Privacy Policy

Postbase, Inc. ("Postbase", "we", "us" or "our") is committed to protecting the privacy of individuals who interact with us. This Privacy Policy describes our privacy practices for information we collect through our websites, including https://www.trypostbase.com and any other websites, mobile applications, or services that link to this Privacy Policy (the "Website" or "Service").

This page informs you of our policies regarding the collection, use, and disclosure of Personal Information when you use our Website and social media management platform, and the choices you have associated with that information.

By using the Website and our Service, you agree to the collection and use of information in accordance with this Privacy Policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible from https://www.trypostbase.com.

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you don't agree with our policies and practices, don't use our Website or Service. By accessing or using this Website or our Service, you agree to this Privacy Policy. This Privacy Policy may change from time to time (see Changes to This Privacy Policy). Your continued use of this Website or our Service after we make changes is deemed to be acceptance of those changes. We encourage you to review the Privacy Policy periodically for updates.

1. Information We Collect

We collect several different types of information for various purposes to provide and improve our Website and Service.

1.1 Personal Information You Provide to Us

While using our Website or Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Information"). Personal Information refers to information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. This may include, but is not limited to:

Account Information: If you register for an account to use our Service, we collect your name, email address, company name (optional), and password.

Subscription Information: If you subscribe to a paid plan for our Service, our third-party payment processor collects billing details, such as credit card information and billing address. We do not directly store your full payment card details.

Requests & Communications: When you request a demonstration of our product, subscribe to our newsletter, or contact us for customer support, we collect your name, email address, company name (optional), and any information you choose to provide in your communication.

Social Media Content: As a social media management platform, we collect and process the content you create, schedule, and publish through our Service. This includes:

• ‍Post text, captions, and descriptions
• Images, videos, and other media files you upload
• Hashtags and tags
• ‍Publishing schedules and timestamps
• ‍Draft content and saved templates

This content is considered User-Generated Content, and we process it solely to provide you with the Postbase Service and to improve your individual user experience within your account.

1.2 Information We Collect from Connected Social Media Accounts

To enable our core scheduling and publishing functionality, we collect certain information from the social media accounts you connect to Postbase. The specific information we access depends on the platform and the permissions you grant:

Instagram: Profile image, display name, username, profile ID, access tokens, media insights (reach, likes, comments, shares, impressions), follower count, and audience demographics (to the extent permitted by the platform).

Facebook: Page or profile image, display name, page ID or profile ID, access tokens, post performance metrics (reach, engagement, clicks, likes, shares, comments), page insights, and audience data.

Threads: Profile image, display name, username, profile ID, access tokens, post performance metrics (likes, replies, reposts, impressions), and follower count.

TikTok: Profile image, display name, username, profile ID, access tokens, video performance metrics (views, likes, comments, shares), and follower count.

YouTube Shorts: Channel image, display name, channel ID, access tokens, video details, and performance metrics (views, likes, comments, watch time).

X (Twitter): Profile image, display name, username, profile ID, access tokens, tweet performance metrics (impressions, likes, retweets, replies, clicks), and follower count.

LinkedIn: Profile or company page image, display name, profile or page ID, access tokens, post performance metrics (impressions, clicks, likes, comments, shares), and follower count.

Important: This data is collected solely to provide you with the Postbase Service. We do not share this information with third parties except as necessary to operate the Service or as described in this Privacy Policy. Your social media content and analytics remain private to your account.

1.3 Information We Collect Automatically

As you navigate through and interact with our Website and Service, we use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

Log Data: We collect details about your visits to our Website, including traffic data, location data, logs, and other communication data, and the resources that you access and use on our Website.

Device Information: We collect information about the device used to access our Website and internet connection, including your IP address, operating system, and browser type.

1.4 Tracking Technologies

We use information-gathering tools, such as cookies and web beacons, to collect information as you navigate our Website and Service about how you use and interact with them. Our website does not respond to "Do Not Track" signals.

We use the following types of cookies on our Website:

Required Cookies: These cookies are necessary to enable the basic features of our Website to function, including authentication and account access. Because required cookies are essential to operate our Website, there is no option to opt out of these cookies.

Functionality Cookies: These cookies allow us to analyze your use of our Website to evaluate and improve our performance. They may also be used to provide a better customer experience on our Website. For example, remembering your scheduling preferences or calendar view settings. To learn more about how to control functionality cookies using your browser settings, please see aboutcookies.org.

Advertising Cookies: These cookies collect information about your browsing habits on our Website. We share this information with advertisers and use it to better understand your interests in order to provide you with more relevant advertising. To learn more about these and other advertising networks and your ability to opt out of collection by certain third parties, please visit the opt-out pages of the Network Advertising Initiative and the Digital Advertising Alliance.

