Privacy Policy

1. What PostPilot is

PostPilot is an AI-assisted content planning, scheduling and publishing product. You describe your brand, and PostPilot helps you generate content ideas, prepare posts (captions, hashtags, media), schedule them, and — when you connect an Instagram Professional account — publish them through Meta's official APIs, manually, on a schedule, or via an optional autopilot mode that works within limits you configure.

This public website (postpilot.site) is an informational marketing site. It collects no personal information itself: there are no accounts, no forms that store data, and no analytics or advertising trackers on these pages.

2. Information the product may store

When you use the PostPilot application, it stores only what is needed to operate the service:

• Workspace and account records: an internal user identifier and workspace name. PostPilot has no password-based login; there are no passwords to store.
• Brand information you provide: brand name, niche, audience, description, tone, goals, content pillars, calls to action, posting frequency and platform preferences.
• Content you create or generate: ideas, hooks, drafts, captions, hashtags, covers, publishing configuration, quality scores, schedules, timezones and publishing status/history.
• Media you upload or generate: images, videos, rendered carousel assets and their metadata (file type, size, dimensions, duration where detectable). Files are stored on the application server or, when configured, in dedicated object storage.
• Social account connections: provider name, handle, Instagram user ID, linked Facebook Page ID/name, account type, follower counts returned by Meta, connection status and validation timestamps.
• OAuth tokens: Instagram access/refresh tokens and expiry times, stored server-side only (see section 4).
• Scheduling and autopilot settings: schedules, approval requirements, publishing frequency, preferred days/time windows, quiet hours, blackout dates and quality thresholds you configure.
• Publishing records: provider media/container IDs, permalinks, publish timestamps, attempt counts and error messages.
• Performance data (if you enable it): aggregate metrics retrieved from Meta (impressions, reach, likes, comments, saves, shares, views) associated with your posts. PostPilot never invents or estimates metrics.
• Operational records: timestamps of actions such as generation, scheduling, approval, publishing, retries and disconnects — used for reliability and troubleshooting. These contain IDs and outcomes, not message content or credentials.

3. Information we do not collect

• No passwords (the product has no password login).
• No payment information (the product has no billing).
• No advertising trackers, analytics beacons or cross-site trackers on this website.
• Browser local storage in the application is used only to hold an in-progress onboarding draft on your own device.

4. Instagram tokens and how they are protected

When you connect Instagram via Meta OAuth, your access tokens are stored server-side only and are never sent to the browser or to client applications. API responses containing account data explicitly exclude token fields.

In production deployments, tokens are encrypted at rest with AES-256-GCM before storage and can only be decrypted by the server holding the key. Without that key, stored tokens cannot be used and you will simply be asked to reconnect. Tokens are refreshed automatically before expiry, and disconnecting an account wipes its tokens immediately.

5. How information is used

• To generate ideas, copy, captions and hashtags tailored to your brand.
• To prepare, schedule and publish posts you approve or automate.
• To validate connections, retry transient publishing failures safely, and record what happened.
• To operate autopilot within the limits you configure (frequency, windows, approvals, quality).
• To diagnose errors and keep the service reliable.

6. Third-party services actually used

• Meta / Instagram: when you connect Instagram, account metadata, media URLs, captions and publishing requests are exchanged with Meta's Graph API under Meta's own terms and privacy policy. Publishing requires a Professional (Business/Creator) Instagram account linked to a Facebook Page — a Meta requirement, not ours.
• OpenAI: when AI features are used, brand context, content drafts and (for design analysis only) reference screenshots are sent to the OpenAI API to generate results. API keys are kept server-side and are never exposed to clients.
• Storage providers: when dedicated object storage is configured, your media files are stored there so Meta can fetch them over public HTTPS at publish time. Otherwise files stay on the application server.

We do not sell your information. We share data with third parties only as needed to provide the features above, or if required by law.

7. Data retention and deletion

Your content, media, brand data and settings are kept while your workspace exists so the service functions. OAuth authorization states are short-lived (minutes) and single-use. Operational server logs rotate with the hosting environment.

You can delete individual posts and media inside the application, disconnect Instagram at any time (tokens are wiped immediately), and request complete workspace deletion by contacting us at the address below.

8. Your rights and choices

• Review and edit your brand, content, schedules and autopilot settings at any time in the application.
• Disconnect Instagram at any time to immediately revoke PostPilot's stored access.
• Request export or deletion of your data via the contact below.

9. Security

We apply practical safeguards appropriate to the service: server-side-only secrets, authenticated server endpoints in production, input validation, file-type checks, encrypted token storage in production, and audit trails. No method of transmission or storage is completely secure, and we do not claim certifications (such as SOC 2 or ISO) or guarantees beyond what is described here.

10. Changes to this policy

We may update this policy as the product changes; the “Last updated” date above will reflect the current version.

11. Contact

For privacy questions, export requests or deletion requests, contact: privacy@postpilot.site