Privacy Policy

1. Who we are

"Post Your Content" ("we", "us", "our") is a multi-client social media management platform that helps businesses and agencies plan, approve, and publish social media content. This policy explains what personal data we collect, why, and the rights you have under UK GDPR and EU GDPR.

Contact us about privacy matters at hello@postyourcontent.com.

2. What data we collect

• Account data — name, email address and authentication details, managed via our identity provider (Clerk).
• Workspace & brand data — your company profile, brand guidelines, palette, fonts and logos you add to the platform.
• Content you create — post captions, images, voiceovers and other media you generate, upload or approve within the platform.
• Connected social accounts — when you connect Facebook, Instagram, LinkedIn, TikTok or YouTube, we store an encrypted access token and basic account/page identifiers (e.g. Page name, channel name) so we can publish on your behalf. We never see or store your social media password.
• Usage data — log data such as IP address, browser type and pages visited, used for security and troubleshooting.

3. How we use your data

• To provide the core service — content planning, AI-assisted drafting, approvals, and publishing to the social accounts you connect.
• To operate an approval workflow ("Silence is Approval") that requires human review of AI-generated content before it is ever published.
• To improve and secure the platform, and to respond to support requests.

4. Third-party services we use

We rely on the following processors to operate the platform. Each only receives the minimum data needed to perform its function:

• Clerk — authentication and account management.
• Anthropic (Claude) & Google (Gemini) — AI text and image generation for content drafts.
• Inworld AI — AI voiceover generation.
• Storyblocks, Pexels & Unsplash — stock photo search.
• Meta (Facebook/Instagram), LinkedIn, TikTok, Google (YouTube) — direct publishing to the social accounts you connect.
• MongoDB — secure database hosting for your workspace data.

5. Legal basis for processing

We process your data under UK/EU GDPR on the basis of: performance of a contract (providing the service you signed up for), our legitimate interests (security, service improvement), and your consent where you explicitly connect a third-party social account.

6. Data retention

We retain your workspace data for as long as your account is active. If you disconnect a social account, its access tokens are deleted immediately. You can request deletion of your account and associated data at any time via the contact details below.

7. International data transfers

Some of our processors (listed above) operate outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses to ensure your data remains protected.

8. Your rights

Under UK/EU GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time (e.g. by disconnecting a social account)
• Lodge a complaint with your local data protection authority (in the UK, the ICO — ico.org.uk)

9. Cookies

We use essential cookies required for authentication and session management. We do not use third-party advertising or tracking cookies.

10. Children's privacy

Post Your Content is a business tool and is not directed at, or intended for use by, children under 16.

11. Security

Social account access tokens are stored encrypted at rest. Access to workspace data is scoped per organization so that one client's data is never visible to another.

12. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

13. Contact us

For any privacy questions or to exercise your rights, email hello@postyourcontent.com.