2. How We Use Your Information

We use the information we collect about you for various business and commercial purposes, including to:

• Provide you with Website content and the Postbase Service
• Connect to and authenticate your social media accounts
• Schedule, publish, and manage your social media content across platforms
• Retrieve and display analytics and performance metrics for your published content
• Process your subscriptions and payments (if applicable)
• Provide customer care and support
• ‍Operate, maintain, and improve our Website and Service
• ‍Monitor Website and Service usage and functionality
• ‍Conduct investigations regarding violations of our policies or other legal rights in accordance with applicable law
• ‍Detect, prevent, and address technical or security issues
• ‍Display personalized ads to you
• ‍Carry out our obligations and enforce our rights arising from any contracts entered into between you and us
• ‍Communicate with you via email and inform you of product enhancements, feature updates, and other Postbase-related resources or security updates
• ‍Fulfill any other purpose for which you provide the information, or as otherwise described when the information is collected

Specific to User-Generated Content and Social Media Data: We commit that your User-Generated Content (your scheduled posts, media, captions, etc.) and the data retrieved from your connected social media accounts will never be used to train AI models for general, public, or third-party use. We only process this information as necessary to provide you with the Postbase Service (e.g., scheduling and publishing your content, displaying your analytics) and to improve your individual user experience within your account.

3. Sharing Your Information

We share Personal Information that we collect or you provide as described in this Privacy Policy:

• Service Providers: With contractors, service providers, and other third parties who need access to such information to carry out work or perform services on our behalf. This includes:
  • ‍Cloud hosting providers
  • ‍Analytics providers
  • ‍Payment processors
  • ‍Customer support tools
  • ‍Email service providers
  • ‍Social media platform APIs (to enable posting and analytics retrieval)
• ‍Legal Requirements: When we're required or believe we're required to provide information in response to a subpoena, court order, applicable law, government statute, regulation, or other legal process.
• ‍Protection of Rights: When we have a good faith belief that the disclosure is necessary in our legitimate interests to prevent or respond to fraud, defend our Website against attacks, or protect the property and security of Postbase, or the property and security of our customers, users or the public.
• ‍Legal Liability: To prevent or investigate possible wrongdoing or legal liability in connection with the Website.
• ‍Public Authority Requests: To the extent necessary to meet lawful requests by public authorities, including to meet national security or law enforcement requirements.
• ‍Business Transfers: If all or a substantial portion of our assets are acquired by another company, in which case your information may be included in the assets transferred.

Important Note: We do not sell your Personal Information to third parties. We do not share the content of your scheduled posts or your social media analytics data with third parties except as necessary to provide the Service (e.g., transmitting your posts to social media platforms for publishing).

4. Third-Party Services

We use various third-party services that may collect and process data according to their own privacy policies. These include:

• ‍Payment Processing: For processing subscription payments
• ‍Analytics and Usage Tracking: Google Analytics, Mixpanel, or similar services
• ‍Advertising: Google Ads, Meta Advertising
• ‍Social Media Platform APIs: Instagram, Facebook, Threads, TikTok, YouTube, X (Twitter), LinkedIn APIs to enable content publishing and analytics retrieval
• ‍Infrastructure Providers: Cloud hosting and database services

Social Media Platform APIs: When you connect a social media account to Postbase, we use that platform's official API to:

• ‍Authenticate your account
• ‍Publish content on your behalf
• ‍Retrieve performance metrics and analytics

We process this data according to each platform's API Terms of Service and data use policies. We do not retain copies of your social media analytics data beyond what is necessary to display it to you within the Service.

We encourage you to review the privacy policies of these third-party services to understand their data practices:

• ‍Instagram/Facebook/Threads: https://www.facebook.com/privacy/policy
• ‍TikTok: https://www.tiktok.com/legal/privacy-policy
• ‍YouTube: https://policies.google.com/privacy
• ‍X (Twitter): https://twitter.com/en/privacy
• ‍LinkedIn: https://www.linkedin.com/legal/privacy-policy

You can opt out of making your activity available to Google Analytics by installing the Google Analytics opt-out browser add-on. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy.

We also provide links to other sites that are not operated by us, including social networking sites. These third-party sites may collect or share information about you, but this Privacy Policy does not apply to their privacy practices. We encourage you to review the privacy policies and settings on the sites with which you interact to make sure you understand the information that may be collected, used, and shared when you leave our Website.

5. Information Security and Storage

We implement reasonable administrative, technical, and physical security controls designed to protect your Personal Information from loss, misuse, unauthorized access, disclosure, alteration, or destruction.

Encryption: All customer data is encrypted at rest using AES-256 encryption. Data in transit is encrypted using TLS 1.2 or higher to ensure secure communication. These encryption standards apply to data stored in databases, backups, and cloud storage, ensuring that your information remains protected at all times.

Social Media Account Security: We securely store access tokens for your connected social media accounts using industry-standard encryption. These tokens are used solely to publish content and retrieve analytics on your behalf. You can revoke Postbase's access to any connected social media account at any time through that platform's security or app settings.

Media Storage: Images, videos, and other media files you upload to Postbase are stored securely in encrypted cloud storage and are accessible only to you and authorized members of your team (if applicable).

However, no security controls are impenetrable, and we cannot ensure or warrant the absolute security of your Personal Information.

We will retain your Personal Information for as long as necessary to provide you with the Website and Service, as needed to comply with our legal obligations and legal rights including to prevent fraud or enforce our agreements, and for our internal business reasons.

