Privacy Policy

Our commitment to your privacy

At Posttely, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media management platform and services.

By accessing or using Posttely's website, services, or platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

1. Information we collect

We collect information that you provide directly to us, information we obtain automatically when you use our services, and information from third-party sources.

1.1 Account information

When you create an account, we collect:

• Name and username
• Email address
• Password (encrypted)
• Profile information
• Payment and billing information (processed securely through payment processors)
• Subscription and plan details

1.2 Social media account information

When you connect your social media accounts, we collect and store access tokens and refresh tokens (encrypted), account identifiers, names and display names, profile pictures, account types, associated emails, and token expiration dates. We only access your accounts with your explicit authorization through OAuth—we never store your social media passwords.

1.3 Content and media

We collect posts, captions, media you upload, schedules, post status, and engagement metrics retrieved from platforms.

1.4 Workspace and team information

Workspace names, team member information, roles, permissions, and review workflows where you use collaboration features.

1.5 Usage and technical information

IP addresses, browser and device data, pages visited, sessions, error logs, and referral sources—collected automatically as described on the canonical policy.

1.6 Communication data

Information when you contact support, subscribe to emails, participate in surveys, apply for roles, or submit feedback.

1.7 Cookies and tracking

Essential cookies for sessions and authentication; preference cookies; analytics cookies may be added in the future with consent. You can control cookies in your browser—disabling essential cookies may affect functionality.

2. How we use your information

• Provide scheduling, publishing, and analytics features
• Authenticate accounts and manage OAuth connections
• Publish and retrieve content per your instructions
• Process subscriptions and billing
• Send service notifications and support responses
• Improve security and comply with legal obligations
• Marketing emails only with consent (opt-out available anytime)

3. Third-party services and integrations

We integrate with social platforms (including Instagram, Facebook, X, LinkedIn, Pinterest, Reddit, Mastodon, Tumblr, Bluesky, Threads, Google Business Profile, and others)—each has its own privacy policy.

Service providers may include cloud storage (e.g. AWS S3), hosting, email delivery, payment processors, stock imagery (e.g. Pexels), email validation, and reCAPTCHA—all bound by contract to protect your data.

OAuth is used for Google, Meta, and other platforms so you authorize access without sharing passwords; you can revoke access in settings.

4. Data sharing and disclosure

We do not sell your personal information. We may share data with your consent, with service providers under confidentiality agreements, when required by law, in business transfers, or as aggregated anonymized data that cannot identify you.

5. Data security

Industry-standard measures including encryption in transit (HTTPS/TLS) and at rest where applicable, access controls, secure token storage, audits, network protections, strong passwords, and optional 2FA. No method is 100% secure—you are responsible for safeguarding your credentials.

6. Data retention

We retain information as needed to provide services, comply with law, resolve disputes, and enforce agreements. Account deletion triggers deletion from active databases with retention where legally required; backups are addressed within a reasonable timeframe.

7. Your rights and choices

Depending on your location, you may access, correct, delete, restrict, port, or object to processing; withdraw consent where applicable; opt out of marketing; and disconnect social accounts in Posttely or on each platform.

Contact help@posttely.com. We respond within 30 days or as required by law.

8. International data transfers

Your information may be processed in countries other than your residence; we use appropriate safeguards such as standard contractual clauses and data processing agreements.

9. Children's privacy

Posttely is not intended for users under 13 (or the minimum age in your jurisdiction). We do not knowingly collect information from children—contact us if you believe we have.

10. California privacy rights (CCPA)

California residents may have rights to know, delete, and opt out of sale—we do not sell personal information. Contact help@posttely.com to exercise rights.

11. European privacy rights (GDPR)

EEA users have GDPR rights including access, rectification, erasure, restriction, portability, and objection. Legal bases include consent, contract performance, legitimate interests, and legal obligation.

12. Changes to this policy

We may update this policy; material changes may be posted here, with an updated date, and email for significant changes. Continued use after updates constitutes acceptance where applicable.

13. Contact us

Questions about this Privacy Policy: help@posttely.com. Data Protection Officer available upon request at the same address.

14. Additional information

Posttely acts as data controller for personal information processed through the platform. EEA users may lodge complaints with supervisory authorities. Third-party links are governed by those sites' policies.

By using Posttely's services, you acknowledge that you have read this Privacy Policy and agree to the collection, use, and disclosure of your personal information as described herein.