We do not sell or rent personal data. We do not share connected-platform data for third-party advertising.
Effective: 8 August 2026. Last updated: 28 October 2026.
This Privacy Policy explains how PostSpice.com (“PostSpice,” “we,” “us,” or “our”) collects, uses, shares, and protects personal data when you use our website, applications, APIs, scheduling, publishing, analytics, and conversation-management services (collectively, the “Service”).
1. Data we collect
Depending on the features you use, we may collect:
Account data: your name, email address, authentication details, plan, preferences, and support communications.
Connected-account data: platform account identifiers, profile details, pages or channels you manage, granted permissions, access and refresh tokens, and connection status.
Content and communications: drafts, media, captions, schedules, published-post references, comments, and messages you choose to retrieve or send through supported platform APIs.
Analytics data: audience, reach, impressions, engagement, post performance, and other metrics made available by connected platforms.
Usage and device data: IP address, browser and device information, timestamps, logs, feature usage, diagnostic events, and security signals.
Billing data: subscription status, transaction references, and limited billing details. Full payment-card information is processed by our payment provider and is not stored by PostSpice.
2. How we obtain data
We receive data from you, your authorized team members, your browser or device, connected platforms through their official APIs, and service providers that support authentication, billing, hosting, monitoring, and customer support.
3. How we use data
We use personal data to:
create and secure accounts and authenticate users;
connect authorized social accounts and maintain API tokens;
schedule, publish, retrieve, display, analyze, and manage content and communications as you direct;
provide analytics, reports, collaboration, and customer support;
process subscriptions and maintain billing records;
detect abuse, troubleshoot errors, protect the Service, and enforce our terms;
improve features and understand aggregate product usage; and
comply with legal obligations and respond to lawful requests.
Connected-platform data is used to provide and secure the features you request. We do not sell that data. If you deliberately use an optional AI-assisted feature, the content you submit to that feature may be processed by the configured AI service provider to generate the requested result.
4. Legal grounds
Where applicable law requires a legal basis, we process data to perform our contract with you, based on your consent, to comply with law, and for legitimate interests such as securing, operating, and improving the Service. You may withdraw consent for a connected platform by disconnecting it or revoking access in that platform’s settings.
5. How we share data
We may share data only as needed with:
connected platforms when you instruct us to publish, retrieve data, or send a response;
hosting, storage, email, analytics, monitoring, authentication, customer-support, AI, and payment providers acting for us;
your authorized workspace members and administrators;
professional advisers and parties to a business transaction, subject to appropriate safeguards; and
authorities or other parties when required by law or necessary to protect rights, safety, and service integrity.
We do not sell or rent personal data and do not share connected-platform data for third-party advertising.
6. International processing
Our providers and connected platforms may process data in countries other than yours. Where required, we use contractual or other recognized safeguards for international transfers. Connected platforms process data under their own terms and privacy policies.
7. Retention
We retain account data while your account is active and as reasonably necessary to provide the Service, resolve disputes, maintain security, and meet legal obligations. Drafts, messages, analytics, logs, backups, and tokens may have different retention periods. When you disconnect an integration, we stop new API access and delete or de-identify stored connected-platform data when it is no longer required, subject to limited backups and legal retention.
8. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal data, including access controls and secure transmission. No system is completely secure, and you should protect your credentials, use strong authentication, and grant only necessary platform permissions.
9. Your choices and rights
Depending on your location, you may have rights to access, correct, export, delete, restrict, or object to processing of your personal data, withdraw consent, or lodge a complaint with a data-protection authority. You may also:
disconnect a social account from PostSpice;
revoke PostSpice in the connected platform’s security settings;
change workspace and notification settings; or
request account or data deletion by emailing us.
To make a privacy or deletion request, use the support option available in the Service while signed in to your account. We may verify your identity before completing the request.
10. Children
The Service is intended for adults and is not directed to children under 18. We do not knowingly collect personal data from children. Contact us if you believe a child has provided data to the Service.
11. Third-party services
This Policy does not govern social networks, payment processors, or other third-party services. Review their privacy policies before connecting or using them. Their API permissions and policies may change independently of PostSpice.
12. Changes to this Policy
We may update this Policy as our Service, providers, or legal obligations change. We will post the revised Policy with a new effective date and provide additional notice for material changes when required.
13. Contact
For privacy questions, rights requests, or complaints, use the support option available in the Service.
Website waitlist and contact requests
When you join the waitlist or contact us, we retain the email address, optional name and use case, message if provided, submission timestamp, and source page to manage your request and communicate about access. FormSubmit processes the email delivery of these requests. We retain the date and version of your Privacy Policy acknowledgement separately from cookie choices. Joining the waitlist requests access updates; it does not authorize unrelated marketing emails. Delivery may be queued and retried. We use limited abuse-prevention records to protect these forms. Request removal by contacting postspice.com@gmail.com.
Cookie and storage choices
Essential authentication storage supports requested account access. The public website stores your requested privacy preferences in first-party browser storage for up to 180 days. Optional analytics and marketing purposes default off. No optional analytics collector or marketing tracker is currently configured. The Cookie settings control lets you reject, customize, or withdraw optional preferences at any time. These choices are independent of the waitlist Privacy Policy acknowledgement and do not grant marketing-email permission. Any future tracker requires an updated notice and renewed consent before activation.