Privacy Policy
Last updated 12 October 2026
In short:
- Charon is a desktop app. Your clips, captions, schedules and keys stay on your computer.
- Data only leaves your computer to go to a service you've connected, to do what you asked (write captions, post a clip, read its stats).
- If you use Charon's engine to post while your PC is off, it holds the posts it is going to send, and the two logins it needs, encrypted.
- We don't sell your data, show you ads, track you, or use your data to train AI.
- You can delete everything at any time. See Data deletion.
Who we are
Charon (“Charon – Socials Manager”) is made by Jiimbones, an independent creator based in New Zealand (“we”, “us”). For anything about this policy or your data, email admin@theboneyards.nz.
What Charon is
Charon is a Windows app that helps creators publish short videos. You add a clip, edit it, write or generate captions, and schedule it to the platforms you've connected. Charon itself runs on your computer. It has no Charon account, and we don't run servers that receive your data, except for the optional engine described below.
Data kept on your computer
Charon stores these in its folder on your computer, and nowhere else:
- Your clips' file locations, edits, thumbnails, captions, drafts and schedules.
- A history of what was posted where, with links and the steps each post went through.
- Performance numbers for your posts (views, likes, comments, shares) read from the platforms.
- Your settings and creator profile (name, what you make, words to avoid).
- Keys and logins for the services you connect (for example your Buffer API key, Bluesky app password and Discord webhooks), encrypted with Windows' own data protection so only your Windows account can read them.
We can't see any of this. Uninstalling Charon and deleting its folder removes it.
Data sent to services you connect
Charon talks directly to each service you connect, using your own keys, and only to do what you ask. Each service handles that data under its own privacy policy.
| Service | What Charon sends or reads, and why |
|---|---|
| Buffer | Your captions, titles, options, the clip's link and its time, to schedule posts to TikTok, Instagram and (unless you connect YouTube directly) YouTube. Charon reads back each post's status, link and stats. |
| Cloudflare R2 (your own storage) | The video file, held at an unguessable link until it has posted, so Buffer and the engine can fetch it. Charon deletes it once it's no longer needed; a rule on your storage removes anything left after 40 days. |
| YouTube (Google), if you connect it | The video, its title, description, tags, category, visibility and publish time, to upload and schedule it on your channel; first comments you write. Charon reads back your channel's name, each video's status and counts (views, likes, comments) and its YouTube Analytics numbers (watch time, average view, shares, subscribers gained). |
| Anthropic (Claude) | When you ask for captions: a few still frames from the clip, its name, any note you add, your creator profile and caption style. Anthropic's commercial terms don't allow it to train on this data. |
| Bluesky | Your handle and app password to sign in, the video and post text to publish, and replies for first comments. Charon reads public like, reply and repost counts. |
| Discord | Announcements (text, an embed with links, and a frame or short copy of the clip) sent through the webhooks you add. |
| Twitch | With your permission: your channel's live status, stream title and category (for go-live announcements) and your channel's clips (to watch and download them into Charon). |
| OBS (on your computer) | A screenshot when you go live, and saving your replay buffer, over OBS's local connection. |
Charon's engine
The engine is an optional service, running on Cloudflare, that sends scheduled Bluesky posts and Discord announcements on time even when your computer is off. If you connect it:
- It holds your Bluesky handle and app password, and your #video-uploads Discord webhook, encrypted with AES-256-GCM. It uses them only to send the posts you scheduled.
- It holds each scheduled post: its text, options, time, and the video file or frame it needs.
- It records what happened: when each post went out, its link, and any error, which Charon reads back into its Queue.
- Video files are deleted once their posts have gone out or been cancelled (and are removed after 40 days regardless). Post records and their history are deleted 90 days after the post is finished.
- You can delete everything the engine holds for you at any time from Charon's settings.
Cloudflare provides the servers and storage. Your data can be processed in any country where Cloudflare operates, including outside New Zealand. See Cloudflare's privacy policy.
YouTube, Google, Instagram, Facebook and TikTok
Charon posts to TikTok and Instagram through Buffer, and to YouTube either through Buffer or directly. Where Charon connects to one of these platforms directly, you sign in with that platform and choose what to allow, and these terms apply:
YouTube and Google
- Charon uses YouTube API Services. By using Charon's YouTube features you agree to the YouTube Terms of Service, and Google's handling of your data is covered by the Google Privacy Policy.
- Charon uses the YouTube data you allow to upload and schedule your videos, set their titles, descriptions, tags and visibility, change their publish time or delete them when you move or cancel them in Charon, post first comments you write, and show your channel's name and your videos' statistics and YouTube Analytics numbers. It reads nothing else, and it never does any of this without you asking for it in Charon.
- Charon's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not sold, not used for advertising, not shared except as needed to provide these features or as required by law, and not used to train AI models.
- Your Google sign-in is stored encrypted on your computer, and YouTube's numbers are kept there only while Charon is allowed to read them. Disconnecting YouTube in Charon withdraws its access at Google and deletes the sign-in and the YouTube numbers it saved. You can also revoke Charon's access at any time from the Google security settings page at myaccount.google.com/connections; Charon then deletes the sign-in and those numbers the next time it runs.
Instagram, Facebook and TikTok
- Charon uses the access you grant only to publish the posts you create, read their insights, and post first comments you write. It doesn't read your messages, followers' personal details or other accounts' content.
- You can remove Charon's access from the platform's settings at any time (for Facebook and Instagram, Settings → Apps and websites). See Data deletion for how to delete what Charon holds.
What we don't do
- We don't sell, rent or trade your data.
- We don't use advertising, tracking pixels or analytics in Charon or on this website.
- We don't use your clips, captions or account data to train AI models.
- We don't read your data on the engine, except when you ask us to help with a problem, and then only what's needed.
Security
Keys on your computer are encrypted with Windows' data protection. Everything Charon sends goes over HTTPS. The engine encrypts the logins it holds, keeps only a one-way hash of each sign-in token, and accepts requests only from Charon apps that have connected with a setup code. No system is perfectly secure; if we learn of a breach affecting your data, we'll tell you without undue delay.
Your rights and choices
Under New Zealand's Privacy Act 2020 (and similar laws where you live) you can ask what personal information we hold about you, ask us to correct it, and ask us to delete it. Most of your data is on your own computer and in your own accounts, where you control it directly. For anything on the engine, use “Delete my data from the engine” in Charon or email us. If you're not happy with our answer, you can complain to the Office of the Privacy Commissioner.
Children
Charon isn't meant for children under 13, and we don't knowingly hold data about them.
Changes
If we change this policy, we'll update the date at the top. If a change affects how your data is used, we'll say so in Charon before it takes effect.
Contact
Email admin@theboneyards.nz.