Privacy Policy
At PostPlan.io (operated by PostPlan Technologies Inc., “we”, “our”, “us”), we take your privacy, fundamental data rights, and data sovereignty seriously. This Privacy Policy details how we collect, process, store, disclose, and protect personal data when you use our multi-platform social media publishing, scheduling, developer API, and analytics SaaS platform (the “Service”), regardless of which country or jurisdiction you reside in.
1. Data Controller & Global Representatives
PostPlan Technologies Inc. acts as the Data Controller under the EU General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR), the UK GDPR / Data Protection Act 2018, and the Swiss Federal Act on Data Protection (revFADP) for your account, user credentials, workspace administrative records, and direct billing data. For posts and media transmitted to third-party social networks on your behalf, PostPlan.io acts as a Data Processor under our Data Processing Addendum.
Data Protection Officer (DPO)
Email: privacy@postplan.io
Turnaround: Within 30 days at zero charge
EU Representative (GDPR Art. 27)
PostPlan EU Legal Representative
Friedrichstraße 123, 10117 Berlin, Germany
Email: privacy@postplan.io
2. Categories of Data We Collect
Full legal name, email address, salted password hash (securely encrypted), avatar URL, language preference, and workspace roles.
Third-party platform account IDs, handles, display names, profile avatars, and OAuth access/refresh tokens from connected networks (including YouTube, Meta/Instagram/Facebook, X/Twitter, LinkedIn, TikTok, Pinterest, Bluesky, Threads, Snapchat, Telegram). All OAuth tokens and API secrets are strictly encrypted at rest using AES-256-GCM.
Post captions, scheduled publication dates and times, uploaded image/video media files, first-comment copy, and scheduling settings.
Stripe Customer IDs, subscription tier, billing period, and payment status. (Note: We never receive, store, or process raw credit card numbers or CVV codes; all payment processing is handled by PCI-DSS Level 1 certified Stripe Inc.)
IP addresses, browser type and version, operating system, security audit logs, and timestamped actions to protect against unauthorized access.
3. Lawful Bases for Processing (GDPR Art. 6 / UK GDPR / LGPD Art. 7)
We process personal data only when supported by a valid legal basis:
- Performance of a Contract (Art. 6(1)(b)): Necessary to provide our social media scheduling SaaS, execute fan-out post delivery to connected accounts, and manage your subscriptions.
- Legitimate Interests (Art. 6(1)(f)): Necessary to safeguard platform security, prevent brute-force attacks, detect bot abuse, protect against API cost spikes, and maintain infrastructure stability.
- Consent (Art. 6(1)(a)): For optional performance cookies or marketing newsletters, which you can freely grant or withdraw at any time.
- Compliance with Legal Obligations (Art. 6(1)(c)): To satisfy statutory tax, financial auditing, and corporate accounting laws.
4. YouTube API Services & Google User Data Disclosures
PostPlan.io integrates with YouTube API Services to allow creators to schedule and publish video content directly to their YouTube channels. In strict compliance with Google and YouTube Developer Policies:
- By connecting and publishing to YouTube through PostPlan.io, you agree to be bound by the YouTube Terms of Service.
- Our collection, use, and transfer of information received from Google APIs adheres to the Google Privacy Policy.
- Revocation of Access: You can revoke PostPlan.io's access to your Google account and YouTube channels at any time via the Google Security Settings Permissions Page.
- YouTube Data Storage & Refresh: PostPlan.io only accesses YouTube channel metadata and upload permissions necessary to publish your scheduled videos. We do not sell YouTube user data, do not use YouTube data to serve advertisements, and refresh or delete cached tokens upon account disconnect.
5. Meta Platforms (Facebook & Instagram) Data Deletion Instructions
In compliance with Meta Platform Terms Section 4.d, PostPlan.io provides clear, automated mechanisms for users to request the permanent deletion of any personal data acquired via Facebook or Instagram:
- Direct In-App Erasure (Instant): Log in to PostPlan.io, navigate to Dashboard Settings, and click “Delete Account”. All your workspaces, connected Meta accounts, scheduled posts, and OAuth tokens are permanently erased immediately.
- Via Facebook / Instagram Settings: Go to your Facebook profile > Settings & Privacy > Settings > Apps and Websites > select PostPlan.io > click Remove > click View Removed Apps and Send Request. Facebook will automatically dispatch a secure signed deletion request to our callback endpoint.
- Automated Callback Endpoint: Our server processes Meta deletion pings at:
https://postplan.io/api/meta/data-deletionand issues a unique tracking confirmation URL. - Manual Request: Alternatively, email our Data Protection Officer at privacy@postplan.io with the subject line “Meta Data Deletion Request”.
6. Your Rights Under GDPR (EU & UK Users)
Users in the European Union, European Economic Area, and United Kingdom enjoy extensive statutory rights under GDPR Chapter III:
Article 15 — Right of Access
Obtain confirmation of data processing and a complete copy of all your personal records.
Article 16 — Right to Rectification
Modify or correct inaccurate personal information directly within your user settings.
