1. Who is responsible
[legal entity name], [registered address], is the data controller for the personal data described here. Contact: hello@postiplex.com.
2. What we collect and why
| Data | Why | Basis |
|---|---|---|
| Your email address and sign-in events | To create and secure your account and send sign-in links and service email | Contract |
| Your business profile, website address and scanned pages | To research keywords and write content for your business | Contract |
| Tokens for connected blog and social accounts | To publish on your behalf | Contract |
| Content we produce for you and its publishing results | To show you the calendar, previews and analytics | Contract |
| Analytics returned by connected platforms | To show you how published content performs | Contract |
| Voice recordings and photos you upload | To produce podcast voices and presenter videos in your likeness | Consent |
| Waitlist email addresses | To tell you when access opens | Consent |
| Podcast download counts | Counted per episode, day and app; no listener is identified | Legitimate interest |
3. Who processes it
We use service providers to run Postiplex. They process data only on our instructions: Supabase (database, authentication, storage), Vercel (hosting), Railway (research and media service), Anthropic (language models), OpenAI (images), ElevenLabs (voices), HeyGen (avatars, if used), Creatomate (video rendering), DataForSEO and a search results provider (search data), Pexels (stock photos), a social publishing partner (platform tokens and sends), Resend (email) and ScrapingBee (reading blocked sites). The full list with each provider's role is on the security page. Some providers are outside [your region]; transfers rely on [standard contractual clauses or the applicable framework].
4. Cookies
Postiplex uses only the cookies needed to keep you signed in and to remember your theme. There are no advertising or cross-site tracking cookies on this site.
5. How long we keep it
Account data is kept while your account is open and deleted within 30 days of closure, except where we must keep records for tax or legal reasons. Connected-account tokens are deleted when you disconnect the account. Voice recordings and avatars are deleted when you remove them. Waitlist addresses are deleted when you ask or once access has opened and the invitation has been sent. Backups roll off within [backup retention period].
6. Your rights
Depending on where you live you can ask us to access, correct, export, restrict or delete your personal data, object to processing, or withdraw consent where consent is the basis. Email hello@postiplex.com; we answer within 30 days. You may also complain to your data protection authority.
7. Children
Postiplex is for businesses and is not directed at children under 16. We do not knowingly collect their data.
8. Changes
We may update this policy. Material changes are announced by email and on this page before they take effect.