Privacy Policy

Postoni ("we") runs a hosted social media scheduler at postoni.com, built on the open-source Postiz core. We are the controller of the personal data described in this policy.

If you self-host the open-source core, you run your own instance and this policy does not cover it.

Account data: your name, email address, password (stored hashed) or the login provider you use, your workspace name and team members.

Content data: posts, drafts, comments, media files, schedules and settings you create in Postoni.

Connected account data: the tokens and basic profile details (such as account name, avatar and ID) that each social network returns when you connect a channel.

Billing data: your plan and billing history. Card details are handled by our payment processor, and we do not store full card numbers.

Usage data: log data such as IP address, browser type, pages visited and error reports, which help us keep the service running.

Cookies: we use essential cookies to keep you signed in and to remember your preferences, such as language. We may use privacy-friendly analytics to understand how the site is used. Where the law requires consent for non-essential cookies, we ask first.

We use your data to provide the service: to publish and schedule your posts, show analytics, run team approvals, send you account emails and process payments.

We also use it to keep Postoni secure, fix bugs, prevent abuse and understand which features are used. We do not sell your personal data, and we do not use your posts to train AI models.

When you connect a channel, the network asks you to approve specific permissions. We only ask for the permissions needed to publish, read basic profile details and show analytics where the network allows it.

Tokens are stored encrypted and used only to act on your instructions, such as publishing a post you scheduled. You can disconnect a channel in Postoni at any time, and you can also revoke access from the network's own settings.

Our use of data received from Google APIs, including YouTube, follows the Google API Services User Data Policy, including its Limited Use requirements.

If you turn on Auto-DM, Postoni receives Instagram comments, Story replies, mentions and messages sent to your connected account through Meta's webhooks, and sends replies on your behalf. You control which automations run.

For each person who interacts with your account, we store their Instagram-scoped ID, username, name and profile picture, whether they follow you, the messages exchanged, link clicks, tags you add, and any email address or phone number they choose to share in the conversation. You are the controller of this data and we process it on your behalf to run your automations, show your inbox and analytics, and export contacts when you ask.

Retention: raw webhook payloads are deleted after 30 days and the event log after 90 days. Contacts and conversations are kept until you delete them, disable Auto-DM with data deletion, delete your workspace, or the person asks for deletion. Aggregated statistics contain no personal data.

People can stop automated messages by replying STOP. Removing Postoni from Instagram or Facebook settings triggers Meta's data deletion callback, and you can follow the request at postoni.com/data-deletion. We never sell this data or use it for advertising.

If you use the built-in AI assistant, the text and context you send are passed to an AI provider to generate a response. We send only what is needed for that request.

If you connect an outside AI assistant such as Claude or ChatGPT through our MCP server or API, that assistant's provider handles your conversation under its own privacy policy. Posts created this way land as drafts for your approval by default.

We share data with service providers that help us run Postoni, such as cloud hosting, file storage, email delivery, payment processing, error monitoring and AI providers. They may only use the data to provide their service to us.

We share your content with the social networks you choose to publish to, because that is the point of the service. We may also disclose data if the law requires it or to protect our users and service. A current list of subprocessors is available on request.

We keep your data while your account is active. If you delete your account, we delete or anonymize your personal data and content within 30 days, except where we must keep records longer, for example billing records for tax purposes.

Backups are overwritten on a rolling schedule, so deleted data can remain in backups for a short time before it is gone.

We use encryption in transit (HTTPS), encrypt stored social network tokens, restrict staff access to production data and keep our systems updated. No system is perfectly secure, so we also ask you to use a strong password and keep your API keys private.

If a security incident affects your personal data, we will tell you and the relevant authorities as the law requires.

Depending on where you live, including under the GDPR in the EU and UK and the CCPA in California, you may have the right to access, correct, delete or export your data, to object to or restrict some processing, and to withdraw consent.

We do not sell or share personal information for cross-context behavioral advertising as defined by the CCPA. To use any of your rights, email [email protected]. You can also complain to your local data protection authority.

We may update this policy as Postoni changes. If the changes are significant, we will tell you by email or in the app before they take effect.

Questions or requests about your privacy: [email protected].