Article 17 — Right to Erasure (“Right to be Forgotten”)
Permanently purge your account, workspaces, posts, and media with a single confirmation.
Article 20 — Right to Data Portability
Download all your account data and scheduled content in structured, machine-readable JSON format.
Article 18 — Right to Restriction
Request temporary suspension of data processing during disputes regarding accuracy.
Article 21 — Right to Object
Object at any time to data processing carried out under legitimate interest grounds.
You also have the right to lodge a formal complaint with your local EU Data Protection Authority (such as BfDI in Germany, CNIL in France, DPC in Ireland) or the UK Information Commissioner's Office (ICO).
7. United States Privacy Rights (California CCPA/CPRA, Virginia, Colorado, Connecticut, Utah, Texas)
This section supplements our privacy policy for residents of California (under CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), and other US states:
Explicit Certification on Sale & Sharing:
• PostPlan.io DOES NOT sell your personal information.
• PostPlan.io DOES NOT share your personal information for cross-context behavioral advertising.
• In the preceding 12 months, PostPlan.io has sold $0 worth of consumer personal data.
Your State Privacy Rights:
- Right to Know / Access: Request disclosure of the categories and specific pieces of personal information collected.
- Right to Delete: Request deletion of personal information collected directly from you.
- Right to Correct: Request correction of inaccurate personal data.
- Right to Non-Discrimination: We will never deny service, adjust pricing, or degrade quality for exercising statutory privacy rights.
- Limit Sensitive Personal Information: We only process sensitive credentials (such as account passwords and OAuth tokens) strictly to deliver the requested SaaS features.
Children's Privacy (COPPA): PostPlan.io is intended solely for users 18 years of age or older. We do not knowingly solicit or collect personal information from children under 13 (or under 16 in applicable jurisdictions). If we discover inadvertent collection, we delete the data immediately.
8. Canada (PIPEDA), Australia (Privacy Act), Brazil (LGPD) & Global Compliance
Canada (PIPEDA & Quebec Law 25): Personal information is handled in accordance with the 10 Fair Information Principles of PIPEDA. Canadian users may access, verify, or challenge the accuracy of their data by contacting our Privacy Officer at privacy@postplan.io.
Australia (Privacy Act 1988 & Australian Privacy Principles — APPs): We collect and handle personal information in compliance with the APPs. If you are an Australian resident with concerns regarding cross-border transfers or data handling, you may contact our Privacy Officer or lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
Brazil (Lei Geral de Proteção de Dados — LGPD): Brazilian residents may exercise their rights under LGPD Article 18 (confirmation, access, correction, anonymization, portability, erasure) by contacting our Encarregado (Data Protection Officer) at privacy@postplan.io.
Switzerland (revFADP): Personal data originating from Switzerland is processed in compliance with the revised Swiss Federal Act on Data Protection and overseen by the Federal Data Protection and Information Commissioner (FDPIC).
9. Technical & Organizational Security (GDPR Art. 32)
PostPlan.io enforces comprehensive, multi-layered security controls:
- Authenticated Encryption at Rest: All tenant API tokens, developer secrets, and connected social OAuth credentials are encrypted with AES-256-GCM.
- Strict Encryption in Transit: All HTTP communications require TLS 1.3 encryption with strict HTTP Strict Transport Security (HSTS) headers.
- Multi-Tenant Data Isolation: Every database query is strictly partitioned and scoped at the server level by workspace identifier to prevent tenant cross-contamination.
- Tamper-Resistant Audit Logging: Security-sensitive administrative and privacy actions are captured in automated audit records.
10. Authorized Subprocessors & International Transfers
Where personal data is transferred outside the EEA, UK, or Switzerland, we ensure adequate protection via the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum:
| Subprocessor | Processing Purpose | Location & Safeguard |
|---|---|---|
| Railway Corp. / Cloudflare | Compute infrastructure, CDN & DDoS protection | USA / Global (SCCs & ISO 27001) |
| Neon Inc. (AWS) | Managed Serverless PostgreSQL database | USA (SCCs & AES-256 Encrypted) |
| Zernio Social API Gateway | Social network API gateway & webhook relay | EU / Global (SCCs & DPA) |
| Stripe Inc. | Subscription billing & payment processing | USA / Global (PCI-DSS Level 1 & SCCs) |
11. Data Retention & Erasure Schedules
- Active Subscription Data: Maintained for the active lifecycle of your account.
- Deleted Account Data: Instantly and irreversibly removed from active production databases upon deletion request. Residual database backup archives cycle out within 30 days.
- Financial & Statutory Records: Transactional billing records are preserved for up to 7 years exclusively to satisfy mandatory tax and accounting statutory requirements.
12. Exercising Your Rights & Contacting Us
You can download a complete JSON archive of your data or permanently delete your account directly inside Dashboard Settings. For any other requests, inquiries, or complaints, please reach out to our privacy team:
Privacy Inquiries & DPO: privacy@postplan.io
Legal & Compliance: legal@postplan.io
Response Commitment: All verified data subject requests are processed within 30 calendar days at no charge.