Privacy Policy

Effective: August 1, 2026

Your privacy matters. This policy explains what data Postinger ("Posty," "we," "us") collects, how we use it, and your rights. We keep it straightforward — no legal gymnastics.

1. What We Collect

When you use Posty via WhatsApp, we collect:

• Phone number — to identify your account and send you messages
• Messages you send Posty — text, voice notes, and photos you share for content creation
• Business information — your business name, niche, preferred tone, and timezone (provided during onboarding)
• Instagram access token — if you connect your Instagram account for auto-publishing (we never see your Instagram password)
• Generated content — captions, images, and posts Posty creates for you

2. How We Use Your Data

• Content creation — your messages and business info are used to generate personalized Instagram posts
• Publishing — your Instagram token is used solely to publish posts you've approved
• Daily check-ins — your timezone is used to send morning check-ins at a reasonable hour
• Performance analytics — we fetch post insights (likes, comments, reach) from Instagram to send you summaries

We never sell your data. We never use your content for advertising. We never share your business information with third parties for marketing.

3. Third-Party Services

Posty uses these services to function:

• WhatsApp (via Baileys) — for messaging. Your messages pass through WhatsApp's infrastructure.
• Google Gemini AI — to generate captions and classify your messages. Your prompts are sent to Google's API. Google's Gemini API terms apply.
• Instagram Graph API — to publish posts and fetch insights. Meta's Platform Terms apply.

4. Data Storage & Security

Your data is stored in a PostgreSQL database on our private server infrastructure. We use industry-standard security practices including encrypted connections and access controls. Media files (photos, generated images) are stored on the same secured server.

5. Data Retention

• Account data — kept as long as you use Posty
• Posts and content — kept indefinitely for your reference (you can request deletion)
• Voice notes — processed and deleted within 24 hours
• Instagram tokens — stored until you disconnect or they expire

6. Your Rights

You can at any time:

• Access — ask what data we have about you
• Delete — request deletion of your account and all associated data
• Disconnect — revoke Instagram access by removing the linked device in Instagram settings
• Stop — simply stop messaging Posty; we won't contact you unless you re-initiate

To exercise any of these rights, message Posty directly or email [email protected].

7. Children's Privacy

Postinger is not intended for users under 16. We do not knowingly collect data from children.

8. Changes to This Policy

If we make significant changes, we'll notify you via WhatsApp before they take effect. Minor clarifications won't trigger a notification but will be reflected here with an updated effective date.

9. Contact Us

Questions? Concerns? Just want to say hi?

Email: [email protected]