Data Retention for Social Media Content:

You may opt out of receiving marketing communications by unsubscribing to the marketing mailings you no longer desire. To unsubscribe, please follow the "Unsubscribe" instructions that are contained within the mailing or other communication that we send to you. You may also send an email to support@trypostbase.com with "Unsubscribe" in the body, together with a description of the communications you no longer desire to receive.

• ‍Scheduled posts and published posts are retained in your account until you delete them
• ‍Draft content is retained indefinitely unless you delete it
• ‍Analytics data retrieved from social media platforms is retained for up to 24 months
• ‍When you disconnect a social media account, scheduled posts for that account are deleted, but historical analytics may be retained for up to 90 days

6. Your Choices and Opting Out

‍6.1 Opting Out of Postbase Communications

‍6.2 Managing Cookies

To learn more about how to control functionality cookies using your browser settings, please see aboutcookies.org. To learn more about advertising networks and your ability to opt out of collection by certain third parties, please visit the opt-out pages of the Network Advertising Initiative and the Digital Advertising Alliance.

6.3 Managing Connected Social Media Accounts

You can disconnect any social media account from Postbase at any time through the Settings section of your account. You can also revoke Postbase's access to your social media accounts directly through each platform's security or app settings:

• ‍Instagram/Facebook/Threads: Visit facebook.com/settings, navigate to "Business Integrations" or "Apps and Websites"
• ‍TikTok: Visit Settings > Privacy > Manage account > Apps
• ‍YouTube: Visit myaccount.google.com/permissions
• ‍X (Twitter): Visit twitter.com/settings/connected_apps
• ‍LinkedIn: Visit linkedin.com/mypreferences/d/privacy-settings

When you disconnect an account, scheduled posts for that account will be deleted, and we will no longer access data from that account.

7. Children's Privacy

Our Website and Service are not directed to or intended for children under the age of 13. We do not knowingly collect Personal Information from children under the age of 13 without obtaining parental consent. If you believe we have obtained information from or about a child under 13 without parental consent, please contact us at support@trypostbase.com so that we can remove the child's Personal Information.

8. Notice to Users in Certain Jurisdictions

8.1 Legal Basis for Processing (EEA / UK Users)

We collect and process Personal Information about you with your consent, as part of a contractual agreement with you, and as necessary to provide our Website and Service to you, operate our business, meet our contractual and legal obligations, protect the security of our Website, and fulfill our other legitimate interests.

When you connect a social media account to Postbase, you provide explicit consent for us to access and process data from that account as described in this Privacy Policy.

8.2 Global Data Transfers (EEA / UK Users)

Postbase is based in the United States and information we collect from you will be processed in the United States. The United States has not received a finding of "adequacy" from the European Union under Article 45 of the GDPR. We rely on derogations for specific situations set forth in Article 49 of the GDPR in order to transfer your Personal Information across international borders. In particular, we collect and transfer Personal Information outside of the EU/UK only: (i) with your consent; (ii) to perform a contract with you; or (iii) to fulfill other compelling legitimate interests in a manner that does not outweigh your rights and freedoms.

8.3 Your Rights (EEA / UK Users)

To the extent required by applicable law, particularly GDPR, we provide you with: (i) reasonable access to your Personal Information collected through our Website, and (ii) the ability to correct, export, delete, withdraw consent, object to the processing of, or suspend processing of your Personal Information. You can contact us at support@trypostbase.com to submit a request.

You have the right to lodge a complaint with a supervisory authority if you believe we have processed your Personal Information in a manner inconsistent with your privacy rights. We kindly request that you contact us first so that we may address your concern.

8.4 California Privacy Rights (for California Residents)

If you are a California resident, you have specific rights regarding your Personal Information under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These rights include:

Right to Know: You have the right to request that we disclose what Personal Information we collect, use, disclose, and sell/share.

Right to Delete: You have the right to request the deletion of Personal Information that we have collected from you, subject to certain exceptions.

Right to Opt-Out of Sale/Sharing: You have the right to opt-out of the "sale" or "sharing" of your Personal Information. Postbase does not sell your Personal Information in the traditional sense. We also commit that your User-Generated Content and social media account data are not "shared" for cross-context behavioral advertising. However, we may use advertising cookies (as described in Section 1.4) that may constitute "sharing" under California law. You can manage these preferences as described in Section 6.2.

Right to Correct: You have the right to request that we correct inaccurate Personal Information we maintain about you.

Right to Limit Use and Disclosure of Sensitive Personal Information: You have the right to limit the use and disclosure of your sensitive Personal Information. Postbase does not typically collect sensitive Personal Information (as defined by CCPA/CPRA) from users for purposes that would trigger this right.

Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise these rights, please contact us at support@trypostbase.com. We will verify your request using information associated with your account, including your email address. You may also authorize an agent to make a request on your behalf.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will post any revised Privacy Policy on this Website. Where changes to this Privacy Policy are material, we will notify you in accordance with applicable law (e.g., via email to registered users or a prominent notice on our Website).

‍10. Contact Us

If you have any questions about this Privacy Policy, please contact us by email at: support@trypostbase.com