Privacy Policy

Overview

This Privacy Policy describes how Postory collects, uses, stores, and shares information when you use our social media planning and scheduling workspace. We collect only what we need to run the product, and we never sell your personal information.

Information we collect

We collect the following categories of information:

• Account information. When you sign up, your account and sign-in are handled by our authentication provider, Clerk. This includes your name, email address, and authentication identifiers.
• Content you create. The ideas, drafts, scheduled posts, captions, and images you add to your workspace, along with their scheduling and status information.
• Connected social accounts. When you connect a platform, we store the account identifier, handle, profile image, profile URL, and the access and refresh tokens needed to publish on your behalf.
• Billing information. Subscriptions are managed through Clerk's billing. Payment card details are handled by the payment processor — Postory does not store your full card number.
• Usage and technical data. Basic logs and operational data (such as request and error information) that help us keep the service reliable and secure.

How we use your information

We use your information to:

• Operate your workspace and store your ideas, drafts, and schedule.
• Publish content to the social accounts you connect, at the times you schedule.
• Provide AI drafting and idea generation on paid plans.
• Process subscriptions and manage your plan.
• Maintain security, prevent abuse, and troubleshoot issues.
• Respond to your support requests.

AI features

On the Pro and Premium plans, when you ask Postory to draft a post or generate ideas, the prompt and related content you provide are sent to our AI provider, OpenRouter, solely to generate the output you requested. We do not use this to make decisions about you, and AI features run only when you choose to use them.

Connected accounts and publishing

Connecting a social platform authorizes Postory to publish content on your behalf. We store the resulting access and refresh tokens encrypted at rest using AES-256-GCM. You can disconnect any channel at any time from your settings, which removes that connection and its stored tokens.

How we share information

We do not sell your personal information. We share information only with service providers who help us run Postory, and with the platforms you choose to publish to:

• Clerk — authentication and subscription billing.
• Convex — database and file storage that hosts your workspace data and uploaded images.
• OpenRouter — AI model access for drafting and idea generation.
• Inngest — background processing that publishes your scheduled posts.
• Social platforms (such as X, LinkedIn, Instagram, Threads, Facebook, Bluesky, YouTube, and TikTok) when you publish to them.
• Authorities or third parties where required by law, or to protect our rights and users.

Data storage and security

Your workspace data and uploaded images are stored with our hosting provider, Convex. Access to your data is scoped to your organization in our application logic, tied to your authenticated identity, and social tokens are encrypted at rest. No method of storage or transmission is completely secure, but we work to protect your information using appropriate safeguards.

Data retention

We keep your information for as long as your account is active. If you delete content or disconnect a channel, the associated data and tokens are removed. If you close your account, we delete your personal data and content, except where we are required to retain it to comply with legal obligations.

Your rights and choices

You can access and update your account details, edit or delete your ideas, drafts, and posts, disconnect connected channels, and cancel your subscription at any time from within the app. Depending on where you live, you may have additional rights to access, correct, export, or delete your personal data — contact us to exercise them.

Cookies

We use cookies that are necessary for the service to function, primarily to keep you signed in through our authentication provider. We do not use them to sell your information.

Children

Postory is not intended for children under 16, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy as the product evolves. When we do, we will revise the date shown above. Significant changes may be communicated within the app.

Contact

If you have questions about this policy or your data, reach us at hello@postory.app.