Privacy Policy

Postgic (“Postgic,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your choices when you use our website and services (the “Service”).

Account information. Name, email address, password (stored securely via our auth provider), organization details, timezone, and billing information for paid plans.

Content you provide. Posts, captions, media files, schedules, and workspace settings.

Connected social account data. When you connect a platform such as X, we receive information authorized by you through OAuth, which may include:

• Platform user ID, username, and display name
• Profile image URL
• OAuth access and refresh tokens (stored encrypted)
• Scopes granted during authorization
• Identifiers for posts published through Postgic

Usage and technical data. Log data, device and browser information, IP address, and analytics about how you use the Service.

We use information to:

• Provide, maintain, and improve the Service
• Authenticate you and manage your account
• Schedule and publish content to connected accounts at your direction
• Display connected account details in your dashboard
• Process payments and communicate about your subscription
• Detect abuse, fraud, and security incidents
• Comply with legal obligations

We do not sell your personal information or X user data obtained through the Service.

When you connect X, Postgic accesses X data only to provide features you use. Typical uses include:

• Identifying your connected X account in the Postgic dashboard
• Publishing posts and media you schedule or submit for publishing
• Maintaining authorization to publish on your behalf using refresh tokens
• Recording publish status and post identifiers for your workspace history

We access X through official X APIs subject to the X Developer Agreement and Policy. We do not use X data to build unrelated profiles, sell data, or provide access to third parties except as described in this policy.

You can disconnect X from Postgic at any time under Accounts settings, or revoke access in X connected apps. When disconnected, we stop using your X tokens and delete or de-identify associated credentials according to our retention practices.

We may share information with:

• Service providers that help us operate Postgic (hosting, storage, payments, email, analytics), under contractual confidentiality and security obligations
• Social platforms such as X, solely to perform actions you request (for example, publishing a scheduled post)
• Legal and safety recipients when required by law or to protect rights, safety, and security
• Business transfers in connection with a merger, acquisition, or asset sale, with notice where required

We retain account and workspace data while your account is active. Connected platform tokens are retained while an account remains connected. You may request deletion of your account by contacting us. We may retain limited information where required for legal, security, or backup purposes.

We use administrative, technical, and organizational measures designed to protect your information, including encryption of platform access tokens at rest. No method of transmission or storage is completely secure.

Depending on your location, you may have rights to access, correct, delete, or export personal data, or to object to or restrict certain processing. Contact us to make a request. You may also update account details in Settings.

We may process information in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers.

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date.

Privacy questions or requests: privacy@postgic.com