Privacy Policy

[Legal entity name] (“we”) runs Postship. This policy says what we collect when you use it, why, who helps us run it, and how you can see or delete your data. Questions go to [support@your-domain].

What we collect

• Your account: your name and email, and your password (stored only as a hash) or the sign-in links we email you.
• X accounts you connect: the username and X id, whether it has Premium, and the access tokens X gives us, which we store encrypted.
• What you write: posts, threads, Articles, drafts, and the images and videos you upload.
• Style cards: a description of how you write, made from your recent posts on X, plus up to 20 of those posts as examples for drafts.
• Account analytics: your posts and replies on X from 30 days before you connected the account onward, whether or not they went out through Postship, with their text and the numbers X reports for them (impressions, engagements, likes, reposts, follows, clicks, and the like); your follower, following, and post counts once a day; and how many posts you made each day over the past year. When a post is deleted on X, we remove its text and keep only its numbers.
• Billing: your plan and its status. Paddle holds your payment details, not us.
• Security records: the IP address of each sign-in, and a log of account and billing actions.

We use only the cookies needed to keep you signed in. There’s no advertising or cross-site tracking.

How we use it

To run Postship: publishing what you schedule, writing drafts you ask for, showing your analytics, billing your plan, keeping your account secure, and answering you. We don’t sell your data or use it for ads.

AI drafts

Drafts are written by Anthropic’s Claude. When you ask for one, we send your topic, your style card, and its examples. We never train or fine-tune any model on your posts or anyone else’s.

Who helps us run Postship

• Anthropic: writes drafts and style cards.
• Cloudflare: stores the files you upload.
• Resend: sends our emails.
• Paddle: our merchant of record, which handles checkout, invoices, and tax.
• X: where your posts go, and where your analytics come from.

Some of these providers process data outside your country, under their own data protection terms.

How long we keep it

• Your account and everything in it stay until you delete them.
• Disconnecting an X account deletes its analytics and style card within 24 hours. Posts stay in your workspace’s history.
• Uploaded files are deleted 30 days after the post that used them goes out.
• Posts from creators you follow are cached to learn their style, for at most 90 days beyond their latest 50, and deleted 30 days after nobody follows them.

Your choices and rights

Write to [support@your-domain] from your account’s email for a copy of everything we hold about you, and we’ll send it within a month. From Settings → Danger Zone you can delete your account. Deleting it removes the workspaces you own, with their posts, X connections, style cards, and files, and ends any paid plan. You can correct your details in Settings, or write to us to object to or limit how we use your data. You can also complain to your local data protection authority.

Security

Connections are encrypted, X tokens are encrypted at rest, and sign-ins and billing changes are logged. Sign-ins are rate limited.

Changes

We’ll post changes here and change the date above. If a change matters to how we use your data, we’ll email you first. See also our Terms of Service.