Privacy policy

1. Who this policy covers

Postisy is operated by Postisy in United States. This policy applies to our website and hosted publishing workspace. For privacy questions, contact support@postisy.com. A social platform’s own policies govern information it handles independently.

2. Information we process

• Account and workspace details, such as your email address, profile information, membership and account settings.
• Connected-account identifiers, names, profile images, granted permissions, access tokens and refresh tokens needed to provide the connection.
• Content you upload or create, including captions, images, videos, drafts, scheduling instructions and publishing results.
• Platform information returned by authorized APIs, such as channel details, posts, engagement statistics and analytics supported by the connection.
• Technical and support information, including request logs, errors, session information and messages you send us.

3. How we use information

We use this information to operate your workspace, authenticate users, maintain social connections, store drafts and media, carry out your scheduling instructions, show available analytics, troubleshoot issues and protect the service. Where applicable law requires a legal basis, this processing supports delivery of the service, your consent for optional connections, our legitimate interests in security and support, or legal obligations.

4. Social platform access

Connecting an account authorizes the permissions shown by that platform. Logging into a platform alone does not complete the connection. Postisy may retain tokens so scheduled actions can run when you are offline. You can disconnect a channel and revoke authorization in the platform’s settings.

Postisy uses YouTube API Services when you connect YouTube. By using YouTube features within Postisy, you agree to be bound by the YouTube Terms of Service. Google’s handling of information is described in the Google Privacy Policy. You can revoke Postisy’s access through Google Account permissions. See data deletion to request removal of data held by Postisy.

5. Sharing and access

Content and requests are sent to the platforms you choose. Workspace members may access information according to their permissions. Infrastructure and service providers process information needed to host and operate Postisy. If you use an optional external integration, information needed for that feature is sent to its provider. We may disclose information when legally required or to investigate abuse and protect rights.

We do not sell connected-platform data. Connected-platform information is used to provide the features you authorize, not to build advertising profiles. Postisy’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data obtained through APIs to train generalized AI models.

6. Storage and security

We use HTTPS and access controls to protect the service. Account, content and connection data are stored in the service’s databases and media storage. No internet service can guarantee absolute security. Keep credentials private and report suspected unauthorized access promptly. Hosting and platform providers may process information outside your country.

7. Retention and deletion

Information is retained while needed for your workspace, scheduled actions, support, security or applicable legal requirements. Disconnecting authorization does not by itself erase every stored draft, media file or previously published post. You can manage content in the workspace and request deletion through support@postisy.com. We may need to verify account ownership. Necessary legal or security records and backup copies may remain until their applicable retention or rotation ends.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, export or delete information, restrict or object to processing, withdraw consent, or complain to a relevant authority. Contact support@postisy.com to make a request. Revoking access can prevent future scheduled actions from completing; review your schedule first.

9. Cookies and children

Read our cookie policy for details about sessions and preferences. Postisy is intended for adults and business users, not children under 18. If you believe a child has provided personal information, contact us.

10. Changes

We will update this page when our practices change and revise its date. Material changes will be communicated where required by applicable law.