PostozoPostozo is a service of TOTOSLOCAL ONE PRIVATE LIMITED, a company registered in India, with its office at Sky Privlion, 501, Nipania, Indore, Madhya Pradesh 452010, India ("Postozo", "we", "us"). You can reach us at support@postozo.com.
This policy explains what personal data we collect when you use postozo.com and app.postozo.com, why we use it, who we share it with, and your rights. We follow the Digital Personal Data Protection Act, 2023 of India and, where they apply to you, other data protection laws such as the GDPR.
Data we collect
| What | Examples | Why |
|---|---|---|
| Account details | Name, email, password (stored only as a scrambled hash), time zone, workspace name | To create and secure your account |
| Team details | Emails of people you invite, their roles and the clients they can see | To let your team and clients work with you |
| Channel connections | Access tokens, account names, profile pictures and ids from the platforms you connect | To publish and read statistics for you |
| Your content | Posts, comments, images, videos, tags, signatures, brand voice, RSS feed addresses | To store, schedule and publish your posts |
| Statistics | Numbers the platforms return, like views, likes and followers, and clicks on our short links | To show you analytics |
| Billing details | Plan, billing email and payment status. Card numbers are handled by our payment provider, not by us | To charge for paid plans |
| Technical data | IP address, browser type, and logs of requests and errors | To keep the Service secure, stop abuse and fix problems |
| Messages to us | Emails you send to support | To answer you |
We do not ask for sensitive data like health or financial account details, and we do not sell personal data.
How we use your data
- To run the Service: sign-in, scheduling, publishing, approvals, notifications and analytics.
- To send service emails, like invites, password resets, failure alerts and summaries. You can turn off summary and success emails in Settings.
- To keep the Service safe: rate limits, fraud and abuse checks, and security logs.
- To answer support requests and to improve the product, using usage patterns, not the content of your posts.
- To meet legal duties, like tax records for payments.
We use your data because you asked for the Service (contract), because we have a legitimate interest in keeping it safe and working, or because the law requires it. Where we rely on consent, you can withdraw it at any time.
AI features
When you use an AI feature, the text or image you send, your brand voice and, for "Explain my results", your statistics are sent to our AI provider (Anthropic or OpenAI) to create the answer. We send only what is needed for that request. We do not use your content to train AI models, and we choose provider settings that do not allow them to train on it.
Who we share data with
We share personal data only with service providers who help us run Postozo, and only what they need:
| Provider | What for | Where |
|---|---|---|
| DigitalOcean | Servers, database and file storage | United States |
| Stripe | Payments for paid plans | United States and other countries |
| Anthropic, OpenAI | AI features, only when you use them | United States |
| Our email delivery provider | Sending service emails | Depends on the provider |
| Web fonts on our pages, and Google sign-in for YouTube and Google Business Profile when you connect them | United States and other countries | |
| Social platforms you connect | Publishing your posts and reading statistics | Set by each platform |
We may also share data if the law requires it, to protect people's safety, or as part of a sale or merger of our business, in which case this policy continues to apply.
Google user data
When you connect YouTube or Google Business Profile, we receive data from Google APIs, such as your channel or business profile details, and the access needed to publish and read statistics. We use it only to provide the features you use in Postozo. Postozo's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, we do not let people read it except with your permission, for security, or where the law requires, and we do not use it to train AI models.
Where your data is stored
Our servers are in the United States (DigitalOcean, New York). By using the Service, your data will be moved to and stored in the United States. We protect it as this policy describes wherever it is processed.
How long we keep data
- Account and content: while your account is open. When you ask us to delete your account, we delete it within 30 days.
- Backups: kept for up to 30 days, then deleted.
- Logs: kept for a limited time for security and fixing problems, then deleted.
- Billing records: kept as long as tax law requires.
How we protect data
- All traffic uses HTTPS.
- Channel access tokens and secret settings are encrypted in our database (AES-256-GCM).
- Passwords are stored as a scrypt hash. API keys and sign-in tokens are stored as hashes.
- Access to our servers is limited to authorised staff.
- Client members only see the brands they are assigned to.
No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.
Your rights
You can ask us to show you, correct, update or delete your personal data, or to stop using it for a purpose. You can also name someone to act for you if you cannot. Write to support@postozo.com. We will answer within 30 days. You can change most details yourself in Settings. If you are not happy with our answer, you can complain to the Data Protection Board of India or your local data protection authority.
Data you handle for others
If you manage channels for clients, you decide what personal data goes into your posts and workspace. For that data you are the controller and we act on your instructions, as set out in our Data processing addendum.
Cookies
We use only the cookies needed for the app to work, like keeping you signed in. We do not use advertising or tracking cookies. See the Cookie policy.
Children
The Service is not meant for anyone under 18. We do not knowingly collect data from children. If you think a child gave us data, write to support@postozo.com and we will delete it.
Changes to this policy
We may update this policy. If a change is important, we will tell you by email or in the app before it applies.
Grievance Officer
For questions or complaints about your personal data, write to our Grievance Officer at support@postozo.com with the subject "Privacy". Post: Grievance Officer, TOTOSLOCAL ONE PRIVATE LIMITED, Sky Privlion, 501, Nipania, Indore, Madhya Pradesh 452010, India.
TOTOSLOCAL ONE PRIVATE LIMITED
Sky Privlion, 501, Nipania, Indore, Madhya Pradesh 452010, India
support@postozo.com