Security

Authorization without collecting passwords

Crossreel minimizes platform data and keeps the creator in control of account access and publication.

Official OAuth

Passwords, SMS codes and backup codes stay on Instagram, TikTok and Google domains. OAuth state and short-lived browser flows protect the return path.

Encrypted tokens

Platform access and refresh tokens are encrypted at rest and are not included in application logs or public pages.

Explicit publication consent

Connecting an account is separate from publishing. Every immediate or scheduled publication has a final user-confirmed plan.

Controlled retention

Original source videos are retained for up to seven days unless deleted earlier. Disconnecting an account deletes its active token bundle and identity record.

No advertising data use

Crossreel does not sell platform user data or use it for advertising, credit scoring or model training.

No blind duplicate retries

After an ambiguous provider response, Crossreel reconciles status instead of automatically repeating the upload.