Legal

Privacy Policy

Last updated: January 1, 2026

Introduction

Welcome to Postilka. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our social media automation and content management platform. By using Postilka, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

1. Information We Collect 2. How We Use Your Information 3. Information Sharing and Disclosure 4. Data Retention 5. Data Security 6. Your Data Protection Rights 7. Cookies and Tracking Technologies 8. Third-Party Services 9. International Data Transfers 10. Children's Privacy 11. Changes to This Privacy Policy 12. Contact Us

1. Information We Collect

1.1 Information You Provide • Account Information: Name, email address, password, and organization details • Content Data: Posts, images, videos, captions, and other content you create or upload • Social Media Data: Information accessed via permissions you grant on platforms like Facebook, Instagram, TikTok, and LinkedIn, including your Name, Email Address, Profile Picture, Page IDs, and Insights data • Payment Information: Billing details and payment card information (processed securely by our payment provider) • Communication Data: Contact information and correspondence when you reach out to support 1.2 Information Collected Automatically • Usage Data: Pages visited, features used, click patterns, and session duration • Device Information: IP address, browser type, operating system, and device identifiers • Log Data: Access times, error logs, and performance metrics • Cookies and Similar Technologies: Session identifiers, preferences, and analytics data

2. How We Use Your Information

We use the collected information for the following purposes: • Service Provision: To operate, maintain, and deliver the Postilka platform and its features • Content Publishing: To schedule, publish, and manage your content across connected social media platforms • Account Management: To create and manage your account, authenticate users, and process payments • Customer Support: To respond to inquiries, provide technical assistance, and resolve issues • Platform Improvement: To analyze usage patterns, improve features, and develop new functionality • Security: To detect, prevent, and address technical issues, fraud, and security threats • Communications: To send service updates, security alerts, and (with your consent) marketing communications • Legal Compliance: To comply with legal obligations, enforce our terms, and protect our rights

3. Information Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances: • Social Media Platforms: Content you create is published to your connected social media accounts per your instructions • Service Providers: Third-party vendors who assist with hosting, analytics, payment processing, and customer support • Team Members: Within your organization if you use team features • Legal Requirements: If required by law, subpoena, or legal process • Business Transfers: In connection with a merger, acquisition, or sale of assets • With Your Consent: When you explicitly authorize us to share specific information

4. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Specifically: • Account data is retained while your account is active and for 90 days after account deletion • Content and media files are retained according to your settings and can be deleted at any time • Billing records are kept for 7 years to comply with financial regulations • Logs and analytics data are typically retained for 12 months for security and debugging purposes You can request deletion of your data at any time by contacting our support team.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data: • Encryption in transit (TLS/SSL) and at rest • Secure authentication with bcrypt password hashing • Regular security audits and vulnerability assessments • Access controls and least-privilege principles • Isolated production environments with monitoring • Incident response procedures and breach notification protocols While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Your Data Protection Rights

Depending on your location, you may have the following rights: • Access: Request copies of your personal data • Rectification: Request correction of inaccurate or incomplete data • Erasure: Request deletion of your personal data (right to be forgotten) • Restriction: Request limitation of processing under certain circumstances • Data Portability: Receive your data in a structured, machine-readable format • Object: Object to processing based on legitimate interests • Withdraw Consent: Withdraw consent at any time where processing is based on consent • Complain: Lodge a complaint with your local data protection authority 6.1 Social Media Data Deletion (Facebook/Meta) In accordance with Facebook Platform rules, we provide the following instructions for deleting your data: • Revoke Access: You can remove our app from your Facebook settings by going to Settings & Privacy → Settings → Apps and Websites, finding "Postilka," and clicking Remove. • Request Data Deletion: If you wish to permanently delete the data we have collected from your Facebook account (such as your name, email, or page IDs), please contact us at [email protected] with the subject line "Facebook Data Deletion Request." We will remove your data from our systems within 30 days. 6.2 TikTok Data Deletion In compliance with TikTok Developer policies, you may request the deletion of your TikTok data processed by Postilka: • Revoke Access: You can disconnect Postilka from your TikTok account by navigating to your TikTok app Settings and privacy → Security and login → Manage app permissions, selecting "Postilka," and choosing Remove access. • Data Deletion: Once access is revoked, we will automatically delete your TikTok access tokens. To request the permanent deletion of all historical content data and insights imported from TikTok, please contact us at [email protected] with the subject line "TikTok Data Deletion Request." We will process this request within 30 days. To exercise these rights, please contact us at [email protected].

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to: • Essential Cookies: Required for authentication and security • Functional Cookies: Remember your preferences and settings • Analytics Cookies: Understand how you use our platform to improve performance You can control cookies through your browser settings. Note that disabling essential cookies may affect platform functionality.

8. Third-Party Services

Postilka integrates with third-party services including: • Social media platforms (Facebook, Instagram, TikTok, Twitter, LinkedIn, etc.) • Payment processors for billing • Cloud hosting and storage providers • Analytics and monitoring services • Customer support platforms These services have their own privacy policies. We encourage you to review them. We are not responsible for the privacy practices of third parties.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including: • Standard contractual clauses approved by the European Commission • Adequacy decisions for certain countries • Privacy Shield certification (where applicable)

10. Children's Privacy

Postilka is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately.

11. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of material changes by: • Posting the updated policy on this page • Updating the "Last updated" date • Sending email notifications for significant changes (if you have an account) Your continued use of Postilka after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this privacy policy or our data practices, please contact us: Email: [email protected]