Privacy Policy

Postzora ("we", "us") provides the website postzora.com and the app at app.postzora.com. We decide how your account data is used. For anything about privacy, email [email protected].

Your workspace content, such as posts and media, is processed on behalf of the workspace owner, who decides what goes into it.

We collect only what we need to run Postzora:

• Account details: your name, email address and password (stored only as a secure hash), and your two-factor settings if you turn them on.
• Sign-in with Google: if you choose it, your name, email address and profile picture from your Google account.
• Workspace content: posts, media, comments, approval decisions, posting times and settings that you and your team create.
• Connected channels: the account name, handle, profile picture and access tokens a platform gives us when you connect it. Tokens are encrypted.
• Billing details: your plan and invoices. Card details are handled by our payment provider; we never see or store full card numbers.
• Technical data: IP address, browser, device and timestamps in our logs, used to keep the service secure and working.
• Messages you send us, such as support emails.

We use your data to:

• Provide the service: run your account, show your calendar, and publish posts to the channels you choose (to perform our contract with you).
• Send service emails, such as email verification, invitations, approval requests and failed-post alerts (contract).
• Keep Postzora secure, prevent abuse and fix problems (our legitimate interests).
• Bill you and keep the records the law requires (legal obligation).
• Send product news, only if you agree; you can unsubscribe at any time (consent).

When you connect a channel, we request only the permissions needed to publish your posts and show the account in Postzora. We use platform data only to provide those features to you. We do not sell it, use it for advertising, or use it to train AI models.

Postzora’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect a channel at any time, which deletes its stored tokens, and you can revoke Postzora’s access from each platform’s connected-apps settings.

We do not sell your personal data. We share it only with:

• Service providers that help us run Postzora, such as hosting, email delivery and payment processing, under agreements that require them to protect it and use it only for us.
• The platforms you publish to, which receive the posts and media you send them.
• Members of your workspaces, who see the content and activity in workspaces you share.
• Authorities or other parties when the law requires it, or to protect the rights and safety of our users and the service.
• A buyer or successor if Postzora is reorganised or sold, under this policy.

Your data may be processed in countries other than your own, including where our servers and service providers are. Where data protection law requires it, we use recognised safeguards such as standard contractual clauses.

We keep your data while your account is active. When you delete content, a channel or your account, we delete it from our live systems straight away. Any copies in backups are removed as the backups rotate, within 30 days. Technical logs are kept only as long as we need them for security and troubleshooting, normally no more than 90 days. Billing records are kept for as long as tax law requires.

We protect your data with encryption in transit, encrypted channel tokens, hashed passwords, role-based access and optional two-factor sign-in. No service is perfectly secure; if you find a vulnerability, please report it to [email protected].

Depending on where you live (for example under the GDPR, UK GDPR or California law), you can ask to access, correct, export or delete your data, and to object to or restrict how we use it. You can withdraw consent at any time. We do not sell or share personal data for cross-context advertising.

To use these rights, email [email protected]. We reply within 30 days. You can also complain to your local data protection authority.

We use only the cookies needed to keep you signed in and to protect forms against forgery, plus your browser’s local storage for preferences such as theme. We do not use advertising or cross-site tracking cookies.

Postzora is for business use and is not meant for anyone under 18. We do not knowingly collect data from children.

We will post any changes here and update the date above. For significant changes, we will tell you by email or in the app before they take effect.

Questions or requests about your data: [email protected].