Privacy Policy

Last updated: October 7, 2026

1. Who We Are

PostDrip ("we," "us," or "our") operates the website postdrip.io and provides an AI-powered social media content generation and auto-publishing service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

If you have questions about this policy, please contact us at privacy@postdrip.io.

2. Information We Collect

Account Information

  • Name, email address, and password (stored securely using industry-standard hashing — we never store plaintext passwords)
  • Account creation date and login timestamps

Business Information

  • Your business website URL, name, and a summary generated from publicly available information on your website, or from the public Facebook Page or Google business listing you point us to
  • Content preferences, posting schedule, and timezone settings

Social Media Platform Data

  • Access tokens obtained through OAuth authorization flows for platforms you connect (e.g., Facebook Pages, Instagram professional accounts)
  • Connected page or account identifiers, usernames and profile pictures, used to show you which account is connected and to attribute published posts to it
  • We do not access or store your personal social media profile data, friend lists, private messages, or any data from accounts you have not explicitly connected

Content Data

  • AI-generated post text and images created for your business
  • Posting history and scheduled posts

Files You Upload

  • Photos and videos you or your team upload to a business's media library, with their file name, size and upload date
  • They are used only in that business's posts, are visible to that business's team, and count toward your plan's storage limit

Teams and Invitations

  • The email address of anyone you invite to work on a business, the invitation's status and expiry, and each member's role (owner or editor)
  • Which team member made changes to posts, so the team can see who changed what

API Keys and AI Assistants

  • API keys you create are stored only as a one-way hash, with a short prefix so you can recognise them; we cannot show a key again after it is created
  • When you connect an AI assistant or your own tools to PostDrip, we receive the requests they send on your behalf (for example, to read your schedule or create a post) and record which key or connection made them

Agency Accounts

  • If you join our Agency program, we store your agency membership and the client businesses you manage. Agencies act on their clients' behalf and are responsible for having their clients' permission to manage their business and social media accounts

Payment Information

  • Payments are processed by a third-party payment processor. Your credit card details are handled entirely by the payment processor — we never see, store, or process your full card number
  • We store a customer identifier and subscription status to manage your account

Technical Data

  • Session identifiers stored in encrypted cookies
  • Server logs including IP address, browser type, and access timestamps (retained for security purposes)
  • Product analytics: pages visited and key actions in the app (such as signing up, connecting a platform or launching a business), used to understand and improve the service

3. How We Use Your Information

  • To provide our service: We use your business information to generate personalized social media content using AI, and your connected platform credentials to publish posts on your behalf
  • To generate content: Your business description and preferences are processed by third-party AI providers to create customized post text and images
  • To store generated content: AI-generated images are temporarily stored using cloud storage providers and are automatically deleted after a retention period
  • To let you work as a team: We use invitation emails and member roles to give the people you invite access to a business, and to send them their invitation
  • To provide API and AI assistant access: We act on requests from the keys and AI assistants you connect, only for the businesses you have access to
  • To process payments: We share necessary billing information with our payment processor to manage your subscription
  • To communicate: We may send you service-related emails such as account confirmations, billing notices, and important service updates
  • To improve our service: We analyze aggregate, anonymized usage patterns to improve content quality and service reliability

4. Third-Party Services

We use third-party service providers to operate PostDrip. These providers fall into the following categories:

Category Purpose Data Shared
AI providers Content and image generation Business description and content preferences
Social media platforms Publishing posts to your connected accounts Access tokens, post content, images
Cloud infrastructure Hosting, storage, and service delivery Data necessary to operate the service
Email delivery Account, billing and team invitation emails Email address, name, message content
Product analytics Understanding how the service is used Pages visited, app actions, account identifier
Business listings Finding your business during setup The business name or address you search for
Payment processor Subscription billing Email, subscription plan, payment method

We reserve the right to change, add, or replace third-party service providers at any time without prior notice, provided we continue to protect your data in accordance with this policy. We will not sell your data to third parties.

5. Facebook and Instagram Data (Meta Platform Data)

Facebook. When you connect your Facebook Page to PostDrip, we request the following permissions through Facebook Login:

  • pages_show_list: To display a list of Facebook Pages you manage so you can select which one to connect
  • pages_read_engagement: To read your Page's public content (name, description, recent posts) so PostDrip can learn about your business and generate relevant content
  • pages_manage_posts: To publish AI-generated posts to your selected Facebook Page, on demand and on your daily schedule

If you choose to sign in to PostDrip with Facebook, we also receive your name, email address and profile picture (public_profile, email) to create and identify your PostDrip account.

