Privacy Policy

Effective 12 October 2026

PandaQueue is a social media scheduling and publishing service operated by Sanklad Digital Ltd, a company registered in England and Wales (number 14223393) at 7 Brookfields Place, Coventry, West Midlands, CV6 4QF, United Kingdom ("we", "us"). We are the controller of the personal data described here. This policy explains what we collect, why, who we share it with, how long we keep it and how you remove it. It covers pandaqueue.com, app.pandaqueue.com, our API, MCP server and command-line tool, and the social platform integrations offered through them.

Information you give us

• Your account: your email address, display name and, if you set one, a password (stored only as a salted scrypt hash). If you sign in with Google we receive your name, email address and Google account identifier.
• Workspaces and teams: workspace names and settings, the people you invite and their roles, client groups ("customers") and your display preferences.
• Content: the posts, captions, threads and comments you write, media you upload (with alt text), tags, signatures, templates, scheduling times, and the resulting publication status and links.
• Collaboration: internal comments on posts, approval decisions and notes, and, when you share a client preview link, the name and comments a guest leaves on it.
• Automations and developer tools: RSS feed addresses, webhook addresses and their delivery logs, API keys (stored only as a hash), and the apps and AI assistants you connect to your workspace.
• Billing: your plan, trial and subscription status. Card and payment details are entered directly with Stripe; we never see or store your full card number.

Information we receive from connected social platforms

You connect a social account by authorising it with the platform on the platform's own screen. We never ask for, see or store your social platform password. Once connected we store:

• The access token and, where the platform issues one, the refresh token, encrypted at rest (AES-256-GCM). These let us publish and read analytics on your behalf.
• The account identifier, name, username and profile picture, so you can tell your channels apart, and for Facebook and Instagram the Pages and business accounts you choose to connect.
• Follower counts, reach and engagement figures for your connected accounts and for content published through PandaQueue, so we can show you analytics.

We request only the permissions needed for the features you use. We do not scrape platforms, we do not buy or sell platform data, and we do not build advertising profiles.

Google and YouTube data

PandaQueue uses YouTube API Services. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

When you connect a YouTube channel, PandaQueue accesses, stores and uses the following, only to provide the features you ask for:

• Your channel's identifier, title, handle, profile picture and subscriber count, to show the channel in PandaQueue and track its growth.
• The videos you schedule in PandaQueue, which we upload to your channel with the title, description, tags, category, privacy setting and thumbnail you chose, and add to a playlist of yours if you pick one.
• The comment you write for a video, which we post on that video after it is published.
• View, like and comment counts for videos published through PandaQueue, and your channel's YouTube Analytics reports (views, watch time, subscribers gained, likes, comments and shares), to show you analytics.

We do not share YouTube data with anyone except as needed to run the service (see "Who we share data with"). While a channel is connected we refresh its data at least every 12 hours. If you disconnect the channel we delete its tokens and the YouTube data we stored straight away; if we can no longer refresh the data because access was revoked or expired, we delete it within 30 days. You can revoke PandaQueue's access to your Google account at any time from Google's security settings.

PandaQueue's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, we do not use it to train artificial intelligence models, and no person at PandaQueue reads it unless you ask us to (for example for support), it is needed for security or abuse investigations, or the law requires it.

How we use your information

• To provide the service: publishing and scheduling what you ask, analytics, collaboration, notifications and billing. Legal basis: performance of our contract with you.
• To keep the service secure and reliable, prevent abuse, rate-limit requests (using your IP address) and diagnose faults. Legal basis: our legitimate interests.
• To email you about your account, such as confirmations, password resets, trial and payment notices and the notifications you choose. Legal basis: contract, and our legitimate interests for service messages.
• To keep financial records and meet legal obligations. Legal basis: legal obligation.

We do not use your content or platform data to train machine learning models, and we do not sell personal data.

