Privacy Policy
Last updated 20 August 2026
The short version
- We hold what you write, so we can schedule and publish it.
- We never see your social media passwords. Connecting an account happens on that platform's own site, and we store only an encrypted access token.
- We do not sell your data. There is no advertising in Postii.
- Your content is not used to train anyone's AI model, ours or a supplier's.
- You can delete your account and everything in it from inside the app, at any time.
Who we are
Postii is operated by Easeaiworks. For the purposes of the UK GDPR and the EU GDPR, Easeaiworks is the data controller for your account details, and a data processor for the content you create and the audiences you publish to.
Contact: privacy@postii.app
What we collect, and why
| Category | What that means | Why we need it |
|---|---|---|
| Account | Email address, a hashed password, the workspace you belong to and your role in it. | To let you sign in and to know what you are allowed to do. |
| What you write | Brand descriptions, briefs, drafts, scheduled posts, and any images or video you upload. | It is the product. We cannot schedule a post we do not hold. |
| Connected accounts | An access token for each social account you connect, encrypted with AES-256-GCM before it is stored, plus the display name of the account so we can show you which one is connected. | To publish on your behalf, and only when you have approved it. |
| Activity | Who wrote each post, who approved it, when it was published, and whether the platform accepted it. | The audit trail is a feature. It is what lets an agency show a client who signed off on what. |
| Usage | How many AI generations you have used this month, and what they cost us. | To enforce plan limits and to keep our own bill from running away. |
| Billing | Your plan, subscription status, and a Stripe customer reference. | To charge you the right amount. We never see or store your card number. |
| Early-access list | If you ask us to tell you when a channel opens, we store that email address and which page you asked from. We also store a salted, one-way digest of your IP address — never the address itself — purely so the form cannot be flooded. It stops being useful to us an hour later. | To email you once, about the thing you asked about. You do not need an account to be on this list, and being on it is not a marketing subscription. |
We do not collect special category data, we do not build advertising profiles, and we do not track you across other websites.
How the AI writing works
When you ask Postiito draft a post, we send your brief and your brand description to Anthropic's API, which returns draft text. We send the minimum needed to produce a useful draft.
Your content is not used to train any AI model. Anthropic does not train on data submitted through their API by business customers. We do not train models of our own on your content, and we do not licence it to anyone who does.
Drafts are just drafts. Nothing generated is published until a person approves it, unless you have deliberately turned approval off in your settings — and even then, every publish is recorded against the person who wrote it.
Who else sees it
We use a small number of suppliers to run the service. Each one is bound by a data processing agreement, and each is listed here because you are entitled to know.
| Supplier | What for | What they see | Where |
|---|---|---|---|
| Vercel | Hosting and content delivery | Everything that passes through the application, in transit | United States (us-east-1) |
| Supabase | Database, authentication and file storage | Account details, workspaces, posts, encrypted platform tokens | United States (us-east-1) |
| Anthropic | Generating draft post text | The brief you write, and your brand description | United States |
| Stripe | Payments and subscriptions | Billing email, card details (held by Stripe, never by us) | United States and Ireland |
We will update this list before adding a new supplier, not after. If you have a contract with us that requires notice of sub-processor changes, tell us and we will email you.
We do not sell personal data, and we do not share it for cross-context behavioural advertising. Under the CCPA, we have never sold or shared personal information as those terms are defined.
Where your data lives
Our servers and database are in the United States (AWS us-east-1, via Vercel and Supabase). If you are in the UK or the EEA, your data is transferred to the United States under the Standard Contractual Clauses, which our suppliers incorporate into their terms.
How long we keep it
| What | How long |
|---|---|
| Your account and workspace | For as long as the account exists. Deleted within 30 days of you asking. |
| Posts, drafts and schedules | Deleted with the account. Posts already published to a platform stay on that platform — only they can remove those. |
| Connected platform tokens | Deleted immediately when you disconnect a channel, and with the account. |
| The approval audit log | Deleted with the workspace if you are the last person in it. If colleagues remain, the entries stay for them and your name is replaced with an anonymous marker. |
| Billing records | Kept for 7 years. Tax law requires it and we cannot delete them on request. |
| Server logs | Around 30 days, then discarded automatically. |
| The early-access list | Until we launch the thing you asked about, or until you ask us to remove you — whichever is first. Email privacy@postii.app and it is gone. You do not need an account to ask, and we will not ask you to make one. |
Two of those need explaining, because they are the exceptions to “we delete everything”.
The approval audit log depends on whether anyone else is left. Its value is that it cannot be rewritten — it is what lets an agency prove to a client who approved a post.
- You are the last person in the workspace: the log is deleted along with everything else. Nobody is relying on it any more.
- Colleagues remain: the entries stay, because they are their record too — but your name and email are replaced with an anonymous marker, so the history survives without still being about you.
Billing records. Tax law requires us to keep invoices for seven years. We cannot delete these on request, and neither can anyone else.
Your rights
If you are in the UK or the EEA, you have the right to:
- Ask what we hold about you, and get a copy
- Have inaccurate details corrected
- Have your data deleted
- Object to processing, or ask us to restrict it
- Take your data elsewhere in a portable format
- Complain to your data protection authority — in the UK, the ICO
If you are in California, you have equivalent rights under the CCPA, including the right not to be discriminated against for exercising them. We will not give you a worse product or price for asking.
The fastest way to exercise any of these is the data deletion page or an email to privacy@postii.app. We answer within 30 days and usually within a few working days.
How we protect it
- Everything travels over TLS. There is no unencrypted route in.
- Social platform tokens are encrypted at rest with AES-256-GCM, separately from the database's own encryption.
- Every workspace is isolated at the database level by row-level security, not by application code. One customer cannot read another's rows even if our own code has a bug.
- Passwords are hashed, never stored. We check new passwords against known breached-password lists and require at least ten characters.
- Access to production data is limited to people who need it, and is logged.
If there is a breach affecting your data, we will tell you and the relevant authority within 72 hours of becoming aware of it.
Children
Postii is a business tool and is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has created an account, email us and we will delete it.
Changes to this policy
If we change anything that affects you, we will email you before it takes effect rather than quietly updating the date at the top. The date at the top tells you when it last changed.
Your connected social accounts
This is the part most people want to understand, so it gets its own section.
When you connect a social account, you are sent to that platform's own website to sign in. You enter your password and your two-factor code there, not here. We never see either of them. The platform then gives us an access token, which is permission to post as you and nothing more.
That token is encrypted with AES-256-GCM before it is written to our database, using a key that lives only in the running application. A copy of the database — a backup, a leaked credential, an export handed to an analyst — contains ciphertext and nothing usable.
We will never ask you for a social media password, a session cookie, or to install a browser extension. Some tools in this category do. It puts your account at risk of being banned by the platform, because it breaches their terms — and the account that gets banned is yours, not theirs. If anyone claiming to be Postii asks for one, it is not us.
Disconnecting a channel deletes its token immediately. Deleting your account deletes all of them.