Back to home

What we access, and why

Last updated: 14 August 2026

Sharing Tool only requests the permissions it needs to publish the posts you create. We do not read your private messages, we do not scrape your followers, and we do not use your content to train anything. Below is every permission we request, per network, with the reason.

NetworkPermissions requestedWhy we need it
XXtweet.read, tweet.write, users.read, offline.accessWrite is used to publish the posts you schedule. Read and users.read let us show your account name and confirm a post went out. offline.access keeps the connection alive so scheduled posts still publish while you are away.
LinkedInLinkedInopenid, profile, w_member_socialProfile is used to display which account you are publishing as. w_member_social publishes the posts you schedule to your own feed.
FacebookFacebook Pagespages_show_list, pages_read_engagement, pages_manage_postsShow list lets you choose which of your Pages to connect. Manage posts publishes your scheduled content. Read engagement is required by Meta alongside publishing permissions.
InstagramInstagraminstagram_basic, instagram_content_publishBasic identifies the Business account you are publishing as. Content publish creates the post. Instagram requires a Business account linked to a Facebook Page — that is Meta's rule, not ours.
TikTokTikTokuser.info.basic, video.publishBasic identifies the account you publish as. Video publish uploads the video or photo post you scheduled. TikTok requires media — text-only posts are not possible on this network.
YouTubeYouTubeyoutube.upload, youtube.readonlyReadonly identifies your channel so you can pick which one to publish as. Upload publishes the video you scheduled, using your text as the title and description.
PinterestPinterestboards:read, pins:read, pins:writeBoards read lets you choose which board a pin goes to. Pins write creates the pin you scheduled. Pinterest requires an image on every pin.
ThreadsThreadsthreads_basic, threads_content_publishBasic identifies your account. Content publish creates the post you scheduled.

What we never touch

  • Direct messages and private conversations
  • Your followers' or friends' personal data
  • Advertising accounts, budgets or payment details
  • Content from accounts you have not connected

Withdrawing access

You can disconnect any account from the Accounts page in your dashboard. Doing so deletes the stored access token immediately. You can also revoke access from the network's own settings — in that case our token stops working and the account is marked as needing reconnection.

Questions? Write to us at info@katreajans.net