⚠️ This is a staging environment for testing purposes only.

Plugio logo
Plugio

The creator toolkit to grow and monetize. Post to YouTube, Instagram and Facebook, auto-reply to comments, and sell from one link in bio.

Official APIs. No passwords.

Platform
Content StudioAuto DM & InboxPortfolio & StorePricing
Compare
Buffer alternativeLinktree alternativeManychat alternative
Resources
Blog & GuidesFAQsCommunityContact
Legal
Privacy PolicyTerms of ServiceData deletion
PLUGIO
© 2026 Plugio. Built by creators, for creators.
Plugio logoPlugio
Why Plugio
TestimonialsPricing
Legal

Privacy & Terms

Plain-language documentation of how Plugio protects your YouTube, Instagram, and Facebook accounts — and the rules that govern your workspace.

Last updated October 2026|Official platform APIs · Secure OAuth
Account SafetyPrivacyYouTubeInstagram & FacebookWhat We CollectTermsCompliance

On this page

Account SafetyPrivacyYouTubeInstagram & FacebookWhat We CollectTermsCompliance
01Account Safety

Publish with confidence. Your channels stay protected.

Creators ask one question first: will connecting a tool risk a ban? Plugio is built on official YouTube and Meta APIs with secure OAuth — the same approved method major platforms expect.

20+

Accounts tested

We stress-tested Plugio across 20+ live YouTube, Instagram, and Facebook accounts — publishing, scheduling, and syncing through official APIs. Used as intended, this approach is designed for stable, policy-compliant delivery without password sharing or unofficial bots.

Official APIs only

Every publish, schedule, and analytics sync runs through the official YouTube Data API and Meta Graph APIs for Instagram and Facebook — not scrapers, bots, or unofficial scripts.

Secure OAuth — no passwords

You connect with Google and Meta’s own login screens. Plugio never asks for your social media passwords and never stores them.

Your accounts stay yours

Disconnect anytime from Plugio or from Google / Meta settings. Revoking access stops Plugio from acting on that account immediately.

Policy-compliant publishing

When used as intended, Plugio publishes through platform-approved APIs. You remain responsible for content that complies with each platform’s community guidelines.

  • No password sharing
  • No unofficial bots
  • Disconnect in one click
02Privacy Policy

How we handle your data

Six principles that govern every decision we make about your information.

Authorized access only

Plugio only accesses data you explicitly authorize through official OAuth from Google and Meta. We never ask for your passwords and never access anything beyond what you grant.

Secure data storage

Tokens and user data are encrypted at rest and in transit using industry-standard TLS 1.3 and AES-256 encryption.

Revoke access anytime

Disconnect any integration from your Plugio dashboard or from Google / Meta settings. Revoking access stops publishing immediately.

We never sell your data

Plugio does not sell, rent, or share your personal data with third parties for advertising or marketing.

Minimal collection

We collect only what is necessary — profile info, connected account tokens, and content you choose to publish.

Purpose-limited use

OAuth access is used only for publishing, scheduling, and analytics via official platform APIs — never for unrelated purposes.

03Google & YouTube

YouTube & Google permissions

We request only the permissions needed to publish, manage, and analyze your YouTube content.

YouTube Data API v3

via Google OAuth 2.0 · Secure OAuth

Read-only YouTube analytics

Uses youtube.readonly to sync channel and video metrics (views, subscribers, likes) for dashboards you control.

Upload and publish videos

Uses youtube.upload so Plugio can send videos you approve to your channel, including resumable uploads for large files.

Update or remove videos you manage

Uses youtube.force-ssl so Plugio can edit metadata or delete a video when you explicitly request it — matching YouTube Data API requirements.

Access basic Google profile information

Your name and profile picture are used to personalize your Plugio account experience.

Access email address for login

Your Google email is used as your Plugio account identifier and for important account notifications.

