Privacy Policy

What we collect

• Account details: your name, email address, and a securely hashed password (or, if you sign in with Google, your Google account ID instead of a password).
• Workspace content: workspace names and logos, posts, captions, comments, images and videos you upload, designs you make, and the address or phone number you add to templates.
• Connected channels: when you connect a social account (for example Facebook, Instagram or TikTok), we store the access the platform grants so we can publish the posts you schedule and show their results.
• Billing: your plan and subscription status. Card details are handled by Stripe and never reach our servers.
• Usage data: pages you visit, features you use, device and browser details, and errors, so we can fix problems and improve the product.

Google sign-in

If you choose “Continue with Google”, Google shares your name, email address and Google account ID with us. We use them only to create your account and sign you in. We do not request access to your Gmail, contacts, files or any other Google data. We do not sell Google user data, use it for advertising, or use it to train AI models, and we share it only with the service providers below as needed to run PostMarga. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use it

• To run your account and workspace, and publish posts when you ask us to.
• To confirm your email address and send account and service emails.
• To bill you for your plan.
• To keep the service secure and prevent abuse and fake accounts.
• To understand how the product is used and make it better.

We do not sell your personal data, and we do not show ads.

Who helps us run PostMarga

We share data only with providers that process it on our behalf:

• Convex stores account and workspace data.
• Postiz (run on our own servers) schedules and publishes posts to your connected channels.
• Stripe processes payments.
• Cloudflare sends our emails and protects our sites.
• PostHog (EU hosting) provides product analytics and error reports.
• Google provides sign-in, if you use it.
• AI model providers (through OpenRouter) process the text of a design only when you ask the editor to rewrite it.
• Social platforms receive the posts you schedule to them, under their own privacy policies.

We may also disclose data when the law requires it, or to protect the rights and safety of our users and the service.

Cookies

We use a cookie to keep you signed in and short-lived cookies to secure sign-in flows. Analytics also uses cookies and local storage to tell visits apart. We remember your light or dark theme in your browser.

How long we keep it

We keep your data while your account is open. When you ask us to delete your account, we delete your workspace content and account details within 30 days, except records we must keep by law (such as invoices). Unconfirmed sign-ups may be removed automatically.

Your choices and rights

You can update your workspace, remove your logo, disconnect channels and delete posts at any time. You can also ask us for a copy of your data, to correct it, or to delete your account, by emailing [email protected]. Depending on where you live, you may have further rights, including to object to processing or to complain to your data protection authority. You can remove PostMarga's access to your Google account at any time from your Google account's security settings.

Security

Passwords are hashed, access to connected channels is encrypted at rest, and all traffic uses HTTPS. No service is perfectly secure, but we work to protect your data and will tell you about a breach that affects you.

Children

PostMarga is not meant for children under 16, and we do not knowingly collect their data.

Changes

If we change this policy, we will update the date above and, for significant changes, tell you by email or in the app.