Privacy Policy
Postgust ("we", "us") is a social-media scheduling tool. This policy explains what data we handle and why. By using Postgust you agree to it.
Who operates Postgust
The data controller for the personal data described in this policy is Besh Vladyslav, Kyivska street, build 11, housing A, flat 12, Ternopil, Ternopilska region, Ukraine. You can reach us at support@postgust.com.
What we collect
- Account details — your email address and name, used to sign you in and to address you.
- Connected social accounts — the access tokens you grant for Facebook, Instagram, Threads, TikTok, LinkedIn, Pinterest and X, so we can publish on your behalf and read the statistics those platforms expose.
- Your content — the captions, hashtags, media and schedules you create.
- Usage data — basic server logs needed to run and secure the service.
How we use it
To schedule and publish your posts, generate captions when you ask for them, show your analytics, process payments and keep the service secure. We do not sell your data and we do not use your content to train anything.
Service providers
We share data only with processors that help us run Postgust:
- Supabase — database, authentication, media storage.
- Stripe — subscription payments; we never see your card number.
- Anthropic — generating captions from the topic you type.
- Resend and Telegram — the notifications you switch on.
- The social platforms themselves — publishing through their official APIs, under the permissions you grant.
Social platform data
We access your social accounts only to publish the posts you schedule and to read the metrics their official APIs provide. We do not scrape, and we do not collect anything beyond those APIs. You can disconnect any account at any time; disconnecting deletes its token.
Retention and deletion
Posts and connected accounts can be deleted by you at any time. Your whole account, with every workspace you own, its posts, connected accounts and their tokens, uploaded media and invitations, can be deleted in Settings; it happens at once and cannot be undone. Server logs are kept for a short time for security and then discarded.
Security
Access tokens are stored server-side and travel only over encrypted connections. No system is perfectly secure, but we take reasonable measures to protect your data and tell you if something goes wrong.
Your rights
You may access, correct, export or delete your personal data. Deletion is self-service in Settings; for anything else, write to us and we will answer within a reasonable time.
Changes
We may update this policy. Material changes are announced in the app before they take effect.
Questions? Write to support@postgust.com.