Plugio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (opens in a new tab), including the Limited Use requirements.
04Instagram, Facebook & Meta

Instagram & Facebook permissions

We use official Meta Graph APIs to publish and analyze Instagram Business / Creator accounts and connected Facebook Pages.

Instagram Graph API · Meta

via Meta OAuth 2.0 · Official APIs

Connect Instagram Business & Creator accounts

Identifies and links your Instagram Professional account to Plugio for publishing and analytics access (instagram_basic, pages_show_list).

Publish posts, reels, images, and videos

Enables user-initiated publishing and scheduling of video Reels and posts directly to Instagram and Facebook Pages (instagram_content_publish, pages_manage_posts).

Access analytics and engagement insights

Read-only access to view reach, impressions, follower growth, likes, comments, and engagement rates for Instagram accounts and Facebook Pages (instagram_manage_insights, read_insights, pages_read_engagement).

Reply to comments and send messages (comment automation)

Only if you turn it on. For each Instagram post you choose, Plugio reads new comments only to check whether they contain your keyword. When one does, Plugio posts a public reply and sends the commenter a direct message on your behalf and, once they reply or tap a button, the follow-up messages you set up, such as your link. If you ask for it, Plugio also checks whether the commenter follows your account before sending the link. Messages you turn on work the same way for people who write to you first: a keyword in a direct message, a reply to one of your stories, a mention of your account in their story, or a first message that gets your welcome. Plugio reads these only to check your keyword and to answer once, within the 24 hours Instagram allows. If you turn on “Ask for their email first”, the person is asked for their email in that conversation, told it is only used to send them what they asked for and the odd update, and that it can be removed on request; Plugio keeps it for you as a lead only if they send it. Plugio never messages anyone who has not commented or written to you first (instagram_manage_comments, instagram_manage_messages, pages_manage_metadata).

Discover managed Facebook Pages

Required by Meta Graph API to discover your managed Facebook Pages and linked professional Instagram profiles (pages_show_list).

All Instagram integrations comply with Meta's Platform Policies (opens in a new tab) and the Instagram Graph API Terms (opens in a new tab).
05Data Practices

What we collect & why

A clear map of the data categories Plugio stores and the reason for each.

Account information

Create and manage your Plugio account

  • Name and email address (from Google OAuth)
  • Profile picture URL
  • Connected platform account IDs

OAuth tokens

Perform authorized actions on your behalf

  • Access tokens for YouTube, Instagram, and Facebook APIs
  • Refresh tokens for maintaining connections

Content data

Publish and schedule your content

  • Videos, images, and captions you upload to Plugio
  • Scheduling preferences and publishing history

Analytics data

Show performance insights in your dashboard

  • Views, likes, comments, and engagement metrics
  • Follower growth and reach statistics

Comment automation data

Run the automations you switch on and show your results

  • Technical identifiers and the status of each conversation (for example, “link sent”), kept for up to 30 days and then deleted automatically
  • The commenter’s public Instagram username, kept for up to 24 hours so replies can address them
  • Daily counts of comments, messages, links sent, link clicks, and the sales and amounts that came from an automation’s link, so you can see your results
  • Links in messages are short Plugio links. When someone opens one, Plugio counts the click and keeps a small cookie for 7 days so a later purchase can be credited to the right automation. The cookie holds a short code, not your personal details
  • Your automation settings: keywords, message wording, the link you chose and your limits
  • For a welcome message, a small marker (an Instagram ID, nothing else) that this person has already written to you, kept for 30 days so the welcome is not sent twice
  • Emails given to an automation that asks for them: the address, the person’s Instagram username and the date, kept for you until you delete them (one by one, or all when you disconnect Instagram or ask for your Meta data to be deleted). They are shown only to you and are never sold or shared
  • Not stored: the text of comments and the text of messages, apart from an email address someone sends in answer to your question. Plugio checks comments for your keyword and does not keep them
  • Delete an automation, disconnect Instagram, or ask for your Meta data to be deleted (see Data deletion), and its settings and daily totals are removed
06Terms of Use

Terms & conditions

The rules that govern your use of Plugio. Sections start expanded so you can read everything — collapse any clause you don’t need.

