Privacy Policy
Last updated: April 11, 2026
At Postbro, social media content scheduler ("we", "our", or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
Information We Collect
Account Information
When you create an account, we collect:
- Your name and email address
- Password (stored securely using industry-standard hashing)
- Profile information you choose to provide
Social Media Account Data
When you connect social media accounts to Postbro, we receive:
- OAuth tokens to post on your behalf
- Basic profile information from the connected platform
- Account identifiers necessary for publishing content
We do not access or store your social media passwords. All connections use secure OAuth authentication provided by each platform.
YouTube API Services
Postbro uses YouTube API Services to connect YouTube channels. By connecting a YouTube channel you agree to the YouTube Terms of Service, and the Google Privacy Policy applies to how Google handles your data.
Through YouTube API Services we access and store:
- Your channel's identifier, name, handle and profile picture, to show which channel is connected
- OAuth access and refresh tokens, encrypted at rest, used only to upload the videos you schedule to your own channel
- The upload and processing status, privacy setting, and public view, like and comment counts of videos published through Postbro
We use this data only to publish the videos you schedule and to show their status and performance in Postbro. We do not share YouTube data with third parties, use it for advertising, or sell it. Stored statistics are refreshed at least every 30 days or deleted; tokens and channel data are deleted when you disconnect the channel or delete your Postbro account. You can also revoke Postbro's access at any time from your Google account permissions.
Content You Create
We store the content you create within Postbro, including:
- Scheduled posts and their text content
- Media files (images, videos) you upload
- Post templates and drafts
- Brand workspace settings
Usage Data
We automatically collect certain information when you use our service:
- Log data (IP address, browser type, pages visited)
- Device information
- Feature usage patterns to improve our service
How We Use Your Information
We use the information we collect to:
- Provide and maintain the Postbro service
- Publish content to your connected social media accounts
- Send you important service notifications
- Respond to your inquiries and support requests
- Improve and develop new features
- Protect against fraudulent or unauthorized activity
Legal Basis for Processing (GDPR)
For users in the European Economic Area, we process your personal data based on the following legal grounds:
- Contract performance: Processing necessary to provide the Service you requested (account management, content publishing, subscription handling)
- Legitimate interests: Processing for service improvement, security, and fraud prevention, where our interests do not override your rights
- Consent: Where you have given explicit consent for specific processing activities, such as marketing communications
- Legal obligation: Processing required to comply with applicable laws
You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
Information Sharing
We do not sell your personal information. We may share information in the following circumstances:
- Social Media Platforms: We transmit your content to platforms you've connected for publishing
- Team Members: If you use brand workspaces, team members with appropriate permissions can access shared content
- Service Providers: We use third-party services for hosting, payment processing, and analytics
- Legal Requirements: We may disclose information if required by law or to protect our rights
Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit (TLS/SSL)
- Secure storage of credentials and tokens
- Regular security assessments
- Access controls and authentication requirements
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users without undue delay (and within 72 hours where required by GDPR). We will also notify the relevant supervisory authorities as required by law.
Data Retention
We retain your information for as long as your account is active or as needed to provide services. You can request deletion of your account and associated data at any time through your account settings or by contacting us.
Your Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your personal information
- Export your data in a portable format
- Object to or restrict certain processing
To exercise these rights, please contact us at the address below.
Additional Rights for California Residents (CCPA)
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act:
- Right to know: You can request details about the categories and specific pieces of personal information we have collected about you
- Right to delete: You can request deletion of your personal information, subject to certain exceptions
- Right to opt-out: You can opt out of the sale of your personal information. Note: we do not sell your personal information
- Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights
To exercise these rights, contact us at [email protected] or use the account settings in your dashboard.
Cookies
We use cookies and similar technologies to maintain your session, remember your preferences, and improve your experience. You can control cookie settings through your browser preferences.
Third-Party Links
Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
Children's Privacy
Postbro is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: [email protected]