Privacy Policy.

Introduction

postedby.ai, LLC values privacy and handles personal information with care. This Privacy Policy explains what information we collect, how we use it, how we share it, and what rights may apply to clients, prospects, and visitors who interact with postedby.ai and the PostedByAI service.

This policy applies to the postedby.ai marketing website, signup experience, client dashboard, and related service operations.

Information We Collect

Account information

Name, email address, company name, website, city, state, industry, and target audience descriptions collected when you sign up or inquire about the service.

Champion information

The Champion name and description you provide, which we expand into a voice profile used to generate content for your brand.

Payment information

Payments are processed by Stripe. We do not store full card numbers. We may store Stripe customer IDs, billing status, invoice records, and transaction metadata for billing and account administration.

Platform credentials

When you connect LinkedIn, Facebook, Google Business Profile, Instagram, X, or website platforms, we receive OAuth tokens required to publish content on your behalf. Sensitive credentials are encrypted at rest.

Brand assets

Logo files and brand materials you upload for use in content creation and image generation.

Usage data

Content topics, posts generated, posts published, publication dates, and related workflow status.

Technical data

IP address, browser type, device information, referral pages, and basic analytics needed to operate, secure, and improve the website and service.

Scraped data (on your behalf)

Your public website content and social media profiles, used to build and improve your Champion's voice and content accuracy.

How We Use Information

• To deliver the PostedByAI service and publish content on your connected platforms.
• To build and continuously refine your Champion's voice and content style.
• To communicate about accounts, setup, approvals, billing, and support.
• To process payments, issue invoices, and maintain account records.
• To improve service quality, workflow reliability, and product design.
• To comply with legal obligations, enforce agreements, and protect the service.

How We Share Information

We do not sell personal information. We share information only as needed to operate the service:

• Stripe — payment processing.
• Supabase — primary database and authentication infrastructure for the client dashboard.
• n8n — workflow automation that orchestrates content generation and publishing.
• OpenAI and Anthropic — AI content generation. Your business information, Champion description, and contact details may be included in prompts to generate accurate, on-brand content and personalized outreach.
• Zernio — social media OAuth connection and publishing to LinkedIn, Facebook, Instagram, X, Pinterest, and Google Business Profile.
• Google (GA4) — when you connect Google Analytics 4, we receive read-only access to your property's traffic and engagement data via OAuth. We use this data solely to display website intelligence inside your dashboard.
• Cloudflare — website hosting, security, and edge delivery.
• Amazon SES — transactional and outreach email delivery on your behalf.
• Platform APIs — LinkedIn, Meta, Google Business Profile, X, and Instagram for publishing.
• Legal obligations — if required by law, court order, or to protect our rights.
• Business transfers — in connection with a merger or acquisition, with notice to you.

Hosted Blog Content

Articles generated for your account are published publicly on the postedby.ai domain at postedby.ai/blog/[your-company]. This content is indexed by search engines and AI systems as part of the core service. It includes your business name, Champion voice, and subject matter expertise. You may request removal of hosted articles by contacting us; however, search engine caches and AI training datasets are outside our control once content is indexed.

Contacts and Outreach Emails

When you add contacts to your account, their name, email address, company, and domain are stored in your subscriber database. Each week, postedby.ai generates personalized email drafts for your review — using your contact's company name and domain to tailor the message to their business context. If you approve and send, the email is delivered from a postedby.ai sending address on your behalf via Amazon SES. We do not sell or share your contacts with third parties. Contact data is used solely to generate and send outreach on your behalf.

Contact data scraping

To personalize outreach emails, we may scrape publicly available information about your contacts' businesses — including the company's website, industry, and public business description. This data is used only to improve the relevance of drafts generated for you and is not shared with third parties.

Google Analytics 4 (GA4) Connection

If you choose to connect a Google Analytics 4 property, you grant postedby.ai read-only OAuth access to that property's data. Specifically, we access session counts, organic traffic, engagement metrics, landing page performance, and social referral data. This data is used solely to populate the website intelligence panel in your dashboard. We do not store raw GA4 event-level data. We do not use your GA4 data to train AI models or share it with any third party. You may disconnect GA4 at any time from your dashboard settings, which immediately revokes our access.

Platform Credentials

When you connect social media accounts through our OAuth integration, we receive and store access tokens that allow us to post on your behalf. These tokens are:

• Encrypted at rest and in transit.
• Used only to publish content through PostedByAI as authorized by you.
• Never shared with third parties except the destination platform.
• Revocable at any time from your dashboard or directly from the platform.

Data Retention

• Account data — retained while active and for up to 12 months after cancellation.
• Payment records — retained for 7 years for tax, accounting, and legal purposes.
• Generated content — owned by the client; retained according to client preference, legal obligations, or operational need.

Published content that has already been posted to your social platforms remains there subject to those platforms' own policies.

Your Rights

• Access your personal data.
• Request corrections to inaccurate information.
• Request deletion, subject to legal retention requirements.
• Request portability of certain information.
• Opt out of marketing communications at any time.
• Revoke platform publishing access from your dashboard.

To exercise these rights, email privacy@postedby.ai.

Security

• We use industry-standard security practices appropriate to the nature of the service.
• Sensitive credentials are encrypted at rest.
• Access to client data is limited to personnel and contractors who need it to operate or support the service.
• No online system can guarantee absolute security.

Cookies

• The marketing website uses minimal cookies, including Cloudflare security cookies and optional analytics.
• The client portal uses session cookies for authenticated access.
• We do not use third-party advertising cookies.

Children's Privacy

The service is not directed to children under 18. We do not knowingly collect personal data from minors. If you believe we have done so, contact us immediately.

International Users

postedby.ai is based in the United States. Information may be processed in the US and in other jurisdictions where our service providers operate. Users in the EU, UK, and California may have additional rights under GDPR and CCPA. Where applicable, we will respond to rights requests in accordance with those laws.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify clients directly and post the updated version at postedby.ai/privacy.

Contact

Privacy inquiries: privacy@postedby.ai
General: hello@postedby.ai
Mailing address: 6547 N Academy Blvd #1160, Colorado Springs, CO 80918