Privacy Policy

1. Our Services

Postify is a cloud-based platform that combines multiple social media accounts for unified management. Users can schedule posts, manage campaigns, engage their audience, and analyze results across platforms including Facebook, Instagram, Twitter/X, LinkedIn, TikTok, YouTube, and many more.

Social Networks: Any collection, use, and management of personal information by Social Networks (including but not limited to TikTok, Meta, X Corp, LinkedIn, and Google) are governed by their respective privacy policies. We encourage you to review those policies independently.

Your Privacy Obligations: When you collect or process personal information about third parties through our Services (e.g., your followers or customers), you are responsible for complying with all applicable privacy laws and obtaining any required consents.

Age Restriction: Our Services are not intended for children under 18. We do not knowingly collect personal information from minors.

2. Information We Collect

Account Information

• Name, email address, and organization details
• User preferences including language and timezone
• Billing information for paid subscriptions
• Subscription tier and transaction history

Content and Social Media Data

• Social profile information from connected Social Networks (including data retrieved via the TikTok API, Meta APIs, X API, and other platform APIs)
• Posts, captions, images, videos, and other media you upload or schedule through our Services
• Social media metrics such as follower counts, engagement rates, and reach
• Comments and messages where applicable
• Location data you choose to attach to content

Usage and Technical Data

• IP address and browser type
• Device type and operating system
• Pages visited, features used, and session duration
• General location derived from IP address
• Error logs and performance data

Cookies and Tracking

We use cookies, web beacons, and similar tracking technologies to operate our Services and analyze usage. See Section 10 for details.

Communications

• Support inquiries and feedback you send us
• Responses to surveys or marketing communications

3. How We Use Your Information

Providing the Services

• Authenticating your account and managing access
• Publishing and scheduling content to Social Networks on your behalf
• Displaying analytics and performance data
• Processing payments and managing subscriptions
• Providing AI-powered content suggestions

Communicating With You

• Sending transactional emails (account confirmations, billing receipts)
• Product updates and feature announcements (with your consent or where permitted)
• Responding to support requests

Improving Our Services

• Analyzing usage patterns to improve features and performance
• Identifying and fixing bugs and security issues
• Developing new features based on user behavior

Legal and Security

• Enforcing our Terms of Service
• Preventing fraud, abuse, and security threats
• Complying with applicable legal obligations

4. TikTok API Data

When you connect your TikTok account to Postify, we access your TikTok data through the official TikTok API in accordance with TikTok's Platform Policy and Developer Terms. Specifically:

• We access only the permissions you explicitly authorize during the OAuth connection flow;
• We use TikTok API data solely to provide the Services you have requested (scheduling, publishing, and analytics);
• We do not sell, rent, or share TikTok user data with third parties for advertising or marketing purposes;
• We do not store TikTok content beyond what is necessary to provide the Services;
• You may revoke Postify's access to your TikTok account at any time through TikTok's app settings or by disconnecting the channel in your Postify account;
• Upon disconnection, we will delete your TikTok OAuth tokens and cease accessing your TikTok data.

Our use of TikTok API data is limited to the purposes described in this Privacy Policy and does not extend to any other use not disclosed here.

5. Your Rights

Access and Control

You may access and update your account information at any time by logging into your Postify account. For additional requests, contact us at legal@postify.nz.

Requests to access, correct, update, or delete your personal information will be handled within thirty (30) days.

Revoking Social Network Access

If you have authorized Postify to access your Social Network accounts, you may revoke this access at any time by disconnecting the account in your Postify settings or by contacting us at support@postify.nz.

Marketing Communications

You can opt out of marketing emails at any time by clicking the unsubscribe link in any email. Note that you will continue to receive essential service-related emails.

Account Deletion

You may request deletion of your account and associated data at any time. We will process your request within 30 days, subject to any legal retention obligations.

6. Who Has Access to Your Information

Our Team

Authorized employees and contractors may access your information on a need-to-know basis, under confidentiality obligations.

Service Providers

We share limited information with trusted third-party service providers who assist us in operating our Services (e.g., payment processors, cloud hosting, analytics tools). These providers are contractually obligated to protect your information and may not use it for their own purposes.

Social Networks

When you connect a Social Network account, information is exchanged between Postify and that platform according to the platform's own privacy policy and the permissions you grant.

Legal Requirements

We may disclose your information when required by law, court order, or government authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to a successor entity. We will notify you via email or prominent notice before your information becomes subject to a different privacy policy.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

7. Data Retention

We retain your personal information for as long as necessary to provide the Services and comply with our legal obligations:

• Account data is retained while your account is active;
• Social media content and analytics data from Social Networks is retrieved in real-time and is not permanently stored beyond what is needed for scheduling and reporting;
• After account deletion, we retain minimal records for up to 90 days for legal and fraud prevention purposes, after which data is permanently deleted;
• Billing records may be retained for up to 7 years to comply with financial regulations.

8. Security

We implement industry-standard security measures to protect your information:

• All data is transmitted over encrypted HTTPS connections;
• OAuth tokens for Social Network access are encrypted at rest;
• We never store your Social Network passwords;
• All payment information is handled exclusively by PCI-certified payment processors — we do not store card details;
• We conduct regular security reviews and access control audits.

While we take reasonable steps to protect your data, no system is completely secure. We cannot guarantee the absolute security of your information and are not liable for unauthorized access beyond our reasonable control.

9. GDPR – European Users

If you are located in the European Economic Area (EEA) or United Kingdom, the following applies:

Legal Bases for Processing

• Contract performance: Processing necessary to provide the Services you requested;
• Consent: For marketing communications and optional features;
• Legitimate interests: For security, fraud prevention, and service improvement;
• Legal obligation: Where required by applicable law.

Your GDPR Rights

• Right to access your personal data;
• Right to rectification of inaccurate data;
• Right to erasure ("right to be forgotten");
• Right to restrict processing;
• Right to data portability;
• Right to object to processing;
• Right to withdraw consent at any time.

To exercise any of these rights, contact us at legal@postify.nz. You also have the right to lodge a complaint with your local data protection authority.

Data Controller and Processor

Postify LLC acts as a Data Controller when collecting and managing your account information. When you use our Services to manage content on behalf of your own audience, Postify acts as a Data Processor on your instructions. A Data Processing Addendum (DPA) is available upon request for GDPR Article 28 compliance.

10. Cookies

We use the following types of cookies:

• Essential cookies: Required for the Services to function (authentication, security);
• Analytics cookies: Help us understand how users interact with our Services;
• Preference cookies: Remember your settings and preferences.

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of our Services.

11. New Zealand Privacy Act 2020

Postify LLC complies with the New Zealand Privacy Act 2020. New Zealand residents have the right to access and correct personal information we hold about them. To make a request, contact us at legal@postify.nz. If you believe your privacy rights have been violated, you may file a complaint with the New Zealand Privacy Commissioner at privacy.org.nz.

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to know what personal information is collected about you;
• Right to request deletion of your personal information;
• Right to correct inaccurate personal information;
• Right to opt out of the sale of personal information;
• Right to non-discrimination for exercising these rights.

We do not sell your personal information. To exercise any of these rights, contact us at legal@postify.nz.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on our website. The updated policy will take effect upon posting. We encourage you to review this page periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: