Hubitos Third-Party Platform Authorization Notice

This notice explains how Hubitos connects to third-party accounts, what authorization allows, and how you can withdraw it. Read it together with our Privacy Policy and Terms of Service. Contact: support@hubitos.ai.

Last updated: October 4, 2026 · Effective date: October 10, 2026

1. You choose which services to connect

An integration is optional unless it is needed for the feature you request. Signing in to Hubitos, connecting a social account, linking a messaging bot and authorizing a shop are separate actions. One does not automatically authorize the others.

Before approving a connection, review the provider, application name, account or Page, and requested permissions shown on the authorization screen. Where granular choices are available, choose the permissions appropriate to your task. Refusing a permission may prevent the related feature from working. You should not provide Hubitos support with your third-party password, verification code or access token.

2. Supported connection types

Availability depends on the released version, region, configuration and permissions approved by the platform. This table describes connection purposes, not a guarantee of access to every listed capability.

Connection	Information or permission involved	Purpose and boundary
X	Account identity, approved read/write permissions, media upload and persistent authorization where granted	Show the account, prepare or publish approved posts, retrieve permitted information and maintain your requested connection. The X posting connection requests tweet.read, tweet.write, users.read, offline.access and media.write; the actual grant shown during authorization controls.
Facebook Pages	Authorized account identity, selected Pages, Page publishing and permitted metrics	Publish to the selected Page and show permitted results. A Page connection does not mean unrestricted access to your personal Facebook data.
Instagram	Authorized profile/account identifiers, content publishing and permitted account or content information	Manage approved Instagram content and associated status or metrics, subject to the account type and permissions supported by the platform.
Threads	Authorized account identifiers, content and publishing permissions, and permitted metrics	Manage and publish user-approved Threads content.
TikTok	Approved profile information, videos, statistics, publishing permissions and settings	Identify the account, analyze permitted content and submit approved posts. TikTok may review, reject, remove or restrict content.
YouTube	Approved channel identifiers, upload permissions, video metadata and permitted metrics	Publish to the selected channel and show permitted status and information through YouTube API Services. This does not grant access to Gmail or Google Drive.
LinkedIn	Authorized member or organization identity and the publishing or reporting permissions actually granted	Publish approved content to supported destinations and show permitted results.
Google or Zalo sign-in	The identity and profile information returned for login, such as a provider identifier and email when supplied	Authenticate or link your Hubitos account. Login authorization alone does not authorize posting.
Telegram or Zalo bot, where available	Linked messaging-account identifiers, messages and attachments sent to the bot, and delivery information	Receive your instructions and return results through the linked bot.
TikTok Shop, where available	Seller-approved shop identifiers, shop details, granted scopes and credentials	Establish a separate shop connection. Product, order or customer-data functions require the relevant feature and disclosure; a connection alone is not a claim that all shop functions are implemented.

3. Direct connections and integration providers

Hubitos uses a separate OAuth flow for X. For Instagram, Facebook Pages, TikTok, YouTube, Threads and LinkedIn, the Social Hub connection flow uses Upload-Post to support authorization and publishing. You may therefore see Upload-Post or its application identity during authorization or in a platform's connected-app settings.

Upload-Post and the destination platform may receive or maintain the authorization information necessary for that connection, as well as account/channel identifiers, submitted content, publishing settings, status and permitted metrics. Read Upload-Post's Privacy Policy. A provider-managed connection does not imply that Hubitos itself stores every platform access token.

Permissions for these managed connections are controlled by the authorization flow and platform configuration. We do not list an unverified, fixed permission set as though it were the actual grant for every user. Contact support@hubitos.ai if a request appears unrelated to your selected feature.

4. TikTok-specific authorization

Hubitos may support TikTok Login Kit, Display API and Content Posting API directly or through the integration actually enabled. Connecting TikTok authorizes only the access you approve. It does not constitute TikTok's endorsement of Hubitos or grant unrestricted access to private TikTok data.

You remain responsible for the media, caption, hashtags, audience and privacy settings, interaction settings and required commercial or AI-content disclosures. Hubitos initiates publishing only following your request or confirmation, including a scheduled action you approve, and must respect any additional per-action confirmation required by TikTok.

You must comply with TikTok's applicable Terms of Service, Privacy Policy, Community Guidelines and developer rules. TikTok decides whether content is accepted, published, recommended or maintained. Hubitos is an independent service and is not owned, sponsored, endorsed or operated by TikTok.

TikTok Shop seller authorization is independent of TikTok social authorization. Review the shop selected and the scope shown by TikTok Shop separately.

5. Actions after you authorize

Authorization enables the permitted connection; it is not blanket approval for every possible action. Publishing and automation operate according to the content, destination and instructions you approve. A scheduled action may execute later, and background synchronization may retrieve the permitted information needed to maintain the feature. Some authorizations include refresh access so you do not need to reconnect for each task.

Review any confirmation screen before submitting. Stop or edit future scheduled actions if your instructions change. Sending content to a platform makes that content subject to the platform's processing and visibility settings.

6. Disconnecting and revoking access

In Hubitos, open the applicable account-management or authorization controls, select the connection and choose the available disconnect or revoke action.
Review the confirmation carefully. In versions that offer pending-content cleanup, it can affect draft targets and scheduled posts as described on screen. That behavior is not a promise to erase every historical record.
You can also revoke the grant in the platform's connected-app settings. For Google and YouTube, use Google security settings. For a provider-managed connection, look for the application identity used in the actual authorization.
If disconnection fails or publishing is already in progress, contact support@hubitos.ai. Revocation cannot necessarily recall content already submitted to a platform.

Removing a Hubitos-held credential and revoking a grant at the platform are distinct operations. Withdrawing access stops the use of that authorization as it takes effect, but does not itself delete all data already stored by Hubitos or the platform. Use the Data Deletion Instructions for a deletion request. Uninstalling Hubitos does not revoke all grants or cancel scheduled server-side activity.

7. Google and YouTube conditions

YouTube features use YouTube API Services. By using those features, you agree to the YouTube Terms of Service. Google's processing is described in the Google Privacy Policy.

Hubitos' use and transfer of Google API information will comply with the Google API Services User Data Policy, including its Limited Use requirements. Platform-data restrictions remain applicable when an intermediary supports the connection.

8. Help and privacy requests

For permission questions, connection failures, revocation assistance or deletion requests, email support@hubitos.ai with your Hubitos account email and the relevant provider and account identifier. Do not include passwords or tokens. We may request proportionate verification before changing a connection or disclosing or deleting account data.