1. Introduction

Welcome to Postory ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media management platform.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

• Register for an account (name, email address, password)
• Subscribe to a paid plan (billing information, payment details)
• Contact our support team (name, email, message content)
• Connect social media accounts (OAuth tokens, account information)
• Upload content (posts, images, videos, media files)

2.2 Automatically Collected Information

When you use our Service, we automatically collect certain information, including:

• Usage Data: Pages visited, features used, time spent, click patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies
• Log Data: Server logs, error reports, performance metrics

2.3 Social Media Data

When you connect your social media accounts, we collect:

• Account profile information (username, profile picture, bio)
• Access tokens for posting and retrieving data
• Analytics and engagement metrics from your posts
• Follower counts and audience demographics

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To create and manage your account, process transactions, and provide core features
• Content Publishing: To schedule and publish posts to your connected social media accounts
• AI Content Generation: To generate personalized content suggestions based on your preferences
• Analytics: To provide insights and performance metrics for your social media content
• Communication: To send service updates, security alerts, and support messages
• Improvement: To analyze usage patterns and improve our Service
• Security: To detect and prevent fraud, abuse, and security incidents
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Third-Party Service Providers

We share information with trusted third-party vendors who perform services on our behalf:

• Payment processors (Stripe, PayPal) for billing and subscriptions
• Cloud hosting providers (AWS, Google Cloud) for data storage
• Analytics services (Google Analytics) for usage insights
• Email service providers for transactional emails
• AI service providers for content generation features

4.2 Social Media Platforms

We share content with social media platforms as directed by you when you schedule and publish posts.

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Government or regulatory requests
• Protection of our rights, property, or safety
• Prevention of fraud or illegal activities

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Strict access controls and authentication mechanisms
• Regular Audits: Security audits and vulnerability assessments
• Secure Infrastructure: Hosting on secure, compliant cloud platforms
• Password Protection: Passwords are hashed using bcrypt

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

• Provide our Service and maintain your account
• Comply with legal obligations (tax records, transaction history)
• Resolve disputes and enforce our agreements
• Maintain backups for disaster recovery (up to 90 days)

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your information for certain purposes
• Restriction: Request restriction of processing in certain circumstances
• Withdrawal of Consent: Withdraw consent for data processing

To exercise these rights, please contact us at privacy@postory.com. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Essential Cookies: Required for authentication and core functionality
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Understand how you use our Service
• Marketing Cookies: Deliver relevant advertisements (with your consent)

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our Service.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, to protect your information in accordance with this Privacy Policy.

10. Children's Privacy

Our Service is not intended for children under 13 years of age (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete the information.

11. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis for processing: Consent, contract performance, legitimate interests
• Right to lodge a complaint with your local supervisory authority
• Right to object to automated decision-making and profiling
• Data Protection Officer contact: dpo@postory.com

12. CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your information)
• Right to non-discrimination for exercising your privacy rights

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our Service. The "Last updated" date at the top of this policy indicates when it was last revised. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: