Privacy Policy

This policy explains what Post4You collects, why, and what happens to it. Short version: we collect what’s needed to run the product, we don’t sell your data, and you can ask us to delete everything.

What we collect

Account: your email address (and basic profile info if you sign in with Google). Content: the text, article links, and screenshots you provide, and the posts the Service generates and you edit. Usage: product analytics events (like “post generated”) and error reports, tied to your account id. Purchases: your subscription status. We never see your card details. Payments are processed by Apple (App Store subscriptions) and Stripe (web subscriptions).

How it’s used

Your content is processed to produce your drafts, including sending it to AI model providers for generation and text extraction. Usage data helps us fix bugs and understand which features matter. Subscription status controls your plan’s limits. We do not sell personal data or use your content to train AI models.

Connected Instagram accounts

When you connect Instagram, Post4You requests Meta's instagram_business_basic permission (username, account identifier, and basic profile information for the connected Instagram professional account) and instagram_business_content_publish permission (publishing content to that account). Profile information identifies the connected account so you can confirm where your content will be published. Publishing happens only when you explicitly choose a publish, schedule, or queue action, and only for content you created and approved in Post4You. We never post on your behalf without your action, and we never ask for or store your Instagram or Facebook password.

The authorization for a connected Instagram account is stored encrypted on our servers and used only to publish your approved content and show the connection status. Instagram accounts connected before our direct Meta integration authorize through our publishing partner, Post for Me, which holds those authorizations.

We do not sell Instagram data, use it for advertising, or use it to train AI models. Instagram data is kept only while the account stays connected. You can disconnect Instagram at any time from the Accounts page on post4you.ai or the Connected Accounts screen in the mobile app, which deletes the stored authorization; you can also remove Post4You's access from your Instagram account settings under Apps and Websites. To have all of your data deleted, follow the deletion instructions on our Support page.

Connected TikTok accounts

When you connect TikTok, Post4You requests TikTok's user.info.basic permission (display name, avatar, and an account identifier) and user.info.profile permission (public profile link, bio description, and verification status). This information identifies the connected account and helps you confirm where your content will be published.

TikTok authorization and publishing currently run through our publishing partner, Post for Me, whose name appears on TikTok's consent screen and which holds the authorization for connected accounts. We never ask for or store your TikTok password.

We do not sell TikTok data, use it for advertising, or use it to train AI models. You can disconnect TikTok at any time from the Accounts page on post4you.ai or the Connected Accounts screen in the mobile app, or revoke access in TikTok's settings.

Service providers

We rely on a small set of processors to run the Service: Supabase (database, storage, authentication), Vercel (hosting), AI model providers via Vercel AI Gateway (Anthropic, Google) for generation and OCR, RevenueCat (subscription management), Stripe (web payments), PostHog (analytics), Sentry (error reporting), and Post for Me (social publishing for some platforms; it holds the OAuth tokens for accounts connected through it). For platforms we integrate directly, Post4You stores the authorization tokens encrypted on our servers. We never store your social passwords.

Retention and deletion

Your data is kept while your account is active. You can delete your account at any time from Settings in the iOS app or on post4you.ai; deletion is immediate and removes your profile, sources, posts, uploads, templates, and any data received from connected social platforms (including Instagram and TikTok), and disconnects any linked social accounts. Posts you already published stay on those platforms. Billing records required for accounting are kept with the link to your account removed; subscription records stay with our payment processors under their retention rules; residual copies in encrypted backups and hosting logs expire within 30 days and error reports (which can include your account email) within 90 days; analytics identified only by an internal ID expire on the provider's schedule; and we keep what the law requires or what is needed to resolve a dispute or prevent fraud. If you can no longer sign in, email support@post4you.ai from your account address; we verify the sender and complete the deletion within 30 days. Step-by-step instructions: Delete your account.

Disconnecting a social account removes the authorization used for future publishing. See our Support page for deletion instructions.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. Contact us at the address above and we’ll honor them within 30 days; we verify that requests come from the email address on the account.

Changes

If this policy changes materially, we’ll notify you in the app or by email before the change takes effect.