Privacy Policy

1. Scope and who we are

This Privacy Policy applies to usepostwell.com, the PostWell web application, and related support, generation, rendering, analytics, and billing services (together, the “Service”). “PostWell,” “we,” and “us” refer to the operator of the Service. If you use PostWell for an organization, that organization may control the workspace content and member access.

You can contact us through Help & feedback inside PostWell or by replying to an account or support message you receive from us.

2. Information we collect

Account and workspace data

We receive account identifiers and basic profile information such as name, email address, profile image, and authentication status from our authentication providers and any sign-in provider you choose. We store workspace names, brand profiles, onboarding answers, roles, preferences, plan status, and usage allowances.

Brand and website evidence

When you provide a business website, PostWell may retrieve publicly available pages from that site and process the text, title, metadata, and source URLs to suggest a brand profile. We store the evidence needed to let you review those suggestions and ground future content.

Content and creative activity

We process prompts, captions, brand instructions, saved or rejected ideas, generated outputs, uploaded files, selected footage, compositions, renders, and the metadata needed to operate Studio and Library. Please do not upload material you do not have permission to use.

Usage, diagnostics, security, and free-sample enforcement

We collect product events such as page visits, feature interactions, generation and render status, plan usage, errors, browser and device information, approximate network information, and security logs. To prevent repeated free-sample abuse, we use an essential first-party device identifier and pseudonymous hashes derived from account, device, network-prefix, and business-domain signals. We do not use invasive canvas, font, audio, or hardware fingerprinting. Network information alone does not trigger a paywall. These abuse-prevention signals expire after 180 days unless a longer period is reasonably required for a dispute, security incident, or legal obligation.

Analytics services help us measure product performance and may provide privacy-masked session replay. Sensitive form inputs are configured to be masked, and we do not intentionally use names or email addresses as analytics identifiers.

Billing data

When paid billing is enabled, a payment processor handles payment details. We receive subscription, invoice, transaction, plan, and payment-status information, but PostWell does not store full payment-card numbers.

3. How we collect information

• Directly from you when you create an account, complete onboarding, upload content, make choices, or contact us.
• Automatically when you use the Service, through application logs, product events, cookies, and similar technologies.
• From services you connect or choose, including authentication and payment providers.
• From public pages at a website URL you ask PostWell to learn from.

4. How we use information

• Provide authentication, workspaces, brand learning, content generation, review, editing, rendering, storage, and downloads.
• Personalize ideas to your confirmed brand profile and preferences.
• Maintain quotas, plans, subscriptions, and billing records.
• Protect accounts, enforce our Terms, prevent misuse, and investigate security incidents.
• Debug failures, measure performance, understand feature usage, and improve PostWell.
• Respond to feedback, service requests, legal obligations, and disputes.

5. AI processing and human review

PostWell sends the minimum relevant brand evidence, prompts, and creative context to third-party AI and computing providers to generate, analyze, or render content. AI outputs can be inaccurate, non-unique, or unsuitable. PostWell is designed around human review: you decide what to save, edit, render, download, or publish.

We do not use sign-in profile data for advertising or to train AI models. Third-party providers process submitted data under the service arrangements and privacy commitments applicable to the services we use.

6. Service providers and disclosures

We use service providers for functions such as authentication, cloud hosting, databases and private storage, AI generation and analysis, media rendering, product analytics, customer support, and payment processing. We share information with them only as needed to provide those functions, operate and secure the Service, comply with law, protect rights and safety, or complete a business transaction.

We may also disclose information to professional advisers, authorities, or counterparties when reasonably necessary for legal compliance, security, financing, reorganization, or a sale of the business.

7. Cookies and local storage

PostWell and its providers use cookies, browser storage, and similar technologies for sign-in, security, free-sample enforcement, preferences, routing, analytics, and reliable operation. The first-party free-sample device cookie is HttpOnly, is not available to client-side scripts, and lasts for up to one year. Blocking essential storage may prevent the Service from working. Browser and provider controls can limit non-essential analytics where available.

8. Storage, security, and retention

Private media is stored in private object storage and delivered through short-lived signed links. Provider credentials stay server-side. We use access controls, workspace authorization checks, encrypted transport, audited operations, and other reasonable safeguards. No system is completely secure, so you should also protect your account and promptly report suspected misuse.

We retain account and workspace data while your account is active and as needed to provide the Service. After deletion, limited records may remain in backups or be retained for security, fraud prevention, billing, dispute resolution, or legal obligations. Aggregated or de-identified information may be retained where it can no longer reasonably identify you.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing of personal information, and to complain to a privacy regulator. Workspace owners can export data or request verified deletion from Settings. You can also revoke third-party sign-in access through the relevant provider. If you believe a free-sample restriction was applied incorrectly, contact us through Help & feedback so we can review and override the decision. We may verify identity and authority before completing a request.

10. International processing

PostWell and its providers may process information in countries other than your own. Those countries may have different privacy laws. We use provider agreements and other safeguards appropriate to the services we operate.

11. Children

PostWell is a business-oriented service and is not directed to children under 13. Do not use the Service if you cannot lawfully agree to these terms in your location. If you believe a child provided personal information, contact us so we can investigate.

12. Third-party content and links

The Service may link to websites, media sources, or services we do not control. Their privacy practices are governed by their own policies. A link or source reference does not mean PostWell controls or endorses that third party.

13. Changes to this policy

We may update this policy as PostWell, our providers, or applicable requirements change. We will post the revised version with a new effective date and provide additional notice when a material change requires it.