Information We Collect

Account Information

When you create an account, we collect:

• Your email address (and password, if you sign up via email/password rather than a third-party provider)
• Your name, where provided
• Authentication information from third-party providers if you sign in with Google, Microsoft, GitHub, or LinkedIn

Content You Provide

To use PostAgent, you upload or connect content sources such as:

• Documents (PDFs, text files, notes)
• URLs to blogs, articles, or RSS feeds
• Configuration of the agents you create (tone, topics, audience, schedule)

This content is the foundation we use to generate posts on your behalf.

Connected Social Accounts

When you connect a social media account (LinkedIn, X, Threads, Instagram, Facebook), we receive authentication tokens from those platforms that allow us to publish on your behalf. We do not access your private messages, contacts, or other personal data on those platforms beyond what is required to publish posts.

Usage and Analytics Data

We use PostHog, a product analytics platform, to understand how users interact with our service. This helps us improve the product and identify issues. PostHog collects:

• Page views and navigation patterns on our website
• Clicks and interactions with interface elements
• Device and browser information (type, version, screen size, operating system)
• Approximate geographic location (country and region, derived from IP address)
• Custom events we define to measure product usage (such as account setup, content generation, post scheduling, and subscription events)
• Marketing attribution data (UTM parameters indicating how you arrived at our service)

Session Recording

We record session replays of user interactions for debugging and user experience improvement. These recordings capture mouse movements, clicks, and visible page content. Sensitive inputs such as password fields are automatically masked and not recorded. You can request that we delete your session recordings at any time by contacting us.

AI Generation Logging

When our service generates content on your behalf using AI models, we log the prompts sent to the AI provider and the responses received. This includes content you have uploaded to the service (such as documents, notes, or blog content) and the generated posts. This logging allows us to monitor quality, debug issues, and control costs. These logs are stored in PostHog (us.i.posthog.com) and accessible only to our team.

Payment Information

Payment processing is handled by Stripe. We do not store your full payment card details on our servers. We retain a record of your subscription status, billing history, and the last four digits of your payment method for support and accounting purposes.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the PostAgent service
• Generate and publish social media posts on your behalf based on the content and configuration you provide
• Process payments and manage your subscription
• Send you transactional emails (account confirmations, password resets, billing notifications)
• Communicate with you about your account, our service, and updates we think you'll find relevant
• Improve the product, debug issues, and identify usability problems
• Detect, prevent, and respond to fraud, abuse, security incidents, or violations of our terms
• Comply with legal obligations

Third-Party Services and Data Processors

We use the following third-party services to operate PostAgent. Each is a data processor that may receive your information to provide their service:

• PostHog Inc. (US-hosted, us.i.posthog.com) — product analytics, session replay, and AI generation logs
• Stripe — payment processing
• Anthropic — AI content generation (Claude models)
• OpenAI — AI image generation (DALL-E)
• Microsoft Azure — cloud hosting and infrastructure
• Google, Microsoft, GitHub, LinkedIn — authentication providers (only if you choose to sign in via these)
• Social media platforms (LinkedIn, X, Threads, Instagram, Facebook) — to publish posts on your behalf when you authorize them

Each of these services has their own privacy policies and data handling practices. By using PostAgent, you consent to the processing of your data by these services.

How We Share Information

We do not sell your personal information.

We share information only in the following circumstances:

• Service providers — with the third-party data processors listed above, only as needed to operate the service
• Legal compliance — if required by law, court order, or to protect the rights, property, or safety of PostAgent, our users, or the public
• Business transfers — if PostAgent is acquired, merged, or sold, your information may be transferred as part of that transaction. We will notify you and provide options where required by law
• With your consent — if you direct us to share information with another party

Data Retention

We retain your account information and content for as long as your account is active. If you delete your account, we will delete your account data within 30 days, except where we are required to retain certain records (for example, billing records for tax compliance) for longer periods as required by law.

Analytics and session replay data is retained according to PostHog's default retention policies (typically 7 years for events, shorter for session replay), unless you request earlier deletion.

Your Rights

You can:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Export your data in a machine-readable format
• Opt out of non-essential communications
• Withdraw consent for AI generation logging or session replay

To exercise any of these rights, contact us at the email address below.

If You Are in the European Union or United Kingdom

Under GDPR and UK GDPR, you have additional rights including the right to object to processing, the right to restrict processing, and the right to lodge a complaint with a supervisory authority. We process your data based on the contractual necessity of providing the service to you, your consent for analytics and marketing, and our legitimate interest in operating and improving the service.

If You Are in California

Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, the right to delete that information, the right to opt out of the sale of your personal information (we do not sell your information), and the right to non-discrimination for exercising your rights.

Security

We use industry-standard security measures including encryption in transit (HTTPS/TLS), encryption at rest for sensitive fields, secure authentication, and access controls. However, no system is completely secure. If we become aware of a data breach affecting your information, we will notify you in accordance with applicable law.

Children's Privacy

PostAgent is not intended for users under 18 years old. We do not knowingly collect information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us and we will delete it.

International Users

PostAgent is operated from the United States. By using the service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top and notify you via email or in-app notification for material changes. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions, requests, or concerns about this policy or our handling of your data, contact us at:

Email: support@thepostagent.com