Privacy

Your email address and password, held by Firebase Authentication. We never see your password.

The content you create: accounts and channels, posts, drafts, schedules, the persona documents you write, and any media you upload. Uploaded media is stored in Google Cloud Storage.

A short summary of each generation you keep, so the AI can avoid repeating itself, and daily counts of posts and generations so we can apply plan limits.

Access tokens for the social accounts you connect, so posts can be published, plus the profile details and post statistics described under Connected platforms below. Disconnecting an account deletes all of it.

Google Firebase hosts the database, file storage and sign-in.

The social platforms you connect (YouTube, TikTok, Instagram, LinkedIn and X) receive the posts you publish to them, which is the point of the product.

OpenAI receives the prompts and context needed to generate content, when you use an AI feature or autopilot. All AI generated content in Postrim is created with OpenAI.

Lemon Squeezy handles payment if you subscribe. They are the merchant of record and take your payment details directly; we never receive your card number.

An AI client you connect, such as Claude through our connector, receives whatever it asks for on your behalf: the brands, posts and queue it reads while you are working with it. That connection is made by you, acts only as you, and can be revoked at any time from the app, after which it receives nothing further.

Depending on the features you use, media features may call Pexels for stock photography or Thum.io for website screenshots.

Google Analytics measures how this site and the app are used: which pages are opened, roughly where visitors come from, and what kind of device they are on. Addresses inside the app carry account and post ids, so those are stripped out before a page is reported. It never receives your posts, drafts, media or personas. On this website it does nothing at all until you agree to it; see Cookies below.

There is no advertising, and your content is never sold or used to train anyone's models by us.

When you connect a social account, Postrim reaches it through that platform's official API, signed in as you. It reads only what it needs to show you which account is connected, to publish what you schedule, and to show how your posts perform in Analytics:

YouTube: your channel id, channel name and profile picture, the ids of videos published through Postrim, and their view, like and comment counts.

TikTok: your account id, nickname and avatar, the ids of posts published through Postrim, and their view, like, comment and share counts.

Instagram (Meta): your account id, username and profile picture, the ids of posts published through Postrim, and their view, reach, like, comment, share and save counts.

LinkedIn: your member or page id, name and profile picture, the ids of posts published through Postrim, and for company pages their impression, reaction, comment and share counts.

X: your user id, username and profile picture, the ids of posts published through Postrim, and, where X statistics are switched on, their view, like, reply and repost counts.

Nothing read from a connected platform is sold, shared with other Postrim customers, used for advertising, or used to train AI models, ours or anyone else's.

Profile details and post statistics are kept while the connection exists. When you disconnect a platform, delete an account in Postrim, or delete your Postrim account, we delete that platform's tokens, profile details, post ids and statistics within 7 days, and revoke our access at the platform wherever it offers a way to do so. If you revoke access from the platform's side instead, we delete the same data within 7 days of finding out. Posts you already published stay live on the platform; removing them there is up to you.

Each platform's own privacy policy covers the data it holds about you: TikTok, Instagram and Meta, LinkedIn and X. YouTube is covered below.

Postrim uses YouTube API Services. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service, and Google's use of your data is covered by the Google Privacy Policy.

You can remove Postrim's access to your Google account at any time from Google's security settings, as well as by disconnecting the channel in Postrim.

Postrim's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

This website keeps three things on your device, and only the last of them is optional:

A sign-in hint, written only after you sign in, so the header offers you a Dashboard button instead of a login one. It holds nothing but a yes or a no.

The sign-in itself, held by Firebase Authentication if you signed in through the panel on this site rather than in the app.

One Google Analytics cookie, for the measurement described above. This one is optional: analytics starts denied on every visit and is switched on only if you accept it in the banner. Until then it writes no cookie and holds no identifier for you.

The first two are storage you asked for by signing in, and there is no version of this site without them. The third is a choice, and you can change it whenever you like, here or from the footer of any page: Cookie settings. Turning it off takes effect immediately.

Your answer is kept in this browser's local storage rather than in a cookie, so it never reaches our servers and it is specific to this browser: clearing site data means we ask again. There are no advertising cookies and no cross-site tracking of any kind.

Every record carries the id of the account that owns it, and the server refuses to return a record to anyone else. If you bring your own API keys, they are stored against your account and used only for your work.

You can delete your account yourself at any time: in the app, open Settings, then Data control, then Delete my account. It runs immediately and removes your account and everything attached to it: posts, drafts, media, personas, connected-account tokens, data read from your platforms and usage records.

If you would rather we do it, or you can no longer sign in, email support@postrim.com from the address on your account and we will delete it within 7 days.

To remove only one platform's data, disconnect it in that account's settings in Postrim. What we hold from it is deleted as described under Connected platforms.

If you remove Postrim from your Instagram or Facebook settings, Meta notifies us through its data deletion callback and we delete everything we received through Instagram within 7 days. Meta shows you a confirmation code; send it to support@postrim.com if you want to check on the request.

Deletion is permanent and there is no backup we can restore from afterwards.

support@postrim.com