cpp). Your audio is not sent anywhere. The speech model is downloaded once from Hugging Face.

Sync between your PCs (optional, off until you turn it on)

• When you turn on Sync between your PCs in the app, our server keeps a copy of your connected social accounts (their names, pictures and IDs), your posts and planner boards, your Studio projects (with their AI chats, comments and subtitles), brand templates, brand kits and AI animation designs, so your other PCs (and your team, see below) get the same. A post's picture or video stays on the PC that made it; that PC publishes it. The pictures, videos and sounds used in them are stored privately in our Cloudflare R2 storage, named by their content, and only your eHelp account can get them (up to 50 GB).
• How long: a project's cloud copy, with the files and AI animation designs only it uses, is deleted 2 days after its last change. It stays on your PCs, and syncs again if you change it. Brand templates and brand kits (with the files they use) are kept until you delete them.
• Livestreams sync too: their names, which destinations are on, and which PC runs them. While a livestream runs, your PCs show each other its live status (state and bitrate).
• Keys are locked by your PCs: the sign-in keys of your connected accounts, stream keys and livestream links are encrypted on your PC before they are sent. Each PC has its own key pair, and your PCs pass the unlocking key to each other sealed to that pair; our server only stores each PC's public key, so it cannot read them.
• You can delete this copy at any time with Delete the synced copy from eHelp in the app. It is also deleted when you delete your eHelp account.

Teams

• The owner of a subscription can invite up to 5 people (for example community managers) by email. We send them an invitation email. They log in with their own eHelp account and, after accepting, work in the owner's eHelp: only in the sections the owner allows (planner and posting, streams, Studio, livestreams).
• Team members see and use the owner's data in those sections, including the connected accounts (to post with them, without being able to connect or remove accounts). The locked keys of those sections are passed to their PCs by the owner's PCs, as above. We keep the invited address, the sections, and the dates of the invitation and acceptance.
• The owner can change a member's sections or remove them at any time; access ends at once and their PCs no longer receive the data. Removing someone does not delete what their PC already received: if needed, reconnect your accounts to issue new sign-in keys. Members can leave a team themselves.

3. What eHelp accesses on each network

• Facebook: the Pages you choose to connect, to publish posts to them, show their recent posts with likes and comment counts, and edit or delete posts made from eHelp.
• Instagram: your professional account's basic profile, to publish photos, videos, reels and stories, add a first comment you write, invite collaborators and tag people you choose, and show your recent posts.
• Threads: your basic profile, to publish posts and show your recent posts.
• X: your basic profile, to publish posts with media and show your recent posts.
• YouTube: your channel, to upload videos you choose and show your recent uploads.
• TikTok: your basic profile and posting settings, to publish videos with the privacy and interaction settings you choose, and show your recent videos.

eHelp only publishes what you create or approve, to the accounts you select.

4. Google and YouTube

eHelp uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

eHelp's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove eHelp's access to your Google account at any time at myaccount.google.com/permissions.

5. What we do not do

• We do not sell or rent your data, or share it with anyone except the network you publish to and the service providers that run eHelp (Cloudflare for hosting, Resend for account emails, Stripe for online payments, Anthropic for eHelp AI in Studio).
• We do not use your data for advertising, profiling, or to train AI models.
• We do not read your private messages.

6. Security

• All connections to the networks and to our server use HTTPS.
• Tokens and stream keys on your computer are encrypted; passwords and sign-in keys on our server are stored as hashes; developer secrets on our server are encrypted.
• Each subscriber's uploads are kept separate, and upload links expire after one hour.
• Failed log-ins are limited and recorded, and repeated attempts are blocked.
• Logging in with your password on a browser or PC your account hasn't used asks for a 6-digit code we email you. That device is then remembered for 30 days with a small cookie (website) or a key stored encrypted on the PC (app); only a one-way hash of it is kept on our server. Changing your password forgets every remembered device.
• On the website you are logged out after 30 minutes without activity.

7. Getting and deleting your data

You can download everything our server keeps about your account as one file with Download my data on your account page.

See Data deletion for step-by-step instructions. In short: remove an account in eHelp to delete its token, uninstall eHelp and delete %APPDATA%\postdesk to remove everything on your computer, delete your eHelp account from your account page, and email us to delete your subscription data on our server.

8. Children

eHelp is not intended for anyone under 18.

9. Changes

We will update this page when eHelp changes how it uses data, and change the date at the top.

10. Contact

Questions or requests: support@ehellp.com