Privacy Policy

Last updated: February 9, 2026

1. Information We Collect

When you create an account on POSLY, we collect your name, email address, and profile information. When you use our services, we may also collect usage data such as the carousels you create, export activity, and publishing logs.

Instagram, LinkedIn & X (Twitter) Integration: When you connect your Instagram Business or Creator account via Facebook Login, your LinkedIn profile, or your X (Twitter) account, we collect and store:

  • Your Instagram Business Account ID, LinkedIn URN, or X (Twitter) Account ID and username
  • Your Facebook Page ID (required for Instagram Business Accounts)
  • Access tokens that allow us to publish content on your behalf
  • Publishing logs and status information

We only use this data to publish carousels that you explicitly create and initiate publishing for. We do not access, analyze, or store any other Instagram, LinkedIn, or X data, follower information, or analytics from your account.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process your transactions and send related information
  • Send you technical notices, updates, and support messages
  • Respond to your comments, questions, and requests
  • Monitor and analyze trends, usage, and activities

Platform Data Usage: We use your Instagram, LinkedIn, and X connection data exclusively to:

  • Publish carousels and posts that you create and explicitly choose to publish
  • Verify your Instagram Business or Creator account, LinkedIn profile, or X account status
  • Display your connected account name in the Settings page
  • Monitor token expiration to ensure uninterrupted publishing

We never automatically post content, access your followers or analytics, or perform any actions without your explicit initiation.

3. Data Sharing

We do not sell your personal data. We may share your information with third-party service providers who assist us in operating our platform, such as:

  • Supabase: Database and authentication services
  • Dodo Payments: Payment processing for subscriptions
  • Meta (Facebook/Instagram): Publishing API access for Instagram Business Accounts
  • LinkedIn: Publishing API access for LinkedIn profiles
  • X (Twitter): Publishing API access for X accounts

When you publish to Instagram, LinkedIn, or X, your content (images and captions) is transmitted to the respective platform's API using your access token. We only transmit content that you explicitly create and choose to publish. These providers are bound by their own privacy policies.

4. Data Security

We implement industry-standard security measures to protect your personal information. All data is encrypted in transit (TLS) and at rest. API credentials for connected platforms are stored securely and never exposed in client-side code.

5. Cookies

We use essential cookies to maintain your session and authentication state. We do not use third-party tracking cookies or advertising cookies. You can manage cookie preferences through your browser settings.

6. Your Rights

You have the right to:

  • Access and receive a copy of your personal data
  • Rectify or update your personal data
  • Request deletion of your account and personal data
  • Object to or restrict certain processing of your data
  • Data portability — export your carousels and data

7. Data Retention and Deletion

We retain your personal data for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal obligations.

Platform Data Deletion: You can disconnect your Instagram, LinkedIn, or X account at any time from the Settings → Integrations page. When you disconnect or delete your account:

  • Your access token is immediately deleted from our database
  • Your platform Account IDs and connection metadata are removed
  • All connection data is permanently deleted within 30 days
  • Publishing logs are retained for 90 days for security and compliance purposes

For detailed data deletion instructions, visit our Data Deletion page.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at hello@poslyapp.com or visit our Contact page.