Privacy policy
Last updated: 6 October 2026
This page explains, in plain terms, what data Postati collects, why we collect it, who we share it with, and how you can delete it. We collect the minimum needed to run the service, and we do not sell your data to anyone.
The data we collect
- Account data: your first and last name, your date of birth (used only to confirm you are old enough to subscribe; it never appears in any content), your email address, your phone number if you enter one (optional), and the sign-in method you used (password or Google account).
- Business data: your business name, country, preferred dialect, description, tone of voice, colours, products or services, location, your logo if you upload one, your website or account link if you provide one, and anything you asked us to exclude from the content.
- Generated content: the designs and captions we produce for you, and your approval status for each post.
- Subscription data: your plan, its renewal date, and the transaction reference at the payment gateway. We never receive or store card numbers — payment happens entirely at the gateway (KNET / mada).
- Session data: one technical cookie that keeps you signed in, and one that remembers the interface language you chose. We do not use advertising trackers.
Signing in with Google
When you choose “Continue with Google” we request three basic scopes only (openid, email, profile). From them we read your email address and Google’s confirmation that you own it, and then we create our own session.
We do not request access to your Gmail, your Drive files, or your contacts. Nor do we keep the tokens Google issues — they are read once and discarded.
Connecting an Instagram account
We ask you to connect your Instagram account only after you subscribe, and for two purposes: scheduling the posts you approved and publishing them on your behalf through Meta’s official API, and understanding your brand to improve your content — we may read the recent posts on your own account (their pictures and captions) to learn your voice, your products and the hashtags you use, and use your photos from them in your designs. We do not read your private messages, other people’s comments or anyone else’s account, and we publish nothing you have not approved. You can disconnect at any time, from your Meta account settings or from inside the platform, and we then delete our access tokens and what we drew from your posts.
Who we share data with
We use service providers to run the platform, and share with them only what their task requires:
- AI model providers (to create captions and designs): your brand data and business description are sent to them to generate the content.
- Email provider (to send verification links and notifications): your email address.
- Hosting and storage provider: the database and the design files.
- Payment gateway (KNET / mada): transaction data, without your banking details ever passing through us.
- Meta: approved posts only, when you have enabled auto-publishing.
We do not sell your data, we do not rent it, we do not use your brand’s content to train general models, and we do not show your work to other clients without your explicit permission.
How long we keep it
We keep your account data and your content for as long as your account exists. You can delete your account from the “My account” page or by emailing us; publishing then stops at once, and we delete your personal data and generated content for good 14 days after the request (you can undo it before then by signing in), except what we are required to retain for accounting or regulatory purposes (invoice records, for example).
Your rights
To exercise any of these, write to us at the address below.
- See the data we hold about you and request a copy of it.
- Correct any inaccurate data.
- Delete your account and your data.
- Withdraw your consent to the Instagram connection or to notification emails.
Data security
Connections to the platform are encrypted, and passwords and access tokens are never stored in plain text or written to our logs. Even so, no system on the internet is absolutely secure, and we commit to telling you if a breach affects your data.
Children
The service is aimed at business owners and is not intended for anyone under eighteen.
Changes to this policy
We may update this page as the service changes. When we make a material change we will tell you by email or inside the platform, and the last-updated date stays visible at the top of the page.
For any privacy question, or to request deletion of your data: privacy@postati.net
See also Terms of use.