Privacy Policy

Qpostly ("Qpostly", "we", "us", or "our") is a social media scheduling and management platform developed and operated by Estach ("Estach", our parent company). This Privacy Policy explains what information we collect when you use our website and application (together, the "Service"), how we use and share that information, and the choices you have.

By creating an account or otherwise using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

We collect information in the following ways:

• Account information — name, email address, password (stored in hashed form), company name, and billing details when you register or subscribe to a paid plan.
• Connected platform data — when you connect a third-party social network or channel (such as X, LinkedIn, Facebook, Instagram, YouTube, TikTok, Pinterest, Reddit, Threads, Discord, Slack, Telegram, WordPress, Mastodon, Bluesky, or similar), we receive OAuth access tokens and profile information (such as page or account name and profile picture) needed to publish and manage content on your behalf.
• Content you create — post text, media, captions, schedules, and any other content you upload or create using the Service.
• Usage data — information about how you interact with the Service, including pages visited, features used, device and browser type, IP address, and timestamps.
• Communications — information you provide when you contact support, respond to surveys, or otherwise communicate with us.

We use the information we collect to:

• Provide, operate, and maintain the Service, including publishing and scheduling content to the platforms you connect.
• Create and manage your account and process subscription payments.
• Send you service-related notifications, such as publish confirmations, failures, and account alerts.
• Provide analytics and reporting about the performance of your published content.
• Improve, secure, and troubleshoot the Service.
• Communicate with you about updates, new features, or promotional offers, where permitted, and where you may opt out at any time.
• Comply with legal obligations and enforce our Terms of Service.

When you connect a social media account, we act on your instructions to publish, schedule, or manage content using the permissions you grant during the OAuth authorization process. We do not access more than what is required for the features you use, and you may disconnect a channel at any time from within the Service, which revokes our access going forward (subject to each platform's own token expiration behavior).

Your use of connected platforms is also governed by that platform's own terms and privacy policy. We are not responsible for the privacy practices of third-party platforms.

We use cookies and similar technologies to keep you signed in, remember your preferences, understand how the Service is used, and measure the effectiveness of our marketing. You can control cookies through your browser settings; disabling certain cookies may affect the functionality of the Service.

We do not sell your personal information. We may share information with:

• The third-party social media platforms you explicitly connect, in order to publish content on your behalf.
• Service providers who help us operate the Service (such as hosting, payment processing, email delivery, and analytics providers), under contractual obligations to protect your data.
• Professional advisors and authorities where required to comply with the law, enforce our agreements, or protect the rights, property, or safety of Qpostly, Estach, our users, or others.
• A successor entity in connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy or a materially equivalent one.

We retain your information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where we are required to retain it to comply with legal, tax, or accounting obligations, or to resolve disputes.

We use administrative, technical, and physical safeguards designed to protect your information, including encryption of data in transit and access controls around stored credentials and access tokens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update most account information directly within the Service, or contact us using the details below to exercise these rights. We will respond to verifiable requests within the timeframe required by applicable law.

We may process and store information in countries other than your own. Where required, we rely on appropriate safeguards, such as standard contractual clauses, to protect information transferred internationally.

The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on this page with a new "Last updated" date, and, where appropriate, through the Service or by email.

If you have questions about this Privacy Policy or how we handle your information, please contact us at contact@estach.com.