Instagram. When you connect an Instagram professional (Business or Creator) account through Business Login for Instagram, we request:

  • instagram_business_basic: To read your connected account's ID, username and profile picture so we can show you which account is connected and attribute published posts to it
  • instagram_business_content_publish: To publish AI-generated posts to your connected Instagram professional account, on demand and on your daily schedule

Scheduled posts are published from our servers using the access tokens you granted; tokens are stored securely, are never shared with third parties, and are used only for the purposes above. We do not sell Meta Platform Data or use it for advertising.

What we do NOT access or store:

  • Your personal Facebook or Instagram profile information beyond what is listed above
  • Your friend list, followers or social connections
  • Your private messages or direct messages
  • Content from Pages or accounts you have not explicitly connected to PostDrip

You can revoke PostDrip's access at any time: for Facebook through your Facebook Business Integrations settings; for Instagram through Instagram Settings → Apps and websites (the app is listed as "PostDrip-IG"); or by disconnecting the platform from your PostDrip dashboard. Once you revoke access, the tokens we hold stop working; disconnecting a platform in your PostDrip dashboard deletes its stored tokens immediately. To delete all of your data, see our Data Deletion page.

6. AI Assistants (ChatGPT, Claude, Gemini and Others)

You can connect PostDrip to an AI assistant such as ChatGPT, Claude or Gemini, so you can manage your posting schedule from a conversation. You connect by signing in to your PostDrip account from the assistant and clicking Allow on our approval page. The assistant never receives your PostDrip password.

What a connected assistant can access

  • The businesses on your account, with their names, plan, time zone and which platforms are connected
  • Your posting schedule: each post's date, platform, caption, picture link and status
  • Your media library: file names and links to the photos you uploaded

What a connected assistant can do

  • Schedule your own post on a day, edit the caption of a post that hasn't been published, skip or restore a day, and delete a scheduled post, only when you ask it to

What it cannot access

  • Your password, your billing and payment details, or your social media logins and tokens
  • It cannot connect or disconnect social media accounts, or change your plan

What we receive and keep

  • We receive only the requests the assistant sends to PostDrip on your behalf (for example, "show the schedule" or "create this post") and the details in them. We do not receive or store your conversations with the assistant
  • We record which assistant you connected, when you connected it and when it was last used. Access tokens are stored only as one-way hashes; they expire after one hour and are renewed automatically while the connection is active
  • We do not sell this data or use it to train AI models

What the assistant itself does with the information it receives from PostDrip is governed by that assistant provider's own privacy policy (for example, OpenAI for ChatGPT, Anthropic for Claude, or Google for Gemini).

Disconnecting: go to your PostDrip Profile → Connected apps and click Disconnect. The assistant loses access immediately. You can also remove PostDrip from the assistant's own settings.

7. Data Retention

  • Account data: Retained while your account is active and for 30 days after deletion to allow for account recovery
  • Generated images: Automatically deleted from our storage providers after a retention period
  • Media library files: Kept until you or your team delete them, or until the business or your account is deleted; a file used by a post that hasn't been published yet can't be deleted until that post changes
  • Team invitations: Expire after 7 days; removed members lose access immediately
  • API keys: Kept until you revoke them or delete your account
  • AI assistant connections: Kept until you disconnect the assistant or delete your account; sign-in tokens expire on their own (access tokens after one hour, renewal tokens after 60 days without use)
  • Server logs: Retained for up to 90 days for security and debugging purposes
  • Payment records: Retained as required by applicable financial regulations

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request that we correct inaccurate or incomplete personal data
  • Deletion: Request that we delete your personal data. See our Data Deletion page for instructions
  • Portability: Request a machine-readable copy of your data
  • Objection: Object to the processing of your personal data in certain circumstances

To exercise any of these rights, contact us at privacy@postdrip.io. We will respond to your request within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted connections, secure password storage, session management, and protection against cross-site request forgery.

While we take reasonable precautions to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

10. Cookies

We use a minimal number of cookies strictly necessary for the service to function. For full details, see our Cookie Policy.

11. Children's Privacy

PostDrip is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from someone under 18, we will promptly delete that information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or by posting a notice on our website. Your continued use of PostDrip after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: