Privacy Policy

Effective date: 21 October 2026 · Last updated: 21 October 2026

Postigent ("Postigent", "we", "us", "our") is a social media management service that lets you connect your social media and messaging accounts, then plan, schedule and publish posts to them. This Privacy Policy explains what personal data we collect when you use the Postigent website and application (the "Service"), why we collect it, who we share it with, and the choices and rights you have.

We are the data controller for the personal data described in this policy. If you have any questions, contact us at info@postigent.com.

1. Data we collect

Information you give us

• Account information: your name, email address, password (stored only as a one-way hash), company or organization name, and profile picture.
• Content: the posts, captions, comments, images, videos, files, signatures and other material you create, upload or schedule in the Service.
• Team information: the email addresses of teammates or clients you invite, and the roles you give them.
• Communications: messages you send us, such as support requests.

Information from social platforms you connect

When you connect a channel (for example Facebook, Instagram, LinkedIn, X, TikTok, YouTube, Threads, Pinterest, Discord, Telegram or another supported platform), you authorize that platform to share certain data with us. Depending on the platform and the permissions you grant, this may include:

• your account or page identifier, name, username and profile picture;
• access and refresh tokens that let us publish on your behalf;
• the list of pages, groups, channels, boards or servers you manage and choose to connect;
• information about posts published through Postigent, such as post IDs, links and status;
• performance data for your posts and accounts (for example views, likes, comments, followers and reach), where the platform provides it;
• comments and replies on posts published through Postigent, where you use features that display them.

We only request the permissions needed for the features you use. You can see and revoke a platform's access at any time in that platform's settings, or by disconnecting the channel in Postigent.

Information collected automatically

• Log and device data: IP address, browser type, device information, pages and features used, and timestamps, recorded in server logs to operate and secure the Service.
• Cookies: see section 6.

2. How we use your data

• To provide the Service: create and secure your account, store your content, publish your posts at the times you choose, show your calendar and analytics, and enable team collaboration. (Legal basis: performance of our contract with you.)
• To communicate with you: send service messages such as account verification, password resets, publishing errors and important changes to the Service, and respond to support requests. (Contract and legitimate interests.)
• To keep the Service safe: prevent fraud, abuse and security incidents, and debug problems. (Legitimate interests and legal obligations.)
• To improve the Service: understand which features are used so we can fix and improve them. (Legitimate interests.)
• To comply with the law: meet legal, tax and regulatory obligations and respond to lawful requests. (Legal obligation.)

We do not sell your personal data, we do not use it for advertising, and we do not use data obtained from social platforms for any purpose other than providing the features you use.

3. Data from Google and YouTube

If you connect a YouTube or Google Business Profile account, Postigent uses YouTube API Services and Google APIs. By connecting, you also agree to the YouTube Terms of Service, and Google's handling of your data is governed by the Google Privacy Policy. You can revoke Postigent's access at any time from your Google security settings.

Postigent's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use this data only to provide the features you request, such as uploading videos and showing their performance, and we do not transfer it to third parties except as needed to provide those features, to comply with the law, or as part of a merger or acquisition with notice to you.

4. How we share your data

We share personal data only as follows:

• Social platforms you connect: when you publish or schedule a post, we send your content and the necessary account details to the platform you chose. Each platform handles that data under its own privacy policy.
• Service providers: companies that host and run the Service for us, under contracts that require them to protect your data and use it only on our instructions. Today this includes our cloud hosting provider (Oracle Cloud Infrastructure, with servers in France, EU). If we add providers such as email delivery, file storage, AI features or payment processing, they will process data only to provide those functions. Payment card details, if we introduce paid plans, would be handled by the payment processor and never stored by us.
• Your team: content and channels in a shared workspace are visible to the members of that workspace, according to the roles set by its administrators.
• Legal and safety: where required by law, court order or a lawful request from authorities, or to protect the rights, property or safety of Postigent, our users or others.
• Business transfers: if Postigent is involved in a merger, acquisition or sale of assets, your data may be transferred, and we will notify you before it becomes subject to a different privacy policy.

5. International transfers

We operate from Nigeria and our servers are located in the European Union. Social platforms and service providers may process data in other countries, including the United States. Where we transfer personal data internationally, we take steps to ensure it receives an adequate level of protection as required by applicable law, including the Nigeria Data Protection Act 2023 and, where applicable, the EU General Data Protection Regulation.

6. Cookies

We use only essential cookies needed to run the Service, such as the cookie that keeps you signed in and your language preference. We do not currently use advertising or third-party analytics cookies. If that changes, we will update this policy and, where required, ask for your consent first.

7. How long we keep data

• Account information and content: for as long as your account is active.
• Access tokens for a connected channel: while the channel is connected. When you delete a channel in Postigent, we stop using its token immediately; the token stops working when you or the platform revoke access, and we erase it on request or when you delete your account.
• Server logs: for a limited period, typically up to 90 days, unless needed longer to investigate a security issue.
• After you delete your account, we delete or anonymize your personal data within 30 days, except where we must keep it longer to comply with the law, resolve disputes or enforce our agreements. Backups are overwritten on a rolling basis.

8. Security

We protect your data with measures such as encrypted connections (HTTPS), hashed passwords, access controls on our servers and restricted network access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and will notify you and the relevant authorities of a personal data breach where the law requires it.

9. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy of it;
• correct inaccurate or incomplete data;
• delete your data (see our data deletion instructions);
• object to or restrict certain processing, and withdraw consent where processing is based on consent;
• receive your data in a portable format;
• complain to a data protection authority. In Nigeria this is the Nigeria Data Protection Commission (NDPC); in the EU, your local supervisory authority.

To exercise any of these rights, email info@postigent.com. We will respond within 30 days and may need to verify your identity first.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page with a new "Last updated" date and, for significant changes, notify you by email or in the Service before they take effect.

12. Contact

Postigent
Email: info@postigent.com