Privacy Policy

1. Overview

This Privacy Policy explains how PostOtter (“we”, “us”) collects, uses, and shares information when you use our Service. By using the Service, you consent to the practices described here.

2. Information We Collect

Account information: email, display name, and authentication identifiers when you sign up.

Brand information: the product name, website URL, and brand details you provide during onboarding. We may automatically scrape your public website to extract logos, colors, and descriptive text used to inform AI-generated content.

Connected platform data:when you connect a third-party account (TikTok, Instagram, X), we receive an OAuth access token, your username, profile image, follower counts, and other public profile information from that platform’s API. We use this only to identify the connected account and publish content on your behalf.

Generated and posted content: the social media posts (text, images, videos) created by the Service and published on your behalf, along with their performance metrics when available.

Payment information: processed by Stripe. We do not store full payment card details on our servers; we receive only Stripe customer/subscription identifiers.

Usage data: standard server logs (IP address, browser type, pages visited) for security, debugging, and analytics.

3. How We Use Information

• To operate and maintain the Service
• To generate AI-powered social media content tailored to your brand
• To publish content to your connected social media accounts
• To process payments and manage your subscription
• To communicate with you about your account, the Service, and support requests
• To detect, prevent, and address fraud, abuse, and security issues

4. Sharing of Information

We do not sell your personal information. We share information only with the following categories of third parties, and only as necessary to operate the Service:

• Cloud infrastructure: Google Firebase (database, authentication), Vercel (hosting)
• AI providers: OpenAI, used to generate post copy and images
• Connected social platforms: TikTok, Instagram, X — we send content to these platforms via their APIs at your direction
• Payment processor: Stripe
• Legal compliance: if required by law, court order, or to protect our rights and the safety of users

5. Data from TikTok, Instagram, and X

When you connect a TikTok, Instagram, or X account, we receive data from those platforms’ APIs (e.g. username, profile picture, follower counts). We use this data exclusively to: (a) display your connected account in the dashboard, and (b) publish content you have authorized to that account. We do not share TikTok, Instagram, or X account data with third parties other than the cloud infrastructure providers listed above.

You can revoke our access at any time by disconnecting the account in the PostOtter dashboard or by removing PostOtter from your TikTok / Instagram / X account settings. When you disconnect, we delete the OAuth access token within 30 days.

6. Data Retention

We retain your account and brand information for as long as your account is active. Generated content and platform data are retained for the life of your account so you can review past posts and performance. When you delete your account, we delete or anonymize your data within 30 days, except where we are required to retain it for legal or accounting purposes.

7. Security

We use industry-standard measures (encryption in transit, access controls, secrets management) to protect your data. However, no system is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, or to object to certain processing. To exercise these rights, email privacy@postotter.app.

9. Children’s Privacy

The Service is not intended for children under 13 (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10. International Users

The Service is operated from the United States. By using the Service, you consent to the transfer and processing of your information in the United States and other countries where our service providers operate.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be communicated via the Service or by email.

12. Contact

Questions about this Privacy Policy? Email privacy@postotter.app.