Back home
GIGSTACKSOCIAL

Data & Access, Explained

A plain-language breakdown of how login works, what's stored today, and exactly what access GigStackSocial would need from each platform to go fully live.

How login works right now

You create an account with an email + password. The password is one-way hashed and a signed session cookie keeps you logged in. This is a functional demo-grade implementation — before handling real customer accounts at scale, it should be swapped for an audited auth provider with rate limiting, breach monitoring, and 2FA support.

What's stored today

GigStackSocial runs on a real Neon Postgres database — your data persists across sessions and server restarts.

  • users — email + hashed password
  • brands — brand names and venue labels you create
  • accounts — connected-account placeholders (demo status; no real OAuth tokens exist yet)
  • posts — captions, chosen images, selected platforms, and schedule times

What GigStackSocial would need to go live per platform

Instagram / Facebook (Meta): A registered Meta developer app, verified business, and Meta's App Review approval.
TikTok: A registered TikTok developer app, domain/URL ownership verification, and approval for the Content Posting API.
X (Twitter): A developer account on X's current pay-per-use API.
YouTube / Google Business: A Google Cloud project with the relevant API enabled.

What access exists today

Nothing in this build posts to real social accounts yet. Going live requires the platform approvals above, production hosting, and a security review.