How Postally collects, uses, shares, and protects your information when you use our social media management platform.
Postally (postally.io) is a social media management platform that lets you connect social accounts, schedule and publish content, and view performance analytics from one dashboard. This policy explains what data we collect, how we use and share it, the legal basis for doing so, and the rights you have over your data.
By using Postally you agree to the practices described here. Terms used in this policy have the same meaning as in our Terms of Service.
Postally is the entity that operates the Service and is the data controller for the personal data described in this policy. For privacy questions, data subject requests, or any other privacy-related inquiry, contact us at hello@postally.io.
Your name, email address, password (stored hashed), and any profile details you choose to provide. If you join or create a team workspace, we also store workspace name, member roles, and invitation status.
If you subscribe to a paid plan, payments are processed by Dodo Payments, our payment processor, which collects and handles your payment details directly under its own privacy policy. Postally stores only the billing metadata needed to manage your subscription — customer identifier, plan, billing period, and subscription status. We do not store full card numbers.
Posts, captions, comments, scheduled drafts, AI-generated drafts, and media you upload to Postally for publishing across your connected accounts.
When you connect a social account to Postally via OAuth — for example Facebook, Instagram, LinkedIn, X (Twitter), YouTube, TikTok, Threads, or Bluesky — we access the following through that platform's official API:
This data is used only inside your Postally dashboard. We never sell it, share it for advertising, or use it to train AI models.
When you use Postally we collect standard server and application logs — IP address, browser and device type, approximate location derived from IP, pages and features accessed, timestamps, and error diagnostics. We use this for security, abuse prevention, debugging, and product analytics.
If you contact us by email, in-app chat, or social channels we retain those messages so we can respond and so we can review support history if you contact us again.
We use the data we collect for the following purposes. Where EU/UK GDPR applies, the legal basis for each is identified in parentheses.
We do not sell your data, share it with third-party advertisers, or use it to train external AI models.
Postally includes AI-assisted features such as caption generation, image generation, content suggestions, and personas. When you use these features, the text and images you provide as input are sent to third-party AI model providers that process the input on our behalf solely to return a response.
AI features are opt-in: nothing is sent to an AI provider unless you trigger a feature that uses one. You can avoid AI processing entirely by not using these features.
We share your data only with the following categories of recipients, and only for the purposes described:
Postally and its service providers operate from infrastructure located in multiple countries, which means your data may be processed and stored outside your country of residence. By using the Service you acknowledge this transfer.
Postally's use and transfer of information received from social media APIs adheres to each platform's API Services User Data Policy and Developer Terms, including the Limited Use requirements where applicable. This includes, but is not limited to:
Depending on where you live, you have the right to:
To exercise any of these rights, email hello@postally.io. We respond within 30 days and may ask you to verify your identity before acting on a request. You can also revoke Postally's access to a connected social account at any time directly from that platform's account settings.
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) gives you the right to know what personal information we collect about you, to request deletion or correction of that information, to receive a portable copy, and to limit the use of sensitive personal information. We do not sell personal information and we do not share it for cross-context behavioral advertising. To exercise these rights, email hello@postally.io. We will not discriminate against you for exercising any of these rights.
We retain your data only as long as needed to provide the Service and meet legal obligations:
Data accessed through social platform APIs is handled in accordance with each platform's Limited Use requirements and deleted once it is no longer needed to perform the action you requested.
We use commercially reasonable technical and organizational safeguards to protect your data, including encryption in transit (TLS), password hashing, least-privilege access controls, and audit logging. No method of transmission or storage is 100% secure, so while we strive to protect your data we cannot guarantee its absolute security.
Postally uses cookies and similar technologies to keep you signed in, remember your preferences, and measure how the Service is used. You can accept or refuse non-essential cookies via your browser settings. Refusing essential cookies may limit parts of the Service. Postally does not currently respond to browser "Do Not Track" signals, as no consensus standard for their interpretation exists.
If you have opted in to marketing email, you can unsubscribe at any time using the link in any marketing message or by emailing hello@postally.io. Transactional messages relating to your account, security, billing, or material service changes are not subject to opt-out.
Postally is not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that we have collected information from a child under 13 we delete it. If you are a parent or guardian and believe your child has provided us with personal information, contact us at hello@postally.io.
Postally may link to third-party sites we do not operate. We are not responsible for their content or privacy practices and recommend you review their policies before sharing any information.
We may update this policy from time to time. The latest version will always be posted on this page with an updated date at the top. For material changes we will notify you in-app or by email before the change takes effect.
Questions about this policy or requests under any privacy law — email us at hello@postally.io.