HydraCast
Marketing fan-out
Sign inGet started

Privacy Policy

Last updated: September 16, 2026

This Privacy Policy explains how Hydra Dynamix ("HydraCast", "we", "us") collects, uses, stores, shares, and deletes information when you use the HydraCast application at hydracast.hydradynamix.com. HydraCast is a social media management tool that lets you connect social accounts you own and publish, schedule, and analyze content on them.

Information we collect

Account and profile data. When you sign in, our authentication provider (Clerk) provides your name, email address, and profile image so we can identify your account.

Connected-platform credentials. When you connect a social account, the platform's authorization flow gives us an access token (and, where applicable, a refresh token) for that account. We never receive or store your platform password. These tokens are encrypted at rest.

Connected-platform data. To provide the service, we access and store the minimum needed from each connected platform: your account or page identifier and handle/name, the content you create and publish through HydraCast, the delivery status and public URL of published posts, engagement metrics for your posts (impressions, views, likes, comments, shares, saves, clicks), and comments or mentions on your posts that you choose to view in the inbox.

Content you provide. The text, images, and videos you upload or write in order to publish them.

Usage data. Basic operational logs needed to run and secure the service.

How we use information

We use this information solely to provide the features you request: to publish and schedule the content you compose to the accounts you select, to read back engagement metrics and comments for your own posts, to display your connected accounts and posts, and to secure and operate the service. We do not sell your information. We do not use your content or platform data for advertising, and we do not use it to train machine-learning or AI models.

How we share information

We share information only as needed to run the service: with the social platform you are publishing to or reading from (to carry out your request), and with our infrastructure providers who process data on our behalf under contract, including Clerk (authentication), Convex (encrypted data and file storage), and Vercel (hosting). We disclose information if required by law. We do not otherwise share, rent, or sell your data.

Platform-specific disclosures

HydraCast integrates with the following platform APIs, and accesses each only to perform the actions you initiate. You can revoke access at any time by disconnecting the account in HydraCast or in the platform's own settings.

  • Meta (Facebook Pages, Instagram, Threads). We use the Facebook Graph API, Instagram Platform API, and Threads API to publish posts you compose to your Pages/accounts and to read engagement for those posts.
  • Google / YouTube. HydraCast uses the YouTube Data API Services to upload videos you choose to your channel and to read your channel name and video statistics. By using the YouTube integration you agree to the YouTube Terms of Service. Information HydraCast obtains from Google APIs is handled in accordance with the Google API Services User Data Policy, including its Limited Use requirements. See also the Google Privacy Policy. You can revoke HydraCast's access to your Google account at Google security settings.
  • TikTok. We use the TikTok Login Kit and Content Posting API to publish videos you compose to your account or send them to your TikTok drafts, per your choice.
  • Pinterest. We use the Pinterest API to create pins you compose on a board you select and to read pin analytics.
  • LinkedIn. We use LinkedIn APIs to publish posts you compose to your profile or a company Page you manage and to read engagement.
  • X. We use the X API to publish posts you compose and read their metrics.
  • Discord, Mastodon, Bluesky, and a self-hosted blog. We use each platform's API or webhook to publish content you compose.

Data storage and security

Data is stored with our processors (Convex and, in development, the operator's own server). Connected-account access tokens and other credentials are encrypted at rest using AES-256-GCM. Access to user data is scoped so that members of one workspace cannot see another workspace's accounts, posts, or analytics. We fetch content only over authorized, guarded connections.

Data retention and deletion

We keep your data for as long as your account is active. When you disconnect a connected account, its stored credentials are deleted. You can request deletion of your account and associated data at any time, and we will delete it within 30 days of the request (sooner where a platform requires it). See our Data Deletion instructions. When your authorization for a platform can no longer be verified, we delete the related platform data.

Your choices

You can disconnect any connected account, edit or delete your posts, and request full account deletion. Depending on your location you may have rights to access, correct, or delete your personal data; contact us to exercise them.

Children

HydraCast is not directed to children under 13 (or the minimum age in your jurisdiction) and we do not knowingly collect their data.

Changes

We will update this policy as the service evolves and will revise the date above when we do.

Contact

Hydra Dynamix, for privacy questions or deletion requests: privacy@hydradynamix.com.