Held carefully, and never kept hostage.

In practice

What that means concretely.

• Platform tokens are encrypted at rest with a dedicated key-encryption key, decrypted only at the moment a platform call is made on your behalf, never logged, and never shared.
• Connections are yours to revoke. Every account is connected on the platform's own consent screen and can be disconnected in Cassit, or on the platform itself, at any time — for Google and YouTube that is Google's third-party connections page.
• Media is erased on a fixed schedule. Uploads are held through the publish-and-verify window and then deleted — 14 days after a verified publish, 30 days for anything never approved. Erasure is byte-level and logged.
• Your numbers are your numbers. Performance data is shown to you and used to plan your own brand's next work. There is no advertising use, no resale, and no profiling of anyone.
• Export everything, any time. Posts, ledgers, books, connections — the workspace exports in full, and deletion removes the account record and all associated data within 30 days, with confirmation when complete.
• Requests from public authorities are reviewed for legal validity, challenged when unlawful or overbroad, answered with the minimum necessary, and documented — the full policy is in the privacy policy.

The letter of all of this lives in the Privacy Policy, the Terms of Service, and the data deletion page.

Infrastructure

Where it runs.

Cassit runs on Cloudflare's edge with a managed PostgreSQL ledger and object storage for media in flight. Drafting uses the Google Gemini API; audio is stripped from video before any model sees it, and nothing involving minors is processed or published without an explicit human approval for that specific post.