This policy explains what personal information Postlenk collects, why we collect it, and the choices you have. It applies to our website, apps and services (together, the “Service”).
1. Who we are
The Service is operated by [Postlenk legal entity name], registered in [country] under company number [number], with its registered office at [address] (“Postlenk”, “we”, “us”). We are the controller of personal information described in this policy, except where we process content on behalf of agencies and their clients, in which case we act as a processor.
2. Information we collect
- Account information: name, email address, password (stored as a hash), company name and workspace settings.
- Billing information: billing address, tax ID and payment status. Card details are handled by our payment provider and never stored by us.
- Content: captions, media, comments, schedules and approvals you create or upload.
- Social account data: profile identifiers, access tokens and post performance metrics from platforms you connect.
- Usage and device data: IP address, browser type, pages viewed, feature usage and error logs.
- Communications: messages you send to support or through our contact form.
3. How we use it
- To provide the Service, including scheduling and publishing posts to your connected channels.
- To calculate best posting times and generate analytics for your own accounts.
- To process payments and manage subscriptions.
- To provide support and send service messages such as failed-post alerts and billing notices.
- To keep the Service secure, prevent abuse and comply with legal obligations.
- To send product updates and marketing, where you have agreed or where the law allows. You can unsubscribe at any time.
We do not sell your personal information, and we do not use your content to train artificial intelligence models.
5. Legal bases
Where the GDPR or UK GDPR applies, we rely on: performance of a contract (providing the Service); legitimate interests (security, product improvement and limited direct marketing); consent (optional cookies and certain marketing); and legal obligation (tax and accounting records).
7. International transfers
Our providers may process data outside your country. Where we transfer data from the EEA, UK or Switzerland, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
8. Retention
We keep account data and content for as long as your account is active. After you delete your workspace, content is removed within 30 days and backups are overwritten within 90 days. Billing records are kept for the period required by tax law.
9. Security
We encrypt data in transit and at rest, encrypt access tokens, restrict staff access and monitor our systems. No system is perfectly secure; if a breach affects your data, we will notify you and the relevant authorities as required by law.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, object to or restrict processing, and withdraw consent. California residents have the right to know, delete and correct information and to not be discriminated against for exercising these rights. To make a request, email privacy@postlenk.com or use our contact form. You may also complain to your local data protection authority.
11. Children
The Service is not intended for anyone under 16, and we do not knowingly collect their personal information.
12. Changes
We will post any changes on this page and update the date above. For material changes, we will notify you by email or in the app before they take effect.
13. Contact
Questions about this policy: privacy@postlenk.com or [postal address]. EU/UK representative: [name and address, if required].
4. Connected social accounts
When you connect a social account, you authorise Postlenk through that platform’s official sign-in. We receive only the permissions needed to publish content and read performance data. We never receive your platform password. Our use of information received from platform APIs follows each platform’s developer policies, including the Google API Services User Data Policy where applicable. You can revoke access at any time from Postlenk or from the platform’s own settings.