Privacy Policy for PostEsy

About this policy

PostEsy, based in India, helps you connect social accounts, create and schedule content, and publish to platforms you authorize. This policy applies to our website and service. Contact support@post-esy.com with privacy questions or requests.

Information we collect

• Account and contact information, such as your name, email address, login details, and support communications.
• Connected account information from platforms you authorize, such as profile names, usernames, images, account or channel identifiers, and permissions.
• Access and refresh tokens and related information needed to maintain authorized connections.
• Drafts, posts, media, titles, tags, settings, schedules, publishing status, and platform response identifiers.
• Technical and usage information needed to operate, secure, and troubleshoot the service, including session, browser, and log information.
• Subscription and transaction information needed to administer your plan. Payment providers may collect payment details under their own privacy policies.
• Prompts, content, and provider configuration you choose to use with AI features.

Connected platforms and TikTok

When you connect a platform, you choose whether to grant the permissions it presents. Depending on the permissions and features used, PostEsy receives account and profile information, stores authorization tokens, and sends content and settings to the platform at your request.

When you connect TikTok, PostEsy requests basic profile access (user.info.basic) to identify and display your account, and publishing access (video.publish) to obtain available creator settings and publish content you request. Depending on the permissions granted, information can include your account identifier, display name and profile image, authorization tokens, available privacy and interaction options, videos or photos, captions, chosen settings, and publishing status or identifiers. We use this information to operate the connection and complete your publishing requests.

You can disconnect TikTok in PostEsy and revoke PostEsy's access in your TikTok account settings. To request deletion of TikTok information held by PostEsy, email support@post-esy.com or follow our data deletion instructions. Revoking access does not itself delete content already published on TikTok. TikTok handles information under its own privacy policy and terms.

How we use information

We use information to provide and maintain the service, authenticate users, connect accounts, create and publish content, administer subscriptions, respond to requests, troubleshoot, prevent abuse, protect security, and meet legal obligations. Where applicable law requires a legal basis, processing may be based on performing our agreement, our legitimate interests in operating and securing the service, your consent, or compliance with legal obligations. You may withdraw consent where applicable without affecting earlier lawful processing.

Sharing and service providers

We share information with social platforms when you connect an account or request an action. We use providers for functions such as hosting, storage, application delivery, email, payments, and AI features. If you use an AI feature, your request and relevant content may be sent to the selected AI provider. Providers handle information according to their own terms and applicable agreements. We may disclose information when required by law or reasonably necessary to protect rights, security, or users.

We do not sell personal information or use connected platform data for advertising or unrelated profiling.

Cookies and similar technologies

PostEsy uses cookies and similar browser storage to maintain sessions, authenticate users, and support security and service functionality. Blocking them may prevent parts of the service from working.

Retention and security

We retain information while your account is active and as needed to provide the service, resolve disputes, prevent abuse, and meet legal obligations. Retention varies by information type and purpose. When information is no longer needed, we delete or de-identify it, subject to limited retention in backups, logs, or records needed for legal or security purposes.

We use technical and organizational safeguards designed to protect information, including restricting access as appropriate. No system can be guaranteed completely secure.

Your choices and rights

You can disconnect a social account in PostEsy and revoke access through the platform's settings. Disconnecting may prevent future publishing but does not necessarily remove content already published. You can request access, correction, deletion, or other rights available under applicable law by contacting us. We may verify your identity before acting. You may also have the right to complain to your local privacy regulator.

See our data deletion page for instructions. We aim to process verified deletion requests within 30 days, subject to applicable law and permitted retention.

International processing

Information may be processed or stored in countries other than your own by PostEsy or its providers. Where applicable law requires safeguards for international transfers, we will use appropriate safeguards.

Children

The service is not intended for children who cannot lawfully use it or consent to processing under applicable law. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

Changes and contact

We may update this policy as the service or legal requirements change. We will update the date above and provide notice where required. Contact support@post-esy.com with questions or requests.