Privacy Policy

This policy explains what Post4You collects, why, and what happens to it. Short version: we collect what’s needed to run the product, we don’t sell your data, and you can ask us to delete everything.

Who we are

Post4You (the iOS app and the website at post4you.ai) is operated by Post4You LLC, New York, United States. Post4You LLC is the data controller for the personal data described in this policy, including any data we receive from social platforms you connect. Reach us at support@post4you.ai.

What we collect

Account: your email address (and basic profile info if you sign in with Google). Content: the text, article links, and screenshots you provide, and the posts the Service generates and you edit. Usage: product analytics events (like “post generated”) and error reports, tied to your account id. Purchases: your subscription status. We never see your card details. Payments are processed by Apple (App Store subscriptions) and Stripe (web subscriptions).

How it’s used

Your content is processed to produce your drafts, including sending it to AI model providers for generation and text extraction. Usage data helps us fix bugs and understand which features matter. Subscription status controls your plan’s limits. We do not sell personal data or use your content to train AI models.

Connected Instagram accounts

When you connect Instagram, Post4You requests Meta's instagram_business_basic permission (username, account identifier, and basic profile information for the connected Instagram professional account), instagram_business_content_publish permission (publishing content to that account), and instagram_business_manage_insights permission (reading performance totals for the posts on the connected account: views, reach, likes, comments, shares and saves, plus the account's daily totals and follower count). Profile information identifies the connected account so you can confirm where your content will be published. Publishing happens only when you explicitly choose a publish, schedule, or queue action, and only for content you created and approved in Post4You. Performance totals appear on your own Insights page so you can see how your posts perform and what to make next; they are shown only to you, inside your own signed-in session, and Post4You uses them only to rank and steer the ideas it drafts for you — nothing is pooled across users. We never post on your behalf without your action, and we never ask for or store your Instagram or Facebook password.

The authorization for a connected Instagram account is stored encrypted on our servers and used only to publish your approved content, show the connection status, and read the performance totals described above.

We do not sell Instagram data, use it for advertising, or use it to train AI models. Instagram data, including stored performance totals, is kept only while the account stays connected. You can disconnect Instagram at any time from the Accounts page on post4you.ai or the Connected Accounts screen in the mobile app, which deletes the stored authorization and the performance totals read with it; you can also remove Post4You's access from your Instagram account settings under Apps and Websites. To have all of your data deleted, follow the deletion instructions on our Support page.

Connected TikTok accounts

When you connect TikTok, Post4You requests TikTok's user.info.basic permission (display name, avatar, and an account identifier), user.info.profile permission (username and public profile link, used to show which account is connected and to link to what you publish), and video.publish permission (publishing the photo posts you explicitly choose to post, with the privacy setting, comment setting, and commercial content disclosure you select each time). Where Insights is available, Post4You also requests video.list permission (reading the list of your posts and their view, like, comment and share counts, so your Insights page can show how your posts perform) and user.info.stats permission (your follower, like and video counts). Performance numbers are shown only to you, inside your own signed-in session.

Post4You connects directly to TikTok with its own app: TikTok's consent screen shows Post4You, and the authorization it grants is stored encrypted on our servers and used only to publish content you choose and to read the performance numbers described above; those numbers also rank and steer the ideas Post4You drafts for you, and nothing is pooled across users. Nothing is published automatically. We never ask for or store your TikTok password.

We do not sell TikTok data, use it for advertising, or use it to train AI models. TikTok data, including stored performance numbers, is kept only while the account stays connected. You can disconnect TikTok at any time from the Accounts page on post4you.ai or the Connected Accounts screen in the mobile app, which revokes the authorization and deletes the stored numbers, or revoke access in TikTok's settings.

Service providers

We rely on a small set of processors to run the Service: Supabase (database, storage, authentication), Vercel (hosting), AI model providers via Vercel AI Gateway (Anthropic, Google) for generation and OCR, RevenueCat (subscription management), Stripe (web payments), PostHog (analytics), Sentry (error reporting). For the social platforms you connect, Post4You stores the authorization tokens encrypted on our servers. We never store your social passwords.

Retention and deletion

Your data is kept while your account is active. You can delete your account at any time from Settings in the iOS app or on post4you.ai; deletion is immediate and removes your profile, sources, posts, uploads, templates, and any data received from connected social platforms (including Instagram and TikTok), and disconnects any linked social accounts. Posts you already published stay on those platforms. Billing records required for accounting are kept with the link to your account removed; subscription records stay with our payment processors under their retention rules; residual copies in encrypted backups and hosting logs expire within 30 days and error reports (which can include your account email) within 90 days; analytics identified only by an internal ID expire on the provider's schedule; and we keep what the law requires or what is needed to resolve a dispute or prevent fraud. If you can no longer sign in, email support@post4you.ai from your account address; we verify the sender and complete the deletion within 30 days. Step-by-step instructions: Delete your account.

Disconnecting a social account removes the authorization used for future publishing. See our Support page for deletion instructions.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. Contact us at the address above and we’ll honor them within 30 days; we verify that requests come from the email address on the account.

Changes

If this policy changes materially, we’ll notify you in the app or by email before the change takes effect.