Privacy policy

Poast stores the account information you provide, workspace settings, connected social account identifiers, encrypted authorization tokens, source posts, adapted content, delivery logs, and billing status.

We use this information only to authenticate you, detect source posts, adapt content according to your rules, publish to destinations you connect, operate billing, prevent abuse, and provide support.

Poast requests the minimum permissions needed for the features you enable. Provider access and refresh tokens are encrypted before storage and are never exposed to the browser. Disconnecting a platform revokes its use by Poast.

Poast relies on Vercel for application hosting and durable workflows, Neon for Postgres and authentication, Stripe for billing, and the social platforms you choose to connect. Each processes data under its own privacy terms.

Workspace content is retained while your account is active and as required for security, billing, and legal obligations. Provider data deletion requests remove stored credentials and personal provider profile metadata. You may request full account deletion through support.

We use encrypted transport, encrypted provider credentials, least-privilege permissions, and access-controlled infrastructure. For privacy or deletion questions, contact support through your Poast workspace.