Privacy Policy

Last updated: May 17, 2026

Postig respects your privacy and is committed to protecting your personal data, in compliance with the Brazilian LGPD and Meta Platforms, Inc. policies. EU users are entitled to GDPR rights where applicable.

1. Data We Collect

Registration: name (optional), email, hashed password. Generated content: topics, briefs, texts, images. Instagram integration: encrypted access token, Business account ID, linked Page ID. Usage data: logs, actions, aggregate metrics. Cookies/session: JWT in your browser.

2. Purposes

Account registration and Service use. Generate and publish Instagram content on your behalf. Operate quotas, plans, and billing. Provide support. Comply with legal obligations. Prevent fraud.

3. Legal Basis

Contract performance (Service use), consent (Meta integrations), legal obligations, and legitimate interest (security and product improvement).

4. Sharing

We share with Meta (publishing), OpenAI/Anthropic (AI generation), Replicate (images), Cloudinary (storage), Stripe (payments), Resend (transactional emails), Google Analytics (aggregate metrics, only with consent), Railway (hosting). We do not sell personal data.

5. Security

Hashed passwords. Encrypted tokens (Fernet/AES). HTTPS/TLS. Access control and log monitoring. In case of incident, we will notify regulators and data subjects as required by law.

6. Retention

Data is kept while your account is active. After termination, it is deleted or anonymized within 30 days, except for legally required retention (logs for 6 months).

7. Data Deletion

You may request deletion at any time via Settings → Delete account, or by emailing [email protected] with subject "Data deletion".

8. Your Rights

Right of access, correction, anonymization, portability, consent withdrawal, and complaint to a supervisory authority (ANPD for Brazil, your local DPA for EU).

9. International Transfer

Some providers may process data outside Brazil/EU. We require contractual and technical safeguards in line with LGPD art. 33 and GDPR Chapter V.

10. DPO / Contact

DPO: [email protected]