Privacy Policy

This Privacy Policy describes how Postevery ("Postevery", "we", "us", or "our") collects, uses, stores, and discloses information when you access postevery.com or use the Postevery social media scheduling and publishing service (the "Service"). By using the Service, you acknowledge this Policy.

1. Information we collect

We collect the following categories of information:

• Account information — name, email address, and a hashed password when you register for Postevery.
• Connected platform data — information received from third-party social networks, messaging services, and publishing platforms that you choose to connect, as described in Sections 3–13 below.
• Content you provide — posts, captions, media files, comments, schedules, drafts, and related metadata you create or upload in the Service.
• Usage information — log data, device and browser type, IP address, pages viewed, and actions taken within the Service, used to operate, secure, and improve Postevery.
• Billing information — subscription status and payment-related identifiers processed by our payment provider. We do not store full payment card numbers.

2. Connected platform data — general principles

Postevery is a scheduling and publishing tool. When you connect a third-party account, you authorize us to access that platform's APIs on your behalf, solely to provide features you use in the Service — such as listing connected accounts, scheduling and publishing content, retrieving analytics, and managing comments or replies you initiate.

Unless otherwise stated in this Policy or required by law:

• We access platform data only after you complete an authorization flow (OAuth or equivalent) or voluntarily provide credentials for direct-connect integrations.
• We do not collect or store passwords for platforms that authenticate through OAuth, except where you explicitly provide an app-specific password or API credential for a direct-connect integration (for example, an application password for WordPress or Bluesky).
• We use platform data only for purposes necessary to operate the Service. We do not sell, rent, or license personal information or platform data to third parties.
• We do not use platform data to build advertising profiles, to market unrelated products, or for purposes independent of your use of Postevery.
• We do not share platform data with data brokers or unrelated third parties except as described in Section 15 (Sharing and disclosure).
• Our access is limited to the permissions, scopes, or API credentials you grant at the time of connection. We do not access data beyond what those permissions allow.
• You remain in control of each connection. You may disconnect a channel in Postevery or revoke access in the third-party platform's settings at any time.
• Access tokens and credentials are stored on our servers while a channel remains connected, protected by encryption in transit and access controls appropriate to the sensitivity of the data.

3. Meta platforms (Facebook, Instagram, Threads)

When you connect a Facebook Page, Instagram account (including Instagram via Facebook Login or Instagram API with Instagram Login), or Threads account, we receive information from Meta only after you authorize access through Meta's login flow. We do not collect your Meta account password.

• Data we may receive — account and Page names, usernames, profile pictures, account and Page identifiers, OAuth access tokens, posts and media you schedule, comments you publish through Postevery, and analytics or insights metrics for connected accounts.
• How we use it — to list your Pages or accounts, publish and schedule content, display analytics, and manage comments on your behalf as you direct in the Service.
• Restrictions— we do not sell Meta platform data, use it for advertising profiles unrelated to the Service, or access data beyond the permissions you grant. Our use of Meta data is subject to Meta's Platform Terms and Developer Policies.
• Revoking access — disconnect the channel in Postevery under Integrations, or remove Postevery in Facebook or Instagram under Settings → Apps and websites or Business integrations.

4. TikTok

When you connect a TikTok account, we receive information from TikTok only after you authorize access through TikTok's Login Kit. We do not collect your TikTok password.

• Data we may receive — open ID, display name, username, avatar, profile link, bio, verification status, public videos you authorize us to list, and OAuth access tokens.
• How we use it — to authenticate your account, display your profile in Postevery, upload or publish videos you schedule, show profile and video statistics in analytics, and operate the content calendar on your behalf.
• Restrictions— we do not sell TikTok data or use it for purposes unrelated to the Service. Our use is subject to TikTok's Developer Terms and policies.
• Revoking access — disconnect TikTok in Postevery, or remove Postevery in the TikTok app under Settings → Security and permissions → Apps and services.

5. Google (YouTube and Google Business Profile)

When you connect YouTube or a Google Business Profile location, we receive information from Google only after you authorize access through Google OAuth. We do not collect your Google account password.

• Data we may receive — channel or business name, profile image, channel or location identifiers, OAuth tokens, video metadata and upload permissions for content you schedule, and analytics or insights where available through the APIs you authorize.
• How we use it — to list your channels or locations, upload or publish videos and posts you schedule, and display performance metrics in Postevery analytics.
• Restrictions — we use Google user data in accordance with the Google API Services User Data Policy, including Limited Use requirements. We do not sell Google user data or use it for unrelated advertising.
• Revoking access — disconnect the channel in Postevery, or revoke access at myaccount.google.com/permissions.

6. X (formerly Twitter)

When you connect an X account, we receive information from X only after you authorize access through X's OAuth flow. We do not collect your X password.

• Data we may receive — profile name, username, avatar, account identifier, OAuth tokens, and permissions to post content and read engagement metrics you authorize.
• How we use it — to publish and schedule posts and display analytics for connected X accounts.
• Restrictions — we do not sell X data or use it beyond providing the Service. Our use is subject to the X Developer Agreement and policies.
• Revoking access— disconnect in Postevery or revoke Postevery under X's connected apps settings.

