Privacy policy
This policy explains what personal data Postauto collects, why, and what rights you have over it. The data controller is Postauto ("Postauto", "we"). Contact: [email protected]. The short version: we collect only what the product needs to publish your posts, we encrypt your social credentials, and we do not sell your data.
1. Data we collect
- Account data. Email address, name, and a password hash (we never store plaintext passwords), managed by our authentication system.
- Social account credentials. When you connect a channel we store the OAuth tokens, app passwords, bot tokens, or webhook URLs needed to publish on your behalf. These are encrypted at rest with AES-256-GCM before they reach our database and are never logged or displayed in plaintext.
- Content. The posts you draft, the media you upload, schedule times, and the per-channel publish results (including error messages returned by networks).
- Billing data. Payments are processed by Stripe. We store your plan, billing status, and Stripe customer reference. Your full card details never touch our servers.
- Technical data. Server logs (IP address, timestamps, requested endpoints) kept for security and debugging, and the emails we send you (delivery status).
- What you tell us when you get in touch. If you send the enterprise enquiry form on our pricing page, or write to us, we store your name, email address, and anything you chose to put in the message, so that a person can answer you. You do not need an account to use that form and we do not need one to reply.
- Advertising click identifiers, only with your consent. If you approve Advertising in the cookie preferences of our marketing site and you arrived from an advertisement, we receive that advertisement's click identifier (Google's gclid, Meta's fbc and fbp, and the equivalents) and store it against your account if you create one. It lets us tell Google and Meta that their advertisement produced a customer. It is not used to profile you, it is never combined with your posts or your connected channels, and leaving Advertising off means we never receive it.
The app carries no tracking tags. app.postauto.io has no analytics tag or advertising pixel. Your drafts, scheduling and publishing activity are not sent to those providers. Separately, the server can report account and subscription conversions using attribution identifiers previously supplied with your approval.
This marketing site does run advertising trackers, and only if you say yes. postauto.io can load Google Analytics (through Google Tag Manager) and the Meta pixel. Analytics and Advertising are separate optional choices, both off by default in every country. Google Analytics loads only with Analytics approval; Meta and ad-click attribution require Advertising approval. Analytics approval also lets the Google Analytics client identifier travel to sign-up to associate registration with a visit. See the cookie policy for exactly what each one sets.
2. Why we process it (lawful bases)
- Performance of a contract: operating your account, storing your drafts, and publishing to the channels you connect.
- Legitimate interests: securing the service, preventing abuse, debugging failures, sending essential service emails about your account, and answering an enquiry you sent us.
- Legal obligation: tax and accounting records tied to payments.
- Consent: analytics and advertising measurement on the marketing site, including the Meta pixel and the click identifiers described above. These categories are opt-in. Turn a category off in Cookie preferences and save to stop its future measurement on this marketing site and its identifiers in new links to the app. Clearing this site's data makes the banner ask again.
Cookie preferences do not change attribution already carried into another app tab or stored on our server. Later account and subscription conversions can still be reported using those identifiers within the retention period in section 5. You can withdraw that yourself in the app, under Settings, Profile, Advertising measurement: the stored identifiers are cleared and no later conversion is reported. To request removal of other previously collected data, contact [email protected].
3. Sharing
We share data only with the service providers that run Postauto (hosting, payments, email, CDN) and with the social networks you explicitly connect, and only as needed to publish your content. The current list, with locations, is on the subprocessors page. We do not sell personal data.
Advertising is the one exception, and it is yours to refuse. If you approve Advertising on the marketing site, Google and Meta can receive the fact that a visit and, later, a sign-up happened, tied to the advertisement you clicked. They never receive your posts, your connected channels, your drafts or anything you do inside the app.
4. International transfers
Our primary infrastructure is hosted in the EU (Germany). Some providers (payment, email delivery, and the analytics and advertising services named above) process data in the United States; where they do, transfers rely on recognized safeguards such as the EU Standard Contractual Clauses or an adequacy decision. Transfers for advertising happen only after you consent to them.
5. Retention
- Account and content data: kept while your account exists.
- Social credentials: deleted when you disconnect the channel or delete your account.
- Account deletion: personal data is deleted or anonymized within 30 days, except records we must keep for legal or accounting reasons.
- Server logs: kept for a short rolling window for security and debugging.
- Enquiries you send us: kept while the conversation is useful and for as long as we need them for our own records, then deleted. Ask us and we will delete yours sooner.
- Advertising click identifiers: kept for at most 90 days, which is the window in which Google and Meta will still accept a conversion for a click, then deleted.
- Security log: we record who did what in a team, and from which IP address, for actions that affect access, credentials, connected channels, publishing and billing. Kept for 365 days, then deleted automatically.
6. Your rights (GDPR)
If you are in the EEA, UK, or Switzerland you can ask us to access, correct, delete, or export your personal data, to restrict or object to processing, and to withdraw consent where processing is based on consent. Email [email protected] with your request; we respond within one month. You may verify your identity from your account email. You can also lodge a complaint with your local supervisory authority.
7. California residents (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect (listed in section 1), to request deletion, to request correction, to opt out of sharing for cross-context behavioural advertising, and to not be discriminated against for exercising those rights. We do not sell personal information. The advertising measurement described in section 1 may count as "sharing" under the CPRA; it happens only if you approve Advertising. Turn Advertising off in Cookie preferences and save to stop new advertising measurement and identifier handoffs from this marketing site, or clear this site's data. Existing app and server attribution is not revoked by those controls. Submit requests about previously collected data to [email protected]; we verify requests using your account email and respond within the statutory window. Authorized agents may submit requests with proof of authorization.
8. Security
Credentials are encrypted at rest, traffic is encrypted in transit, and access to production systems is restricted. Details, including our vulnerability disclosure contact, are in the security overview. No system is perfectly secure; if a breach affects your data we will notify you and the relevant authorities as required by law.
9. Children
Postauto is not directed at children and may not be used by anyone under 16 (or the local age of digital consent). We do not knowingly collect data from children.
10. Changes
We will update this policy as the product evolves and change the date at the top. For material changes we will notify you by email or in the app before they take effect. Changes do not remove your statutory rights or automatically authorize new uses of previously collected data. Where a new purpose requires consent, we will obtain it before that processing begins. Account suspension or termination does not remove your rights to make a privacy request; retention and deletion remain subject to this policy and applicable law.
11. Contact
Postauto
Email: [email protected]