Privacy Policy

1. Introduction

Postlitic ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Service at postlitic.com.

2. Information We Collect

Account Information:

• Name and email address (via Clerk authentication)
• Google account details (if you sign in with Google)

Social Media Data:

• Profile information (username, display name, avatar) from connected platforms
• Post metrics (likes, comments, shares, reach, impressions, watch time)
• OAuth access tokens (stored securely, used to fetch your data)

Usage Data:

• Pages visited, features used, and interactions within the Service
• IP address and browser type for security purposes

3. How We Use Your Information

• To provide and improve the Service
• To generate AI-powered analytics and insights from your social media data
• To send weekly performance reports (if enabled)
• To process payments and manage your subscription
• To respond to support requests
• To detect and prevent fraud or abuse

4. Third-Party Services

We use the following third-party services to operate the platform:

• Clerk — authentication and user management
• Neon (PostgreSQL) — database storage
• Anthropic (Claude API) — AI-generated insights
• Lemon Squeezy — payment processing
• Brevo — transactional email delivery
• Vercel — hosting and deployment
• Cloudflare — DNS and email routing

Each of these services has its own privacy policy. We only share the minimum data necessary with each provider.

5. Social Platform Data

When you connect a social media account (Instagram, TikTok, YouTube, LinkedIn), we access your data through each platform's official API in accordance with their developer policies. We only request the permissions necessary to provide analytics. Across all connected platforms, we do not sell your data, we do not use it for advertising purposes, and we do not use it to develop, improve, or train generalized AI/ML models.

• Instagram — governed by Meta's Platform Terms and Developer Policies.
• TikTok — governed by the TikTok Developer Terms of Service.
• LinkedIn — governed by the LinkedIn API Terms of Use.
• YouTube — governed by the Google API Services User Data Policy; see Section 6 below.

6. Google API Services — Limited Use Disclosure

Postlitic's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only use Google user data to provide and improve the analytics features you see in Postlitic.
• We do not transfer Google user data to third parties except as necessary to provide the Service, to comply with applicable law, or as part of a merger or acquisition with prior notice to you.
• We do not use Google user data for advertising purposes.
• We do not allow humans to read Google user data unless we have your affirmative agreement, it is necessary for security purposes, to comply with applicable law, or our use is limited to internal operations with the data aggregated and anonymized.
• We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days. Post metrics and analytics data may be retained in anonymized form for product improvement purposes.

8. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data
• Portability — receive your data in a machine-readable format
• Objection — object to certain processing activities

To exercise these rights, contact us at hello@postlitic.com.

9. Cookies

We use cookies for authentication (Clerk session) and security (OAuth state validation). We do not use advertising or tracking cookies. You can control cookies through your browser settings.

10. Data Security

We implement industry-standard security measures including encrypted connections (HTTPS), httpOnly cookies for tokens, and secure database storage. However, no method of transmission over the internet is 100% secure.

11. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related inquiries, contact us at hello@postlitic.com.