PostSpoke
Dark
Sign In
Get Started
Your Privacy Matters
Effective Date: August 15, 2026. This comprehensive policy explains how PostSpoke collects, processes, and protects your information with zero data selling.
AES-256 Encryption • GDPR & CCPA Ready • No Ad Trackers
1
Information We Collect
PostSpoke collects information necessary to deliver multi-channel scheduling, post automation, AI drafting, and performance analytics across your connected social profiles.
Account & Identification Data
When you create an account, we collect your full name, email address, password hash (salted using bcrypt), account timezone, and workspace preferences.
Connected Social Accounts & OAuth Tokens
When you link third-party channels (X/Twitter, LinkedIn, Meta, YouTube, Bluesky, Mastodon, TikTok, etc.), we receive OAuth access tokens, channel IDs, page handles, and profile avatars. We NEVER store your raw third-party account passwords.
Content, Drafts & Media Files
We store your draft copies, scheduled posts, hashtags, publishing timestamps, and uploaded media files (images, videos, documents) to execute scheduled publications on your behalf.
Usage Telemetry & Logs
We collect anonymous log data including browser type, operating system, IP address, API response latencies, and device identifiers to protect against abuse and maintain service stability.
2
How We Use and Process Your Data
We process your data exclusively for legitimate business purposes and to execute our contractual commitments to you:
Transmitting and publishing scheduled posts to your selected social channels at the designated time.
Aggregating engagement metrics, reach, and audience analytics from connected channel APIs.
Powering AI content formatting, grammar polishing, and tone adjustment features upon your request.
Delivering real-time publishing status alerts, failure notifications, and security verification codes.
Monitoring platform security, preventing unauthorized access, and enforcing rate limits.
3
Data Security & AES-256 Encryption
We implement enterprise-grade technical and organizational security controls to protect your data against unauthorized access, disclosure, or alteration:
Encryption at Rest: All sensitive database fields, including OAuth tokens, refresh secrets, and user profile data, are encrypted using AES-256 standards.
Encryption in Transit: All data transferred between your browser, our servers, and third-party social APIs is encrypted using TLS 1.3 cryptographic protocols.
Isolated Tenant Security: Each organization’s data is strictly partitioned with multi-tenant access barriers preventing cross-user data leakage.
Zero Credential Logging: Application loggers are configured to strip authentication headers and sensitive tokens prior to log ingestion.
4
Data Sharing & Third-Party Sub-processors
We do NOT sell, rent, monetize, or trade your personal information or content to third-party data brokers, advertisers, or analytics aggregators under any circumstances.
Authorized Social APIs
We share your post payload (text, media, hashtags) strictly with the external social networks you explicitly designate for publishing.
Cloud Infrastructure & Database
We host our cloud backend and databases with ISO 27001 / SOC 2 Type II compliant providers (MongoDB Atlas, AWS).
Payment Processing (Future Commercial Launch)
During the Beta period, PostSpoke is 100% free with no credit card required. When commercial tiers launch in the future, payments will be processed securely via Stripe. PostSpoke never stores or processes raw credit card numbers.
5
Data Retention & User Data Deletion Instructions (Facebook, Instagram & All Platforms)
We retain your personal data and post history only for as long as your account remains active or as needed to provide you with the Service. You have the right to request deletion of your data at any time.
How to Delete Your Connected Social Data & Credentials
To remove your Facebook, Instagram, or any other social channel data from PostSpoke, navigate to Profile > Channels, locate the account, and click Disconnect. This immediately and permanently deletes all stored OAuth tokens and channel metadata from our databases.
Facebook & Instagram Data Deletion Instructions (Meta Compliance)
In accordance with Meta Platform Policy, if you wish to delete your activities for PostSpoke from Facebook/Instagram: (1) Go to your Facebook Profile Settings & Privacy > Settings; (2) Click "Apps and Websites"; (3) Search for "PostSpoke" and click "Remove"; (4) Click "View Removed Apps and Websites" and click "Send Request" to request that PostSpoke delete your user data. Alternatively, email postspoke@gmail.com with the subject "Meta Data Deletion Request" and your data will be purged within 48 hours.
Full Account Deletion
You may permanently delete your entire PostSpoke account and all associated data anytime via Profile > Security > Delete Account. Upon confirmation, your profile, posts, media references, and all connected account tokens are permanently expunged.
You may request complete account deletion at any time via Profile & Security > Delete Account (password confirmation required).
Upon account deletion, your posts, connected-account credentials, and notifications are immediately and permanently deleted from our databases.
Deleting your account removes our copy of your connected accounts’ credentials, but does not call each platform’s own token-revocation API — for full upstream revocation, also remove PostSpoke from that platform’s connected-apps settings.
6
Your Privacy Rights (GDPR & CCPA Compliance)
Depending on your location, you possess statutory data protection rights under regulations such as the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA):
Right to Access: Download a complete JSON export of your profile, posts, connected-account metadata, and notifications anytime via Profile & Security > Export My Data.
Right to Rectification: You may update inaccurate personal details directly within your Profile Settings.
Right to Erasure (Right to be Forgotten): Permanently delete your account and all associated data anytime via Profile & Security > Delete Account.
Right to Data Portability: Your data export is provided in a standardized, machine-readable JSON format.
Right to Opt-Out: We do not sell your personal data; no opt-out is necessary.
7
Cookies & Local Storage
PostSpoke utilizes essential cookies and local browser storage strictly required for application functionality, session authentication, and theme preferences (Light/Dark mode). We do not deploy third-party cross-site tracking cookies.
Session Authentication Token (JWT) stored securely for persistent sign-in.
User interface preference tokens (Theme mode, layout preferences, recent calendar views).
8
Children’s Privacy Protection
PostSpoke is not directed toward children under 13 years of age (or under 16 in the European Economic Area). We do not knowingly collect personal identifiable information from children. If we become aware that a child has provided us with personal information, we will immediately take steps to delete such data.
9
Privacy Policy Updates & Contact
We may periodically update this Privacy Policy to reflect enhancements to our platform or evolving regulatory requirements. Material changes will be communicated via email or through prominent notifications in your PostSpoke dashboard.
For privacy inquiries, GDPR data requests, or compliance questions, contact our Data Protection Officer at postspoke@gmail.com.
Data Privacy Officer & Support
Exercise your GDPR/CCPA rights or ask questions about our data processing practices anytime.
Security Architecture
postspoke@gmail.com
PostSpoke
The ultimate multi-platform ecosystem for social media management and multi-platform growth.
Product
Pricing
Resources
BlogBuffer AlternativeHootsuite Alternative
Company
About Us
Support
Help Center
Legal
PrivacyTermsSecurity
© 2026 PostSpoke. All rights reserved.