Privacy Policy

Last Updated: April 14, 2025

Postopus (“we”, “our”, or “us”) provides this Privacy Policy to inform you about our policies and procedures regarding the collection, use, protection, and disclosure of personal information through our website at https://postopus.app ("Site"), our mobile apps, APIs, and all related services (collectively, the “Service”).

This Privacy Policy also outlines your rights and choices regarding your personal information and how to contact us if you have questions.

1. Personal Information We Collect

We collect personal information from you in several ways:

1.1 Information You Provide

Registration Data: Name, email address, password, time zone, and other profile preferences.
Payment Information: We use Stripe to process payment data. We do not store credit card numbers ourselves.
Support Interactions: Data you provide during customer support interactions.

1.2 Connected Social Media Accounts

When you link your social media accounts (e.g., X (Twitter), Bluesky, Threads), we access:

Profile image, username, account ID
Access tokens
Post content you create/schedule
Engagement data (clicks, likes, reposts, impressions)

1.3 Automatically Collected Data

Log Data: IP address, browser type, time stamps, and usage patterns.
Cookies: We use cookies and similar tracking tech for session handling, analytics, and marketing.
Device Information: Operating system, browser language, and referring URLs.

2. How We Use Your Personal Information

To provide, maintain, and improve our Service.
To authenticate users and process transactions.
To schedule, publish, and analyze social media posts.
To personalize your experience and provide content recommendations.
To send transactional or marketing emails (only with your consent).
To comply with legal obligations and enforce our Terms.

3. How We Share Your Information

Third-Party Services: We use services such as Supabase (auth/storage), Stripe (payments), Google Analytics (analytics), and others for technical functionality. These providers are bound by confidentiality and data protection obligations.
Social Media APIs: Your posts are shared with the social platforms you authorize us to post to on your behalf.
Legal Requirements: We may disclose data to law enforcement if required by law or subpoena.
Business Transfers: In the case of a merger or acquisition, data may be transferred to the successor entity.

4. International Data Transfers

Postopus is operated from the UK. If you are accessing our service from outside the UK, your data may be transferred and stored in countries that have different data protection laws. We ensure all international transfers are protected by adequate safeguards such as Standard Contractual Clauses (SCCs).

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption, secure storage, and access restrictions. However, no system is 100% secure, and we cannot guarantee absolute protection.

6. Data Retention

We retain your data as long as your account is active, and for a reasonable period thereafter for legal, audit, or dispute resolution purposes. You may request deletion of your data at any time.

7. Your Rights

You have the right to:

Access the personal data we hold about you.
Correct inaccurate or outdated information.
Request deletion ("right to be forgotten").
Object to or restrict processing.
Withdraw consent at any time.
File a complaint with the UK ICO or relevant authority in your region.

8. Children's Privacy

Postopus is not intended for children under the age of 16. We do not knowingly collect personal data from minors. If you believe we have collected such data, please contact us and we will delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy occasionally. Changes will be posted on this page, and we will notify you if material changes affect your rights.

10. Contact Us

For any questions about this Privacy Policy, or to exercise your rights, contact us at:
Email: enes.zrl@gmail.com
Address: Nottingham, UK