Privacy policy

Who is responsible

The seller identified below is responsible for personal data processed to operate Posthut accounts, billing, security and support. If you upload other people’s personal data for a client or business, you must have authority and a lawful basis to do so. Contact us before using Posthut for processing that requires additional contractual safeguards.

Data we process and why

We process account identifiers and contact details, authentication records, workspace and social account identifiers, connection credentials, drafts, images, brand voice inputs, schedules, publishing results and support messages to provide the service you request. This processing is necessary to perform our contract with you.

Billing identifiers, plan and usage records support subscriptions and enforce allowances. Stripe handles payment card details; Posthut stores billing references rather than full card numbers. We retain records needed for legal obligations. Security events, limited error diagnostics and trial eligibility checks are used for our legitimate interests in preventing abuse and protecting the service. Where consent is required for an optional use, we will request it separately.

Service providers and sharing

We use Vercel for hosting, Neon for the database, Google Cloud for image storage, Google Gemini for AI requests, Zernio and your connected social platforms for social publishing, Stripe for payments, Resend for email, and Sentry for error reporting. Inputs necessary for an action are sent to the relevant provider. Review your content before sending it for AI processing or publication; do not include unnecessary sensitive information.

Providers may process data outside your country, including outside the EEA. Applicable data protection requirements and transfer safeguards must apply to those arrangements. Contact us for information about the safeguards used for a particular provider. We do not sell your personal data.

Retention and deletion

Account content is retained while needed to provide your workspace. You can delete available content and request account deletion. Deletion can require completion of pending provider or storage operations; residual backups and provider records may follow their own retention schedules.

Minimal billing, consent, fraud prevention and dispute records may remain where needed for legal obligations or legitimate claims. A keyed, mode-specific eligibility record can remain after account deletion to prevent repeated free trials; it contains keyed account and card eligibility records, never your email or the payment-card fingerprint in plain text. Contact us for details of the retention applicable to your account.

Cookies and diagnostics

Posthut uses necessary authentication and security cookies to keep you signed in and protect sessions. Error diagnostics are filtered to reduce personal data. This policy does not grant consent to optional advertising or tracking; any optional use requiring consent must be presented separately.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, or withdraw consent for processing based on consent. Contact the seller below; we may need to verify your identity. You can complain to your local data protection authority, including the Spanish AEPD where applicable.