Getting Started
Connect accounts and publish your first post
1
Create an Account
Sign up at app.codivupload.com using email or Google.
2
Create a Profile
Go to Profiles and create a brand profile. Each profile represents a brand or client with its own social accounts.
3
Connect Social Accounts
Click the platform buttons on your profile to connect via OAuth:
YouTube, TikTok, Instagram, Facebook, LinkedIn, X, Threads, Pinterest, Bluesky
Privacy & Security:
- All OAuth tokens are encrypted with AES-256-GCM before storage — they are never visible to anyone, including CodivUpload staff.
- CodivUpload only requests the minimum permissions needed to publish content and read analytics.
- You can disconnect any account at any time from the Profiles page. Disconnecting immediately deletes all stored tokens.
- Your data is never shared with third parties or used for purposes beyond what you authorized.
By connecting, you agree to each platform's terms: YouTube, TikTok, Instagram, Facebook, LinkedIn, X, Pinterest, Bluesky. See our Privacy Policy.
4
Create Your First Post
Go to Upload Posts → New Post and:
- Select post type (text, image, video, document)
- Choose your profile and target platforms
- Add content (title, description, media)
- Choose: Publish Now, Schedule for Later, or Add to Queue
- Click Publish
5
Get Your API Key
For programmatic access, go to API Keys and create a key. Use it in requests:
curl -X POST https://api.codivupload.com/v1/posts \
-H "Authorization: Bearer YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"post_type": "text",
"profile_name": "my_brand",
"platforms": ["x", "threads"],
"description": "Hello world from CodivUpload!"
}'Security Best Practices:
- Never expose your API key in client-side code, public repositories, or browser requests.
- Store keys in environment variables (
.env) — never hardcode them. - Rotate keys periodically and revoke any that may have been compromised.
- Each key grants full access to your workspace — treat it like a password.
Token Validity
Platform OAuth tokens have different lifetimes. CodivUpload auto-refreshes where possible.
| Platform | Duration | Notes |
|---|---|---|
| TikTok | ~60 days | Auto-refreshed on regular use |
| ~60 days | May expire on password change | |
| ~60 days | May expire on password change | |
| ~60 days | Auto-refreshed on regular use | |
| YouTube | ~6 months | 7 days if using own API quota (testing mode) |
| X (Twitter) | Long-lived | Stable unless revoked |
| Threads | ~60 days | Same as Instagram |
| ~365 days | Auto-refreshed | |
| Bluesky | Session-based | App password, no expiry |