7. LinkedIn

When you connect a LinkedIn profile or LinkedIn Page, we receive information from LinkedIn only after you authorize access through LinkedIn OAuth.

• Data we may receive — name, profile image, account or Page identifiers, OAuth tokens, and permissions to publish content and retrieve analytics you authorize.
• How we use it — to publish and schedule posts to your profile or Page and display engagement metrics in Postevery.
• Restrictions— we do not sell LinkedIn data. Our use is subject to LinkedIn's API Terms of Use.
• Revoking access — disconnect in Postevery or remove Postevery under LinkedIn Settings → Data privacy → Other applications.

8. Pinterest and Reddit

When you connect Pinterest or Reddit, we receive profile information, OAuth tokens, and permissions to publish pins or posts and read analytics you authorize. We use this data solely to schedule, publish, and report on content you create in Postevery. We do not sell this data. You may disconnect in Postevery or revoke access in Pinterest or Reddit account settings.

9. Discord, Slack, and Telegram

When you connect Discord, Slack, or Telegram, we receive account or workspace identifiers, channel identifiers, OAuth or bot tokens you authorize, and permissions to post messages you schedule. We use this data solely to deliver content to the channels you select. We do not read private messages beyond what is necessary to post on your behalf, sell this data, or use it for unrelated purposes. Disconnect in Postevery or revoke the integration in the respective platform's settings.

10. Twitch and Kick

When you connect Twitch or Kick, we receive profile information, OAuth tokens, and permissions to publish or announce content you authorize. We use this data solely to operate scheduling and publishing features you initiate. We do not sell this data. Revoke access by disconnecting in Postevery or through the platform's connected applications settings.

11. Federated and decentralized networks

Postevery supports connections to federated or decentralized networks, including Mastodon, Bluesky, Nostr, Lemmy, and Farcaster (via Neynar). Depending on the integration, you may authorize access through OAuth or provide instance URL, handle, app password, API key, or cryptographic credentials.

• Data we may receive or store — instance URL, account identifiers, display name, avatar, access tokens or credentials you provide, and content you schedule for publication.
• How we use it — solely to authenticate and publish to the instance or network you designate.
• Restrictions — we do not sell this data or use it beyond providing the Service. Credentials you provide are stored securely and removed when you disconnect the channel.

12. Blogs and publishing platforms

When you connect WordPress, Medium, Dev.to, Hashnode, or Dribbble, you may provide a site URL, username, integration token, API key, or application password. We use these credentials solely to publish content you schedule to the site or account you specify. We do not sell this data or access your account beyond publishing and analytics features you use. Remove credentials by disconnecting the channel in Postevery.

13. Other integrations

Postevery may support additional platforms from time to time, including VK, MeWe, Whop, Listmonk, Skool, and Moltbook. For each integration, we collect only the information necessary to authenticate and perform the publishing or analytics actions you request. We do not sell platform data and do not use it for purposes unrelated to the Service. Disconnect any integration in Postevery at any time.

14. How we use your information

In addition to the platform-specific uses above, we use information to operate and maintain the Service, authenticate users, process subscriptions, provide customer support, detect fraud and abuse, comply with legal obligations, and improve Postevery's features and reliability.

15. Sharing and disclosure

We do not sell your personal information. We disclose information only in the following circumstances:

• Platforms you connect — when you schedule or publish content, we transmit that content and necessary metadata to the relevant third-party platform APIs on your instructions.
• Service providers — trusted vendors who assist with hosting, infrastructure, payment processing, email delivery, and security, under contractual obligations to protect your data and use it only to provide services to Postevery.
• Legal requirements — when required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Postevery, our users, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to the acquirer honoring this Policy.

16. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. When you disconnect a channel, we delete or invalidate associated tokens and remove channel-specific data within a reasonable period. When you delete your account, we delete personal data and content associated with your workspace, except where retention is required by law or for legitimate security, fraud prevention, or billing purposes.

17. Deleting your data

You may remove Postevery's access to your data at any time:

• Disconnect one channel — in Postevery, open Integrations, open the channel menu, and choose Delete channel.
• Revoke at the platform— remove Postevery in each connected platform's application, security, or connected-apps settings (for example, Meta, TikTok, Google, X, or LinkedIn account settings).
• Delete your Postevery account — in Settings, choose Delete account to permanently delete your account and associated data, subject to legal retention requirements.
• Contact us — email support@postevery.com for assistance with data deletion requests.

18. Your rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact support@postevery.com. If you are in the European Economic Area or United Kingdom, you may lodge a complaint with your local data protection authority.

19. Security

We implement technical and organizational measures designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

20. International transfers

Postevery may process and store information in countries other than where you reside. Where required, we use appropriate safeguards for international data transfers.

21. Changes

We may update this Policy from time to time. Material changes will be communicated through the Service or by email. The "Last updated" date above indicates when this Policy was last revised. Continued use after changes take effect constitutes acceptance of the updated Policy.

22. Contact

Postevery operates postevery.com. For privacy inquiries, contact support@postevery.com.