We only collect information that's necessary to provide and improve the service:

• Account information — your name, email address, and password when you sign up.
• Social media tokens — when you connect Facebook, Instagram, LinkedIn, or TikTok, we store encrypted access tokens so we can publish and fetch analytics on your behalf. We never store your social media passwords.
• Content you create — posts, campaigns, media files, brand settings, and other data you add to the platform.
• Usage data — pages visited, features used, and performance metrics. This helps us understand what works and what to improve.
• Device information — browser type, operating system, screen size, and IP address. Collected automatically for security and troubleshooting.
• Payment information — handled entirely by Stripe. We never see or store your full card number.

Your data is used to:

• Provide and maintain the service — publishing your posts, syncing your inbox, generating AI content.
• Improve the platform — understanding which features are used helps us prioritize development.
• Communicate with you — account notifications, product updates, and support responses. No spam.
• Protect accounts — detecting suspicious activity, preventing abuse, and enforcing our terms.
• Meet legal obligations — tax records, fraud prevention, responding to lawful requests.

When you connect a social account, we request specific permissions from each platform:

You can disconnect any social account at any time from your dashboard settings. When you disconnect, we delete the stored access tokens within 24 hours.

We use a minimal set of cookies:

• Essential cookies — session management, authentication, language preference. These are required for the app to work.
• Analytics — we use privacy-friendly analytics to understand page views and feature usage. No cross-site tracking, no advertising cookies.
• We do not use third-party advertising cookies or trackers. We do not sell your data to advertisers.

We share data only with services that are necessary to operate the platform:

• Vercel — hosting and CDN.
• Supabase — database and authentication.
• Stripe — payment processing.
• Email providers — transactional emails (account confirmations, notifications).
• AI providers (OpenAI, Anthropic) — when you use AI features, your prompts and content context are sent to generate suggestions. Providers are contractually prohibited from using your data for training.
• Social media platforms — only the content you explicitly choose to publish.

We do not sell, rent, or trade your personal information. Period.

Whether you're in Europe, California, or anywhere else, you have the right to:

• Access — request a copy of all data we hold about you.
• Correction — fix inaccurate information.
• Deletion — ask us to delete your account and all associated data.
• Portability — receive your data in a machine-readable format.
• Restriction — ask us to stop processing your data while we resolve a concern.
• Objection — opt out of specific processing activities.
• Withdraw consent — for any processing based on consent, you can withdraw at any time.

We keep your data for as long as your account is active. When you delete your account:

• Your content, social tokens, and profile data are deleted within 30 days.
• Encrypted backups may retain fragments for up to 90 days, after which they are permanently purged.
• Financial records required by law (invoices, tax data) are retained for the legally mandated period (typically 7 years).

We take security seriously: all data is encrypted in transit (TLS) and at rest. Social media tokens are encrypted with AES-256 before storage. Access to production systems is restricted and audited. We use Row Level Security at the database level so that even application bugs cannot leak data across accounts.

Pluripost is not intended for children under 16. We do not knowingly collect data from minors. If you believe a child has created an account, contact us and we'll delete it promptly.

We may update this policy from time to time. When we make significant changes, we'll notify you by email or through a banner on the platform. The "Last updated" date at the top always reflects the current version.

Questions about this policy? Reach out: