Privacy Policy

Postmi — Smart Social Auto Sharing

This Privacy Policy explains what information Postmi collects when you use our platform, how we use it, and how you can request its deletion.

Information We Collect

User Account Data

When you sign up, we collect your name, email address, phone number, and a securely hashed password. This is used to create and secure your Postmi account.

Company Data

We collect the company/business name, contact email, and phone number you provide when setting up your Postmi workspace.

Facebook Basic Profile Data

When you connect your Facebook account, we request only the public_profile permission via the official Facebook Login flow, which provides your Facebook user ID and name. We do not request your Facebook email or any other profile data at this time.

Facebook Page Connection Data

Once Facebook grants the relevant Page permissions to Postmi (pending Meta App Review), we will store the Facebook Pages you choose to connect: Page ID, Page name, and category. We do not access any Page data beyond what is necessary to provide the auto-sharing feature you configure.

Encrypted Token Storage

Facebook access tokens (both user-level and Page-level) are encrypted at rest using symmetric encryption before being stored in our database. Tokens are never displayed in the Postmi interface, logged, or exposed via our API after they are saved.

Automation Rules

We store the automation rules you create: the source Page, destination Page, caption template, and scheduling preferences you configure for auto-sharing.

Subscription Data

We store your selected subscription plan, activation request history, and subscription status (trial, active, expired, or cancelled). Postmi does not currently process payments directly; billing details are handled manually by our team during onboarding.

Logs

We keep operational logs (such as system job logs for scheduled maintenance tasks) to help us monitor platform reliability. These logs do not contain Facebook access tokens or App Secrets.

How We Use Your Data

We use the information above solely to operate the Postmi service: authenticate your account, apply your subscription limits, connect and display your Facebook Pages, and (once enabled) automatically share posts between Pages according to the rules you configure. We do not sell your data or share it with third parties for advertising purposes.

Data Retention

We retain your account and company data for as long as your Postmi account remains active. If you disconnect a Facebook account, associated access tokens are deleted from our database. If you request account deletion (see below), we will remove your personal data and connected Facebook data within a reasonable processing period.

User Deletion Requests

You can request deletion of your account and all associated data at any time. See our Data Deletion page for instructions.

Contact

For privacy questions or data requests, contact us at privacy@postmi.online.

This policy may be updated from time to time as Postmi's features evolve, including once Facebook Page permissions (pages_show_list, pages_read_engagement, pages_manage_posts) are approved and auto-sharing is enabled.