Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account information: your name and email address via Clerk authentication
• Social media tokens: OAuth access tokens for connected social media accounts, stored encrypted
• Content you create: post drafts, scheduled posts, ideas, and scripts you save in the platform
• Usage data: logs of post activity, publish status, and errors

2. How We Use Your Information

• To publish and schedule social media posts on your behalf
• To authenticate you and secure your account
• To display your post history and analytics
• To send you transactional notifications (e.g. publish failures)

3. Meta Platform Data

When you connect your Facebook or Instagram account, we receive and store:

• Your Facebook Page IDs and Page access tokens
• Your Instagram Business Account ID and username

We use this data solely to publish content you schedule through PostReel. We do not sell, share, or use this data for advertising purposes. You can disconnect your Meta accounts at any time from the Accounts page, which revokes our access tokens.

Our use of Meta platform data complies with the Meta Platform Terms and Meta Developer Policies.

4. Data Sharing

We do not sell your personal information. We share data only with:

• Clerk — authentication and user management
• Social media platforms — solely to publish content you request
• Infrastructure providers — hosting and database services, bound by data processing agreements

5. Data Retention

We retain your data for as long as your account is active. When you delete your account, your personal data and connected account tokens are deleted within 30 days. Post history may be retained in anonymised form for service improvement.

6. Security

OAuth access tokens are stored encrypted at rest. We use HTTPS for all data in transit. We follow industry-standard security practices and restrict access to user data to authorised personnel only.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Disconnect any social media account at any time

To exercise these rights, contact us at [email protected].

8. Cookies

We use session cookies for authentication. We do not use third-party tracking cookies or advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notice. The date at the top of this page indicates when the policy was last revised.

10. Contact

For privacy questions or data requests, contact us at [email protected].