This policy describes which personal data Uploadlane processes, what we use it for and which rights you have. We deliberately keep it short and in clear language. Have a question? Email info@uploadlane.com.
1. Who we are
Uploadlane is a platform for social media planning, based in Belgium. For privacy questions, we are your first point of contact. We are the data controller for the data you give to Uploadlane.
2. Which data do we process
Account data
- Name, email address and (hashed) password
- Profile photo (if you upload one)
- Workspace name, time zone and posting preferences
- Audit log of important actions (login, password change, etc.)
Content you upload
- Posts, captions, media (videos and images) that you schedule
- Scheduled publication times and channel connections
- Analytics about your own posts (via the social media APIs)
Connected social media accounts
- OAuth tokens from TikTok, Instagram and YouTube - stored encrypted (AES-256-GCM)
- Username, display name and profile photo of your connected accounts
Technical data
- IP address (in logs, kept max 30 days)
- Browser type and device info (in web server logs)
- Cookies - see our Cookie Policy
3. What do we use this data for
- Service delivery: publishing your posts at the right moment to the right channels.
- Account management: logging in, resetting passwords, verifying email, team invitations.
- Security: blocking brute-force attempts, keeping an audit log, detecting fraudulent accounts.
- Communication: important service emails (verification, reset, invites). No marketing without a separate opt-in.
- Product improvement: if you have accepted analytics cookies, anonymized usage figures.
4. Legal basis
We process your data on the basis of:
- Performance of the contract (you use our service) - for account, posts and publishing.
- Consent - for analytics cookies and marketing emails.
- Legitimate interest - for security and abuse detection.
- Legal obligation - for administration and any requests from authorities.
5. With whom do we share your data
We never sell your data to third parties. We only share what is strictly necessary with:
- Hosting: Hetzner Cloud (Germany) - server infrastructure.
- Email: Resend (EU) - to send transactional emails.
- Social media APIs: TikTok, Meta (Instagram) and Google (YouTube) - only when you connect those channels.
- Database/storage: runs on our own servers within the EU.
With all these parties we have - where applicable - a data processing agreement (DPA) or they fall under a comparable protection arrangement.
6. How long do we keep your data
- Account data: as long as your account is active. If you delete your account, we erase everything within 30 days.
- Server logs: 30 days.
- Audit log: 12 months, for security investigation.
- Cookie consent log: 24 months, as proof of given consent.
- Backups: up to 30 days after deletion.
7. Security
- Passwords hashed with bcrypt (12 rounds).
- OAuth tokens encrypted (AES-256-GCM) at rest.
- All traffic over HTTPS (TLS 1.2+).
- HTTPS-only cookies with SameSite protection against CSRF.
- Rate limiting on auth endpoints.
- Audit log of security-relevant actions.
8. Your rights (GDPR)
You have the right to:
- Access: request which data we hold about you.
- Rectification: have incorrect data corrected.
- Erasure: have your account and data deleted.
- Restriction: pause processing during a dispute.
- Objection: to processing based on legitimate interest.
- Data portability: receive your data in a machine-readable format.
- Withdraw consent: for example for analytics cookies, via the footer link "Cookie settings".
Do you have an account? The easiest route is via Account settings → Privacy & data: there you can download your data or delete your account directly.
Prefer a formal request, or do you no longer have an account? Email info@uploadlane.com or use the form below. We respond within 30 days.
9. Changes
We may amend this policy. We announce important changes by email or via a banner in the app. Today's version: last updated on May 1, 2026.