Overview
Polymath OS is a private publishing operations dashboard owned and operated by Polymath Publishing House. It helps authorized team members manage brand calendars, social media assets, approvals, and publishing workflows across connected social accounts.
This policy explains what information Polymath OS collects, why we collect it, and how connected social-platform data is handled.
Information We Collect
- Account login information for approved Polymath OS users, such as email address, display name, role, and session metadata.
- Brand and content workspace data, including brand names, publishing calendars, content packets, captions, assets, approvals, schedules, and publishing logs.
- Connected social account metadata, such as platform name, account label, handle, provider account ID, publish target ID, board ID, OAuth status, and token-update timestamps.
- OAuth tokens or provider credentials needed to publish or manage connected accounts. Tokens are stored server-side and are not returned to the browser.
- Operational logs used to debug publishing attempts, platform errors, API calls, and approval status.
How We Use Information
- To authenticate authorized users and enforce private access to the dashboard.
- To connect social accounts that the account owner authorizes through OAuth or approved platform credentials.
- To queue, review, schedule, and publish approved content to selected social accounts.
- To show readiness, status, and error messages for publishing workflows.
- To maintain audit trails for approvals, rejections, scheduled posts, and publishing attempts.
Connected Platform Data
When a user connects Facebook, Instagram, Threads, Pinterest, YouTube, X, TikTok, or another supported platform, Polymath OS only requests the permissions needed for the selected workflow. Examples include reading account identity, reading board/page/profile metadata, and publishing approved content.
We do not sell connected-platform data. We do not use connected-platform data for unrelated advertising. We do not expose access tokens in the frontend. We do not publish anything without an internal approval and scheduling workflow.
Pinterest API Data
For Pinterest integrations, Polymath OS may use authorized Pinterest API access to read account and board metadata, create or manage pins, and confirm publishing status for accounts connected by the authorized user. Pinterest data is used only to provide publishing and account-management functionality inside Polymath OS.
Meta Platform Data
For Meta integrations, Polymath OS may use authorized access to Facebook Pages, Instagram professional accounts, and Threads profiles to publish approved content and record publishing status. Meta data is used only for the connected publishing workflow selected by the authorized account owner.
Storage And Security
- Polymath OS is private and requires allowlisted authentication for dashboard access.
- OAuth tokens are stored server-side in an encrypted token vault or in deployment secrets.
- Secrets are not intentionally stored in source code, frontend state, screenshots, or public logs.
- Access is limited to authorized internal users and service automations.
Data Sharing
We share data with connected platforms only as necessary to perform the action requested by an authorized user, such as publishing a scheduled post or validating a connected account. We may use infrastructure providers for hosting, storage, logging, and authentication.
Data Retention
Workspace records, publishing logs, and connection metadata are retained while they are useful for operations, compliance, debugging, or audit history. OAuth tokens can be revoked or deleted when an account is disconnected or when deletion is requested.
Data Deletion
To request deletion of connected-account data or OAuth tokens, email polymathpublishinghouse@gmail.com with the account, platform, and brand to remove. You can also visit the Data Deletion page linked below.
Contact
Questions about this policy can be sent to polymathpublishinghouse@gmail.com.