Privacy Policy

1. Introduction

Welcome to PostRite. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our social media scheduling service.

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, and profile picture from your Google account or provided via Magic Link sign-in.
• Social Media Data: Access tokens and page/account information from connected platforms (Meta, X/Twitter, LinkedIn, TikTok, YouTube, Pinterest, Google Business Profile, Discord, Telegram, WhatsApp, Threads) to publish content on your behalf.
• Content: Posts, images, and media you create and schedule through our service.
• Usage Data: Information about how you interact with our service.

3. How We Use Your Information

We use your information to:

• Provide and maintain our service
• Publish scheduled content to your connected social media accounts
• Send you service-related notifications
• Improve and optimize our service

4. Data Sharing

We do not sell your personal data. We only share your information with third-party services (Meta, X/Twitter, LinkedIn, TikTok, YouTube, Pinterest, Google, Discord, Telegram, WhatsApp) as necessary to provide our scheduling functionality, and only with your explicit consent through OAuth authorization.

5. Cookies and Analytics

The PostRite product itself uses no analytics or tracking software — no third-party pixel, tag or session recorder runs inside the application. It sets only the cookies strictly necessary to operate (for example, authentication, session, and CSRF-protection cookies). The one exception is the advertising click identifier described below, which the application keeps in your browser's local storage when you arrive from an ad, under the consent rules set out in that paragraph.

Our public marketing website (postrite.app) uses Google Analytics to understand how visitors find and use the site. This is loaded with Google Consent Mode and is disabled by default: no analytics cookies are set and no data is collected until you give consent through our cookie banner. Google Analytics may process this data on servers located in the United States.

The marketing website also uses Microsoft Clarity, a product analytics tool that captures aggregated usage insights such as heatmaps and session replays to help us improve the site. Clarity uses cookies and is likewise disabled by default: its script is not loaded and no cookies are set until you accept through our cookie banner. Data collected by Clarity is processed by Microsoft.

The marketing website offers a live chat, hideBot, which we host ourselves — your messages are not sent to a third-party chat provider. The chat is not loaded until you have answered the cookie banner, and it sets no cookies: it keeps a conversation reference in your browser's local storage so a conversation can be continued across pages, which is why it also loads if you decline analytics. If you start a conversation, the messages you send and any contact details you choose to share are processed by us to answer you, and may be handled by an AI model provider to generate a reply.

When you reach the marketing website through a campaign link, we read the campaign parameters in the address (such as utm_source or an advertising click identifier) so we can tell which campaign brought you here. On this website they are stored in your browser only after you accept through the cookie banner, and are deleted if you later reject. When you follow a link from here into the application, the parameters are always carried in the address — that is how the campaign survives the hand-off — but the application only keeps them under the same rules: if you are in the European Economic Area, the United Kingdom or Switzerland, only once you have accepted; elsewhere, unless you have refused. Your decision travels with the link, and the application deletes its own copy as soon as it receives a refusal.

If you create a PostRite account after arriving through an advertising click, we associate that click identifier with your account and tell Google Ads that the campaign resulted in a trial or a paid subscription. If you are in the European Economic Area, the United Kingdom or Switzerland, we do this only if you accepted advertising cookies — there, leaving the banner unanswered counts as a refusal. Elsewhere we do it unless you refused. This is sent from our servers, not from your browser, and contains the click identifier, when the event happened and, for a purchase, its value. It never includes your name, e-mail address or any other contact detail. If you refuse, nothing is sent and anything still waiting to be sent is cancelled.

You can accept or reject analytics at any time, and change a previous choice using the “Cookie Preferences” link in the website footer. Rejecting analytics does not affect your ability to use PostRite. A rejection made here takes effect on this website immediately; in the application it takes effect the next time you open it from a link on this site, which is when your decision reaches it and anything still queued is cancelled.

The marketing website also uses Ahrefs Web Analytics, a cookieless analytics tool: it sets no cookies and collects no personal data, so it does not depend on the cookie consent banner.

6. Data Security

We implement industry-standard security measures to protect your data. Access tokens for connected platforms are encrypted at rest. However, no method of transmission over the Internet is 100% secure.

7. Your Rights

You have the right to:

• Access your personal data
• Delete your account and associated data
• Disconnect social media accounts at any time
• Export your data

8. Data Retention

We retain your data for as long as your account is active. When you delete your account, we will delete your personal data within 30 days, except where required by law.

9. Contact Us

If you have questions about this privacy policy, please contact us at privacy@postrite.app

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.