Privacy Policy

1. Introduction

PostAll ("we," "us," or "our") operates the website postall.io and provides social media scheduling, automation, and AI-powered content creation services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing or using our Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our Service.

2. Information We Collect

Personal Information: When you register for an account, we collect your name, email address, and password. If you sign in via Google OAuth, we receive your Google profile name, email address, and profile photo.

Social Media Data: When you connect social media platforms (Facebook, Instagram, X/Twitter, LinkedIn, YouTube, TikTok, Pinterest, Threads, Reddit, Telegram, WhatsApp, and others), we collect and store OAuth access tokens, platform user IDs, page/channel IDs, and profile information necessary to post content on your behalf.

Content Data: We store the text, images, videos, and other media you create or upload through our Service for scheduling and publishing purposes.

Payment Information: When you subscribe to a paid plan, payment processing is handled by our third-party payment processors (Razorpay, PayPal). We do not store your full credit card number, CVV, or bank account details. We may receive transaction IDs, plan information, and billing status.

Usage Data: We automatically collect information about how you interact with our Service, including IP address, browser type, device type, operating system, pages visited, time spent, referring URL, and clickstream data.

Cookies and Tracking: We use cookies, local storage, and similar technologies to maintain your session, remember preferences (theme, language), and analyze usage patterns. See Section 10 for details.

Device Information: We may collect device identifiers, screen resolution, and browser settings to optimize your experience.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To authenticate your identity, manage your account, and provide the core functionality of scheduling, publishing, and automating posts across your connected social media platforms.

• AI Features: To power our AI caption generator, hashtag generator, content rewriter, translator, and AI image generation features using Google Gemini AI. Your content prompts are sent to Google's Gemini API for processing. We do not use your content to train AI models.

• Analytics: To provide you with post performance analytics and engagement metrics from your connected platforms.

• Communication: To send you transactional emails (account verification, password reset, billing receipts), service updates, and optional marketing communications (which you can opt out of).

• Improvement: To analyze usage patterns, diagnose technical issues, and improve the Service.

• Security: To detect and prevent fraud, abuse, and unauthorized access.

• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Social Media Platforms: When you publish content through our Service, your content is sent to the respective platforms (Facebook/Meta, Instagram, X/Twitter, LinkedIn, YouTube/Google, TikTok, Pinterest, etc.) via their official APIs. Each platform's own privacy policy governs how they handle that content.

• Payment Processors: Razorpay and PayPal process your payments. Their privacy policies apply to payment data.

• AI Service Providers: Google Gemini AI processes your content generation requests. Google's AI privacy policy applies.

• Cloud Storage: Cloudflare R2 stores your uploaded media files securely.

• Legal Requirements: We may disclose your information if required by law, court order, or governmental authority.

• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, accounting, or security purposes. Published content that has already been posted to third-party platforms is governed by those platforms' retention policies.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.

• Correction: Request correction of inaccurate or incomplete data.

• Deletion: Request deletion of your personal data. You can delete your account from Settings at any time.

• Portability: Request your data in a portable, machine-readable format.

• Opt-Out: Opt out of marketing communications by clicking "unsubscribe" in any email or adjusting notification settings in your dashboard.

• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

• Disconnect Platforms: You can disconnect any social media platform from your dashboard at any time, which revokes our access to that platform.

To exercise these rights, contact us at [email protected].

7. Children's Privacy

Our Service is not directed to individuals under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at [email protected].

8. International Data Transfers

Our servers are located in various regions. By using our Service, you consent to the transfer of your information to servers and service providers that may be located outside your country of residence. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.

9. Security

We implement industry-standard security measures to protect your data, including:

• TLS/HTTPS encryption for all data in transit

• Encrypted storage of sensitive credentials (OAuth tokens, API keys)

• Docker-isolated application environments

• Regular security updates and vulnerability patching

• Rate limiting and anti-abuse protections

However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Cookies and Tracking Technologies

We use the following cookies and similar technologies:

• Essential Cookies: Required for authentication, session management, and basic functionality. These cannot be disabled.

• Preference Cookies: Remember your theme (dark/light/glass), language, and display settings.

• Analytics Cookies: Help us understand how users interact with our Service to improve the user experience. These are anonymized.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.

11. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

Website: https://postall.io/contact