Data protection

Privacy Policy

How we collect, use, and protect your personal data when you use ScheduleSky

Last updated: September 11, 2026

1.Introduction

This Privacy Policy describes how ScheduleSky (schedulesky.com) collects, uses, and protects your personal information when you use our Bluesky post scheduling service. We are committed to respecting your privacy and protecting your data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Important: By creating an account or using ScheduleSky, you accept the practices described in this policy.

2.Data we collect

2.1 Data you provide directly

  • Account details: username, email address, and password (stored hashed)
  • Connected Bluesky accounts: handle, timezone, and encrypted credentials (app password or OAuth tokens)
  • Scheduled posts: text, links, media files, publish dates, and post metadata
  • Contact form: name, email, and message content
  • Billing data: subscription status and Paddle customer identifiers (payment details are handled by Paddle)

2.2 Data collected automatically

  • IP address and approximate location
  • Browser type, device, and operating system
  • Pages visited, session activity, and error logs
  • Publish job results: success/failure status and Bluesky / AT Protocol record URIs

3.How we use your data

We use your personal data only for the following purposes:

Provide the service

Authenticate you, store scheduled posts, upload media, and publish to your connected Bluesky accounts at the scheduled time.

Communication

Respond to support requests, send service-related notices, and notify you about billing or account issues.

Security

Detect abuse, protect accounts, and maintain the integrity of our scheduling infrastructure.

Legal obligations

Comply with applicable laws, respond to lawful requests, and manage subscription billing records.

4.Sharing your data

Principle: We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

Limited exceptions

We may share data only in the following cases:

Service providers

Hosting, object storage (media files), background job processing, email delivery, and payment processing via Paddle, under strict confidentiality agreements.

Bluesky

When you schedule a post, the content and media are sent to Bluesky to be published. This is required for the service to work and is governed by Bluesky's own terms and privacy policy.

Legal requirements

When required by law or a valid request from competent authorities.

5.Cookies and similar technologies

We use cookies and similar technologies to operate ScheduleSky. Here are the types we use:

Essential cookies

Required

Session authentication, CSRF protection, and security. The app cannot work without these.

Analytics cookies

Optional

Help us understand how the service is used so we can improve reliability and features.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from signing in.

6.Your rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access

Know what data we hold about you

Right to rectification

Correct inaccurate data

Right to erasure

Request deletion of your account and associated data

Right to portability

Receive your data in a standard, machine-readable format

Disconnect accounts

Remove connected Bluesky accounts and revoke stored credentials at any time

Exercise your rights

7.Data security

We take the security of your data seriously and implement several protective measures:

TLS encryption

All data in transit is encrypted over HTTPS

Encrypted credentials

App passwords and OAuth tokens are encrypted at rest

Backups

Your data is backed up regularly

Important: No system is 100% secure. We cannot guarantee absolute security, but we work continuously to protect your data. You are responsible for keeping your ScheduleSky password and Bluesky app passwords confidential.

8.Contact us

For any questions about this Privacy Policy or to exercise your rights, please contact us:

Questions about your data? Get in touch
Contact us

Response time: We aim to respond to all data-related requests within 30 days.

Last updated: September 11, 2026

This Privacy Policy is effective from this date.