By accessing or using Plugio at plugio.app (opens in a new tab), you agree to be bound by these Terms & Conditions. If you do not agree, please do not use the service.

9 sections

Plugio integrates with YouTube via the official YouTube Data API and with Instagram and Facebook via official Meta Graph APIs. Connections use secure OAuth — Plugio never asks for or stores your platform passwords. Publishing, scheduling, and analytics are performed only through these platform-approved interfaces. When you use Plugio as intended and follow each platform’s community guidelines, this architecture is designed to keep your accounts protected and policy-compliant. You remain responsible for the content you choose to publish.

By connecting your YouTube, Instagram, or Facebook accounts to Plugio, you confirm that you own or have the legal right to manage those accounts. You are solely responsible for all content published through Plugio and for ensuring your use complies with each platform’s terms of service and community guidelines.

Plugio will only take actions on your connected accounts that you have explicitly authorized — such as publishing scheduled content, updating video details, or fetching analytics. We will never post, delete, or modify content without your direct instruction or a schedule you set.

You may disconnect any integration at any time from your Plugio account settings. You can also revoke access directly from your Google Account settings or Meta App Settings. Disconnecting will immediately stop Plugio from accessing that account. For Facebook and Instagram data specifically, see our Data Deletion Instructions at https://plugio.app/data-deletion — including how to send a deletion request from Facebook Settings.

Plugio YouTube, Instagram, and Facebook features rely on official APIs provided by Google and Meta. Platform availability, feature access, rate limits, and policy enforcement are controlled by these third parties and may change. Plugio is not responsible for service interruptions, account actions, or restrictions imposed by Google or Meta.

You may not use Plugio to publish spam, misleading content, or content that violates any platform community guidelines. Automated abuse, scraping beyond authorized API use, attempts to bypass platform security, or using Plugio for any illegal purpose is strictly prohibited and may result in immediate account termination.

You retain full ownership of all content you create and publish through Plugio. By using Plugio, you grant us a limited, non-exclusive license to process and transmit your content solely for the purpose of providing the service.

Plugio is provided on an as-is basis. We make no warranties regarding uninterrupted service, error-free operation, or specific outcomes on third-party platforms. To the maximum extent permitted by law, Plugio shall not be liable for any indirect, incidental, or consequential damages, including actions taken by Google, Meta, or other platforms regarding your accounts.

We reserve the right to update these Terms at any time. We will notify users of material changes via email or an in-app notification. Continued use of Plugio after changes take effect constitutes acceptance of the updated terms.

07Compliance

API compliance & policies

Plugio is built on official YouTube and Meta APIs and follows platform policies — including Google Limited Use and Meta Platform Terms.

Google API Services User Data Policy

Plugio adheres to the Google API Services User Data Policy, including the Limited Use requirements.

View policy (opens in a new tab)

Google Limited Use Requirements

We only use Google user data to provide or improve user-facing features. We do not use it for advertising or selling to third parties.

View requirements (opens in a new tab)

Meta Platform Policies

Plugio complies with Meta Platform Terms and Developer Policies for all Instagram and Facebook integrations.

View policy (opens in a new tab)

Data Controller & Platform Data Protection

Plugio operates as the independent Data Controller for data processed through plugio.app (contact: support@plugio.app). Plugio does not sell, license, or share Meta Platform Data with third-party processors or advertising brokers. All processing is strictly purpose-limited to authorized scheduling, publishing, and analytics.

View privacy terms (opens in a new tab)

Google API Services User Data Policy disclosure

Plugio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (opens in a new tab), including the Limited Use requirements. We do not use Google user data for advertising, selling to third parties, or any purpose unrelated to providing the Plugio service.

Questions about privacy or terms?

We're happy to walk through any section with you.

support@plugio.appplugio.app (opens in a new tab)