Scope and contact
This policy explains how Postnchill handles information when you visit postnchill.com, create or use an account, connect a social network, or ask us for support. Postnchill is a social media planning and publishing service: it lets you prepare posts, tailor text and media for supported channels, schedule publication, and review post status and available analytics. For privacy requests, contact [email protected].
Information you provide
When you register or use account features, we process your email address, username, password verifier (not your readable password), account and login state, and account security and verification events. If you use a workspace, we process its name, membership, roles, invitations and related account identifiers. Support messages and information you choose to include in them are also processed.
Social account and Google data
When you connect a social account, the provider returns account identifiers, display name or handle, granted permissions, and authorization credentials such as access and refresh tokens. Tokens are encrypted in the application database and used to maintain the connection and carry out the actions you request. For YouTube, we use Google OAuth and the YouTube Data API to identify the authorized channel, upload videos, and retrieve the analytics allowed by the scopes you grant. For Google Business Profile, we use Google OAuth to identify accessible business locations and create the local posts you request. If you choose Google sign-in, Google returns the identity information needed to authenticate you, such as your Google account identifier, email, and basic profile information. We use Google data only to provide or support the connected features you choose; we do not sell it, use it for advertising, or transfer it to data brokers. We do not allow people to read Google user data except when you ask support to investigate a specific issue, when necessary for security or legal compliance, or when required by law. You can disconnect an account in Postnchill and revoke Google access at https://security.google.com/settings/security/permissions. Google API data is handled under the Google API Services User Data Policy, including its Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy.
Posts, media, and scheduling data
When you create or schedule a post, we process the text and platform-specific versions you enter, selected destination accounts, media files and file details, scheduled time and time zone, publishing settings, and status or error responses. Media files are stored to support your workspace and to let a connected platform retrieve media when its publishing API requires a public, temporary media URL. We send the post and only the information needed to the social account and platform you select when you request publishing. Each platform then processes the submission under its own terms and privacy policy.
Information collected through use
When you access the service, our hosting and security systems may process technical information such as IP address, request time, pages or endpoints requested, browser and device details, and security or error logs. The authenticated app uses session and security cookies needed to sign in and protect requests. The reviewed application source does not include Google Analytics, advertising pixels, or session replay. The public site loads locally hosted styles and scripts; some pages may request fonts from Google Fonts.
How information is used
We use information to create and secure accounts; provide workspaces, connected accounts, media storage, scheduling, publishing, and analytics you request; send account confirmation and password reset messages; respond to support requests; diagnose failures and maintain service security; prevent abuse; and comply with legal obligations. We do not use private post content or connected Google account data to train generative AI models.
Service providers and disclosures
DigitalOcean hosts the Django app and scheduler; Cloudflare Workers Static Assets delivers the public marketing site. Where enabled, Amazon SES sends account emails; Stripe processes checkout if paid billing is enabled. These infrastructure, hosting, email, and payment providers process information needed to provide their services under their own terms. We disclose information to a social platform when you connect that platform and ask Postnchill to publish or retrieve information. We may disclose information when required by law or to protect the service and its users. We do not sell personal information or share it for cross-context behavioral advertising.
Payments
Subscription checkout is available only when billing is enabled. If you purchase a plan, Stripe processes checkout and payment details. Postnchill receives subscription status, plan, billing period, Stripe customer and subscription identifiers, and transaction-related events needed to manage access and billing; Postnchill does not receive or store your full payment card number.
Retention and deletion
We keep account and workspace information while needed to provide the service. You can request account deletion from your profile. Deletion removes your account and memberships, your saved posts, and workspaces that have no remaining members together with their connected accounts, media, and analytics. Shared workspaces and information needed by remaining members may remain, while your access is removed. Deletion does not remove posts already published on social platforms or cancel a post a platform has already accepted for processing. Operational backups may retain deleted information for a limited period before rotation; security, transaction, and legal records may be retained when required or reasonably needed. Contact [email protected] if you cannot access the deletion control.
Your choices and rights
You can disconnect a social account in Postnchill and revoke the authorization in that platform’s settings. You may ask us to access, correct, delete, or provide a copy of personal information, or to consider another request available under the law that applies to you. Contact [email protected]. We may ask for information reasonably needed to verify your identity and will respond as required by applicable law.
International processing and security
Postnchill and its providers may process information in countries other than the country where you live. Where required, appropriate safeguards will be used for international transfers. The application uses password hashing, encrypted storage for social authorization tokens, access controls, and transport security. No online service can guarantee absolute security.
Children and policy changes
Postnchill accounts are for people aged 18 or older who are authorized to manage the connected accounts. The service is not intended for children. If you believe a child has provided us information, contact [email protected] so we can review it. We may revise this policy when the service or its data practices change; the date at the top identifies the latest revision.
Google privacy information
Google’s Privacy Policy explains how Google handles data: https://policies.google.com/privacy. You can review and revoke Postnchill’s Google access in your Google Account security settings: https://security.google.com/settings/security/permissions.