Appearance & Accent Dark/Light plus a real accent color — this exact control, unchanged, is what every Toolbox Central screen uses.

← DragnPost Terms of Service

Legal

Privacy Policy

Effective and last updated: August 23, 2026

DragnPost is built and operated by The Human Toolbox (Craig Soles), a sole proprietorship based in Vancouver, British Columbia, Canada ("DragnPost," "we," "us," or "our"). This policy explains what information we collect when you use DragnPost, why we collect it, how it's stored, and how you can control or delete it.

DragnPost is a content-posting tool for coaches and other professionals: you upload a video, DragnPost clips, brands, and captions it, and posts the result to the social platforms you've connected. This policy is written to describe that product honestly and specifically, not as generic boilerplate.

Plain-language summary: we collect your account details, the video you upload, and the platform connections you authorize, solely to run your posting pipeline. We never sell or share your data with third parties for their own marketing or advertising purposes. Your uploaded video and its processed clips are deleted from our storage on a short retention schedule after a post is confirmed, by default within 24 hours. Records of what was posted, when, and where are kept as your permanent account history.

1. Who this applies to

This policy covers dragnpost.co and the DragnPost application (hosted at our Toolbox Central platform), including account signup, video uploads, the posting pipeline, and connections to third-party platforms made through DragnPost.

2. Information we collect

Account information

When you create a DragnPost account, we collect your name and email address. If you subscribe to a paid tier, Stripe (our payment processor) collects and stores your billing details directly; we retain your Stripe customer ID, subscription ID, and subscription status, but we do not store your card number ourselves.

Content you upload

The raw video files you upload, the clips DragnPost generates from them, and the branded/captioned renders produced during processing.

Platform connections and data obtained via connected-platform APIs

When you connect a social platform (TikTok, Instagram, Facebook, or YouTube) to DragnPost, you authorize us, through our infrastructure provider Composio, to post content to that account on your behalf. Specifically:

Platform	What we do	What we receive back
TikTok	Upload and publish video content you supply, via TikTok's Content Posting API.	A publish status (processing, complete, or failed), the resulting post's TikTok-assigned ID, and confirmation of the privacy level the post was published under.
YouTube	Upload and publish video content you supply.	The resulting video's ID and URL, and upload/processing status.
Instagram	Upload and publish video content you supply (via a two-step container-then-publish flow).	The resulting post's ID and publish status.
Facebook	Prepare a draft post on your connected Page for you to publish with one tap.	Draft/post status and the resulting post ID once you publish it.

We do not use these connections to read, scrape, or collect your followers' data, your direct messages, analytics beyond what's needed to confirm a post succeeded, or any other information from your connected accounts beyond what's described above.

TikTok User Data specifically

Because DragnPost's TikTok integration currently operates as an unaudited app under TikTok's Content Posting API, every post made through DragnPost is published with TikTok's SELF_ONLY privacy setting; it is visible only to the connected TikTok account itself, not publicly, until we complete TikTok's app audit and TikTok grants public-posting access. The TikTok User Data we obtain (publish status, post ID, and the video file itself during upload) is used exclusively to complete that upload and confirm the post, and is retained only as long as needed to do so, plus the general media retention window described in Section 4. We do not use TikTok User Data for any purpose other than fulfilling the specific posting action you requested, and we do not share it with any third party except TikTok itself (to publish it) and Composio (as the technical intermediary that relays the API call, see Section 5).

Technical and usage information

Job records: what was uploaded, when, its processing status, which platforms it was posted to, the resulting post IDs/URLs, and timestamps of each step. This is the operational record of your account's posting history.

3. How we use your information

To create and operate your account and process your subscription.
To process the video you upload (clipping, captioning, branding).
To post that processed content to the platforms you've connected, on your instruction.
To show you your own posting history and confirm what succeeded or failed.
To communicate with you about your account, billing, or a support request.
To maintain and secure the service (fraud prevention, abuse prevention, debugging).

We do not use your uploaded content or platform data to train AI models, and we do not use it for advertising or marketing to you or anyone else.

4. How long we keep your data

DragnPost follows a "process, post, delete" policy for the actual video bytes you upload:

Video files (your raw upload, unbranded clips, and branded renders) are deleted once every platform your job targeted has reached a final outcome (published, or permanently failed after retries), plus a grace window, 24 hours by default, minimum 6 hours, configurable per account. That grace window exists to catch a platform report of "success" that later turns out not to have finished landing, and to give you a realistic window to save your own copy before deletion. We do not hold your source video indefinitely, and we do not warehouse it for any reason beyond completing and confirming your post.
Job records (what was posted, when, to which platforms, the resulting post IDs/URLs, and pass/fail history) are kept as your account's permanent posting history, so you have a real record of what DragnPost has done on your behalf. This metadata does not include the video file itself once deletion has run.
Account information (name, email, subscription status) is kept for as long as your account is active, and for a reasonable period after cancellation to handle billing disputes, then deleted or anonymized on request.

5. Who we share data with

We do not sell your data, and we do not share your content or account information with third parties for their own marketing, advertising, or resale purposes. Full stop. We do work with a small number of infrastructure providers who process data strictly on our behalf, to run the service:

Composio (composio.dev) — the technical intermediary that relays platform API calls (TikTok, Instagram, Facebook, YouTube) and securely stores the OAuth connection credentials for those accounts. Composio does not use your data for its own purposes; it executes the specific posting actions we instruct it to make on your behalf.
Cloudflare R2 — where your uploaded video, clips, and branded renders are stored while they're being processed and before deletion (Section 4). This storage is private; it is not publicly accessible by URL.
Supabase — hosts our account and job-record database (Postgres).
Stripe — processes payments and stores your billing details directly; we never see or store your full card number.
The social platforms themselves (TikTok, Instagram, Facebook, YouTube) — only the content you explicitly instruct DragnPost to post, sent directly to the account you connected.

We may disclose information if required to by law, or to protect the rights, property, or safety of DragnPost, our users, or others.

6. Your rights and choices

Access: you can ask us for a copy of the account and job-record data we hold about you.
Deletion: you can ask us to delete your account and associated data at any time. Video files already follow the automatic deletion schedule in Section 4 regardless of request.
Disconnecting a platform: you can revoke DragnPost's access to any connected platform at any time, both from within DragnPost and directly from that platform's own app-permissions settings. Revoking access stops any future posting to that platform; it does not retroactively remove posts already made.
Correction: you can ask us to correct inaccurate account information.

To exercise any of these rights, email thehumantoolbox2026@gmail.com. We'll respond and act on genuine requests promptly.

7. Security

We use industry-standard measures to protect your data in transit and at rest, including access controls on our storage and database systems, and a private (non-public) storage bucket for your video content. No system is perfectly secure, and we can't guarantee absolute security, but we take real, concrete steps to protect what you share with us rather than treating this as a formality.

8. Children

DragnPost is a business tool intended for coaches and professionals. It is not directed at, and we do not knowingly collect information from, children under 13.

9. Changes to this policy

If we make a material change to how we handle your data, we'll update the effective date above and, where the change is significant, notify active account holders directly.

10. Contact

Questions about this policy, or a request under Section 6, can be sent to thehumantoolbox2026@gmail.com.

Honest note on scope: this policy is written to accurately describe what DragnPost actually collects, stores, and does with data today, verified directly against the live product and its database schema, not generic boilerplate. It is not a substitute for review by a licensed lawyer, particularly before this scales to a larger volume of paying customers across multiple jurisdictions. If anything here should be tightened before that point, that's a real next step, not a formality.