PosterAI Privacy Policy

• Account information you provide: your name, email address and a hashed password.
• Connected social accounts. When you connect an account through a platform's official OAuth flow, we collect and store, for each connected account: the profile / account ID, username and display name, the profile image (where the platform provides it), and the access token and (where applicable) refresh token issued by that platform. This applies to TikTok (via Login Kit and the Content Posting API), Instagram (via the Instagram API with Instagram Login) and LinkedIn (via OpenID Connect). We also store the posts you create and publish through PosterAI (captions, media, post type and scheduling times). We request only the minimum permissions (scopes) needed to show your connected account and to publish the content you create. We do not collect your followers, private messages, or audience analytics.
• Content you create: captions, post types, scheduling times and any images or videos you upload.
• Usage and technical data: basic, privacy-friendly analytics about page views and errors (we use a cookieless analytics provider), plus standard server logs.

We use your information solely to operate and improve the Service, specifically to:

• authenticate you and maintain your account;
• display which social accounts you have connected;
• store your drafts, scheduled posts and uploaded media;
• publish content to your connected accounts on your behalf, at the times you choose or when you press “publish now”;
• provide support and keep the Service secure and reliable.

We do not sell your data and we do not use it for advertising or profiling.

Access tokens and profile data obtained through each platform's API are used only to perform actions you explicitly request — for example, publishing a video to your own TikTok profile. Our access to, storage and use of information received from these platforms adheres to each platform's developer terms and policies, including the TikTok Developer Terms of Service and TikTok's limited-use requirements, the Meta Platform Terms and the LinkedIn API Terms. We do not transfer platform data to third parties except as processors needed to run the Service (see section 5), and we do not use it for any purpose other than providing the features you use.

• Destination platforms. When you publish or schedule a post, the content (caption and media) is sent to the platform you selected (TikTok, Instagram or LinkedIn).
• Service providers (processors). We use Amazon Web Services (S3, in the United States) to host uploaded media, and our own hosting and email provider to run the Service. These providers process data only on our behalf.
• Legal. We may disclose information if required by law or to protect our rights, users or the public.

We never sell or rent your personal information.

We keep your data for as long as your account is active. You can, at any time:

• Disconnect a social account in the app, which immediately deletes the stored access and refresh tokens for that account;
• Delete individual posts or uploaded media;
• Delete your entire account and all associated data by emailing support@posterai.pro — we process deletion requests within 30 days. Full instructions are at posterai.pro/data-deletion.

You can also revoke PosterAI's access directly from each platform (for example, in TikTok under Settings → Security & permissions → Apps, or on Instagram under Settings → Apps and websites).

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to withdraw consent. To exercise any of these rights, contact support@posterai.pro. You may also disconnect accounts and delete content directly in the app at any time.

All traffic is encrypted in transit over HTTPS. Access tokens and passwords are stored securely (passwords are hashed and never stored in plain text), and access to production data is restricted. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

The Service is intended for people aged 18 or older who manage professional social-media accounts. It is not directed to children, and we do not knowingly collect personal information from anyone under 18.

We operate the Service and store data (including uploaded media on Amazon S3) in the United States. If you access the Service from outside the United States, you consent to the transfer and processing of your information there.

We use strictly necessary cookies to keep you signed in, and a privacy-friendly, cookieless analytics provider to understand page views and errors in aggregate. We do not use third-party advertising or tracking cookies.

We may update this Policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you.

Questions about this Policy or your data? Email support@posterai.pro.