Privacy Policy

Who we are

PostSpring is a creator publishing service operated in the United Kingdom by Zach Loizou. For privacy questions or requests, contact contact@postspringapp.com.

Information we handle

• Account information: identifiers, connection status, subscription entitlement, and settings needed to provide the service.
• Connected social accounts: platform identifiers, usernames, profile details made available by the platform, granted permissions, and encrypted access or refresh tokens.
• Content you choose to publish: videos, captions, destinations, visibility settings, and publishing results.
• Support and safety information: messages you send us and limited technical records used to diagnose failures, prevent abuse, and protect the service.

PostSpring does not receive your Apple or social-platform passwords or full payment-card details. Apple processes App Store payments.

How we use information

We use information to connect accounts, carry out publishing instructions, show status, provide subscriptions and support, secure the service, meet legal obligations, and improve reliability. We do not sell personal information or use creator content to train artificial-intelligence models.

Our main legal bases under UK data-protection law are performing our contract with you, consent, legitimate interests in security and reliability, and compliance with legal obligations.

When information is shared

When you choose a destination, we send the necessary content and instructions to that platform, including Meta or Instagram, TikTok, and Google or YouTube. Those companies process information under their own policies. Selected hosting, storage, security, support, and subscription providers may process information only to provide their services to us.

Storage and retention

• Videos remain on your iPhone until you choose to publish.
• Temporary server copies are deleted within 24 hours after publishing jobs finish, or within seven days after an interrupted upload.
• Connection tokens remain encrypted until you disconnect, delete your account, or the token is no longer needed.
• Publishing records are retained for up to 90 days, routine security records for up to 30 days, and support messages for up to 24 months, unless a longer period is legally required.

International processing

Platforms and providers may process information outside the United Kingdom. Where required, we use recognised transfer safeguards or an applicable adequacy regulation.

Your choices and rights

You can disconnect social accounts in Settings. You may ask to access, correct, delete, restrict, or receive a copy of your personal information, object to certain processing, or withdraw consent where it applies. Use our account-deletion page or contact us. You may also complain to the UK Information Commissioner’s Office.

Security, children and changes

We use encrypted tokens, access controls, limited retention, and secure connections. PostSpring is not directed to children; users must meet the age requirements of every platform they connect. We will update this policy and give appropriate notice when a material change affects your rights.