Privacy Policy

Last updated: May 1, 2026

Data Management

Postar operates this platform and manages the data collected through it. For any privacy-related requests or questions, please contact us through our support channel available on the website.

1. Information Collected

We collect the following categories of information when you use our platform:

• Account Information: Your name, email address, and account credentials.
• Uploaded Content: Video files, descriptions, and associated metadata stored on our cloud infrastructure.
• Platform Tokens: OAuth access tokens and refresh tokens required to publish content to connected social media accounts (TikTok, Instagram, YouTube) on your behalf. These tokens are encrypted at rest using AES-256 encryption and are never exposed in plaintext outside our systems. Tokens are automatically deleted when you disconnect a social account or delete your Postar account. Only automated publishing systems access these tokens — no human employee accesses them in plaintext.
• Payment Information: Subscription and billing details, which are collected and processed exclusively by our payment reseller and Merchant of Record, Paddle (paddle.com). We do not store raw credit card or banking information on our servers.
• Usage Data: Logs of how you interact with the platform, used to diagnose issues and improve the service.
• Device Information: Your IP address, browser type, and standard web server log data.

2. How Information Is Used

We use the information we collect for the following purposes:

• To provide, operate, secure, and maintain the platform.
• To publish your scheduled content to connected social media accounts.
• To process subscription payments, manage invoicing, and maintain billing records.
• To monitor platform performance, diagnose issues, and improve the service.

Legal basis for processing: We process your data to perform our contract with you, based on our legitimate interest in operating and improving the service, or with your explicit consent.

3. Third-Party Sharing

We do not sell or share your personal data with third parties for advertising purposes. We share data only with the following infrastructure partners:

• Social Media Platforms: Authentication tokens and video files are transmitted to TikTok, Instagram, and YouTube via secure API calls to publish your scheduled content.
• Payment Processors: Paddle (paddle.com), who acts as our Merchant of Record and handles payment processing and transaction security on our behalf.
• Hosting and Storage Providers: We use Cloudflare (specifically Cloudflare R2) for video file storage, and cloud database infrastructure for user account and scheduling data. These providers are bound by data processing agreements and process data only as instructed by Postar.

4. Data Storage & Security

We implement commercially reasonable technical and organizational measures to protect your data. All video files and databases are stored within secure cloud infrastructure. No internet transmission or storage system is completely secure, so we cannot guarantee absolute protection against all threats.

5. Data Retention

We retain your personal data and uploaded content for as long as your account is active. Upon account deletion or termination, your personal data and uploaded video files will be permanently deleted from our active systems within 30 days. Billing records may be retained for up to 7 years where required by tax and financial regulations. Anonymized usage data that cannot identify you personally may be retained indefinitely for analytics purposes.

6. User Rights

Under applicable data protection law, you have the following rights regarding your personal data:

• Access: The right to request a copy of the personal data we hold about you.
• Correction: The right to request that we correct any inaccurate or incomplete personal information.
• Deletion: The right to request the deletion of your personal data.
• Data Portability: The right to receive your data in a machine-readable format, where technically applicable.
• Objection: The right to object to the processing of your personal data where we rely on legitimate interest as the legal basis. We will stop processing unless we have compelling legitimate grounds that override your interests.

To exercise any of the rights listed above, please send a request through our support channel on the website. Include your account email address and specify which right you wish to exercise.

7. Cookies

We use cookies and similar tracking technologies on our platform. Cookies are categorized as follows:

• Essential cookies: Required for the platform to function. These include session management cookies that keep you logged in. These cannot be disabled without breaking core functionality.
• Analytics cookies: Used to understand how users interact with the platform so we can improve it. These are only placed with your consent.
• No advertising cookies: We do not use cookies for advertising or tracking across third-party websites.

When you first visit the platform, you will be presented with a cookie consent notice that allows you to accept or decline non-essential cookies. You can also manage cookie preferences at any time through your browser settings. Refusing essential cookies will prevent you from logging into the platform.

8. Children's Privacy

Our platform is not intended for anyone under the age of 18. We do not knowingly collect personal information from users under 18. If we become aware that we have collected data from a user under 18, we will take immediate steps to delete that information from our systems.

9. Changes to Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last Updated" date at the top of this page. For significant changes, we will also notify registered users by email.