AI features

If you use an optional AI feature, such as rewriting a caption or splitting text into a thread, the text you submit is sent to Anthropic, which provides the model, to generate the result. Only the text you submit to that feature is sent. Under our agreement with Anthropic, this data is not used to train its models.

The assistant. The in-app assistant runs on an AI account you connect yourself, such as ChatGPT, Grok, MiniMax, OpenRouter or an API key from another provider. When you chat with it, your messages and the workspace information it needs to answer (for example your channel names, posts and schedule) are sent to that provider, under your own agreement with them. We keep the sign-in tokens or key you connect, encrypted, and use them only for your chats. Your chats are stored in PandaQueue so you can come back to them, and are visible only to you. You can delete a chat or disconnect an account at any time from the assistant.

Connectors. If you add a connector (for example an image or video generator such as Higgsfield or fal.ai), the assistant sends that service the instructions it needs, such as an image prompt, and saves what it returns to your media library. We store the connector’s sign-in tokens or key, encrypted. Your use of a connector is governed by that service’s own terms and privacy policy.

Who we share data with

We share data only as needed to run PandaQueue, with:

• The social platforms you publish to, when you ask us to publish or read analytics.
• Destinations you set up: webhook addresses, RSS feeds, connected apps and AI assistants, the AI provider and connectors you connect to the in-app assistant, and anyone you share a preview link with.
• Service providers acting on our instructions: Hetzner Online (hosting, in the European Union), Stripe (payments), Resend (email delivery), Anthropic (optional AI features) and Google (optional sign-in, and website analytics if you accept analytics cookies).
• Authorities, where the law requires us to.

Some of these providers process data outside the UK. Where they do, the transfer is protected by the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or goes to a country with an adequacy decision.

Cookies

The app (app.pandaqueue.com) uses only the cookies it needs to work: pq_session keeps you signed in (for up to 30 days) and pq_signin protects a Google sign-in while it is in progress (up to 10 minutes). It does not use advertising or analytics cookies.

This website (pandaqueue.com) uses Google Analytics only if you accept it in the cookie banner. Until you do, nothing is loaded from Google Analytics and no analytics cookie is set. If you accept, Google Analytics sets the _ga and _ga_* cookies (for up to 2 years) to count visits and see which pages are used and where visitors come from, and Google receives your IP address and browser details to do so. Legal basis: your consent. We remember your choice in your browser’s local storage. You can change it at any time with Cookie settings, also in the footer of every page; declining removes the analytics cookies.

Our pages load fonts from Google Fonts, which receives your IP address to deliver them.

How long we keep it

• Your account, workspaces and content: while your account is active.
• Assistant chats, connected AI accounts and connectors: until you delete or disconnect them, or delete your account.
• A connected channel's tokens and stored data: until you disconnect it (deleted immediately), subject to the 30-day rule for YouTube data above.
• After you delete your account or a workspace: the account, workspace records, tokens, posts and uploaded files are deleted, and remaining copies leave our backups within 30 days.
• Billing records: kept for six years, as UK tax law requires.
• Security logs and rate-limit counters: up to 30 days.

Security

Data is encrypted in transit with TLS. Platform tokens and the AI and connector credentials you connect to the assistant are encrypted at rest, passwords and API keys are stored only as hashes, and access to production systems is limited to the people who run the service.

Your rights

You can access, correct, export or delete your data, and object to or ask us to restrict how we use it. Most of this is self-service in the app (see Delete your data); otherwise email privacy@pandaqueue.com and we will respond within one month. Revoking our access in a platform's own settings immediately stops us acting on that account. If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office (ico.org.uk).

Children

PandaQueue is not directed to children under 13 and we do not knowingly collect their data.

Changes

We will post any change to this policy on this page and update the effective date. If a change is significant we will also tell account owners by email.

Contact

Sanklad Digital Ltd (company number 14223393), 7 Brookfields Place, Coventry, West Midlands, CV6 4QF, United Kingdom. Privacy enquiries: privacy@pandaqueue.com.