Privacy Policy
Last updated: 27 September 2026
Postjet ("we", "us") is operated by Aretexe LLC. This policy explains what data Postjet collects when you use the service at postjet.io and the connected social media integrations, and how we use and protect it.
1. Data we collect
- Account data: your email address, used to sign you in and contact you about the service.
- Brand data: website content you ask us to analyze, brand briefs, tone rules, images you upload, and the posts generated for you.
- Social account data: when you connect an Instagram or TikTok account, we receive the account ID, username, display name, profile picture and an access token that lets Postjet publish content and read performance statistics on your behalf. We only request the permissions needed for those actions.
- Usage data: basic logs (timestamps, actions, errors) needed to run and debug the service.
2. How we use it
- To generate, schedule and publish content you approve to the social accounts you connected.
- To show you performance statistics for the posts Postjet published.
- To keep the service secure and working.
We do not sell your data, and we do not use your social account data for advertising or share it with third parties except the service providers listed below.
3. Third-party services
Postjet uses these providers to operate: Supabase (database and authentication), Cloudflare (hosting and media storage), Railway (application hosting), Anthropic (AI text generation; only brand context and content briefs are sent, never your access tokens), Pexels (stock images), and the Instagram and TikTok APIs (publishing and statistics). Each processes data only as needed to provide its service.
4. Social platform data
Access tokens for Instagram and TikTok are encrypted at rest and are used only to perform the actions you request. You can disconnect an account at any time from the Accounts page, which deletes its token. Your use of those platforms remains subject to their own terms and privacy policies.
5. Retention and deletion
We keep your data for as long as your account exists. You can delete generated posts, uploaded media and connected accounts yourself at any time. To delete your whole account and all associated data, email hello@postjet.io; we will complete the deletion within 30 days.
6. Security
Data is transmitted over HTTPS, stored with access controls, and credentials are encrypted. No system is perfectly secure, and we will notify you of any breach affecting your data as required by law.
7. Cookies
Postjet uses only the cookies needed to keep you signed in. The public website uses no tracking cookies.
8. Your rights
You can request access to, correction of, or deletion of your personal data by emailing hello@postjet.io. If you are in the EU or UK, you also have the right to data portability and to lodge a complaint with your local data protection authority.
9. Changes
We may update this policy. The date at the top shows the latest version. Material changes will be announced in the app.
10. Contact
Aretexe LLC · hello@postjet.io