Privacy Policy | PostFaster

1. Introduction

PostFaster ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered content creation platform.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

Name and email address
Account credentials (username and password)
Payment information (processed securely through Stripe)
Profile information and preferences
Communications with us

2.2 Content and Usage Information

Content you create, generate, or publish through the Service
Social media account connections and authorization tokens
Usage data, including features used and time spent
Content performance metrics and analytics

2.3 Automatically Collected Information

IP address and device information (via Vercel Analytics)
Browser type and version
Operating system
Page views and navigation patterns (privacy-focused analytics)
Date and time of access
Minimal cookies (Firebase session) and browser localStorage

Note: We use Vercel Analytics, a privacy-focused analytics service that does not collect personally identifiable information or use invasive tracking. For more details, see our Cookie Policy.

3. How We Use Your Information

We use the collected information for various purposes:

To provide, maintain, and improve the Service
To process your transactions and manage subscriptions
To generate AI-powered content based on your inputs
To publish content to your connected social media accounts
To personalize your experience and provide recommendations
To communicate with you about updates, offers, and support
To monitor and analyze usage patterns and trends
To detect, prevent, and address technical issues or security threats
To comply with legal obligations
To enforce our Terms of Service

4. AI and Data Processing

PostFaster uses artificial intelligence to generate content. When you use our AI features:

Your prompts and inputs are processed by AI models (including third-party providers)
Generated content may be used to improve our AI models and Service quality
We implement safeguards to protect your data during AI processing
You retain ownership of content you create using our Service

5. Information Sharing and Disclosure

We may share your information in the following circumstances:

5.1 Third-Party Service Providers

Payment processors (Stripe) for billing and subscription management
AI service providers (OpenAI, Anthropic) for content generation
Social media platforms (LinkedIn, Twitter/X, Instagram, Facebook, TikTok) for publishing
Cloud hosting providers (Vercel, AWS, MongoDB Atlas) for infrastructure and data storage
Authentication services (Firebase) for secure user authentication
Analytics services (Vercel Analytics) - privacy-focused, no personal data collection
Security services (Google reCAPTCHA) for bot protection

5.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. Data Security

We implement appropriate technical and organizational security measures to protect your information:

Encryption of data in transit and at rest
Secure authentication and access controls
Regular security assessments and updates
Limited employee access to personal information
Secure payment processing through PCI-compliant providers

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. We will delete or anonymize your information upon account deletion, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

8. Your Privacy Rights

Depending on your location, you may have the following rights:

Access: Request access to your personal information
Correction: Request correction of inaccurate information
Deletion: Request deletion of your information
Data Portability: Request a copy of your data in a portable format
Opt-out: Opt out of marketing communications
Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at [email protected]

9. Cookies and Browser Storage

PostFaster uses minimal cookies and primarily relies on browser localStorage for functionality:

Cookies: Only Firebase session cookies and Vercel Analytics (privacy-focused)
localStorage: User ID, profile data, connected social accounts, and preferences
sessionStorage: Temporary authentication state for multi-tab coordination
JWT Tokens: Stored in memory by Firebase SDK, not in cookies or localStorage

You can clear browser storage through your browser settings. However, this will log you out and remove your preferences. For detailed information, see our Cookie Policy.

10. Third-Party Links

The Service may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your jurisdiction. We take steps to ensure that your information receives adequate protection.

13. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected, used, and shared
Right to delete personal information
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising your privacy rights

14. GDPR Compliance

For users in the European Economic Area (EEA), we process your data in accordance with the General Data Protection Regulation (GDPR). Our legal bases for processing include:

Contract performance (to provide the Service)
Legitimate interests (to improve and secure the Service)
Consent (where you have provided it)
Legal obligations (where required by law)

For more information about GDPR compliance, see our GDPR page.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

16. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: [email protected]

For general inquiries: [email protected]