Privacy Policy

1. Information we process

PostPilot may process account information, authentication information, social media account identifiers, scheduled content, uploaded media, publishing status, and analytics data obtained through authorized third-party platform APIs.

2. Social media authorization

When you connect a social media account, PostPilot receives only the permissions and information granted through the platform's authorization process. Access tokens are used to communicate with the authorized platform on your behalf.

3. How we use information

Information is used to provide PostPilot features, including scheduling, publishing, account connection, publishing status, and analytics reporting.

4. Uploaded media

Media uploaded to PostPilot may be stored temporarily or for the period required to provide scheduling and publishing services. Media may be transmitted to the social media platforms selected by the user for publishing.

5. Third-party platforms

PostPilot communicates with third-party services such as social media platforms using their official APIs. Those services may independently process information according to their own privacy policies and terms.

6. Optional AI features

PostPilot offers optional AI-assisted features: AI analytics insights and a writing assistant (Copilot) that suggests post texts, titles, hashtags and content ideas. Copilot is turned off by default and can only be turned on by the owner of an organization. These features work only when the service operator has configured an AI provider.

When a member of an organization uses Copilot, the text they enter for that request (for example a brief or an existing post text), the organization's brand context, and the selected options are sent to the configured AI provider to produce the suggestion. If the member chooses to use an account's data, only an aggregated performance summary is sent (counts, medians, percentages and posting times); account identifiers, access tokens, credentials and the text of published posts are not sent. AI analytics insights send only aggregated analytics summaries.

PostPilot does not store the texts entered for Copilot or the generated suggestions. It keeps usage metadata (who used Copilot, when, which action, the outcome, the model and token counts) for about 90 days, to enforce usage limits and to show usage to the organization's owners and admins. The AI provider processes the data sent to it under its own terms and policies, which may include its own retention practices. AI suggestions can be inaccurate; they are only used if a person chooses to use them.

7. Security

PostPilot uses reasonable technical measures to protect account credentials, authentication tokens, and stored information from unauthorized access.

8. Data retention

Information is retained only for as long as reasonably necessary to provide the service, maintain publishing history, provide analytics, meet operational requirements, or comply with legal obligations.

9. Your choices

Users can disconnect authorized social media accounts from PostPilot. Where applicable, users may also request deletion of their stored information.

10. Changes to this policy

This Privacy Policy may be updated from time to time. The latest version will be published on this page.

11. Contact

For privacy questions or data deletion requests, please contact the PostPilot service operator.