Privacy Policy

1. Data we collect

Account data (email, name, password hash, organization membership), billing data (handled by Stripe — we store only metadata, never card numbers), content you upload (drafts, media, comments), data from connected platforms (posts, analytics, follower counts) within the scopes you authorize, and technical logs (IP address, device type, error traces) for operating and securing the service.

2. How we use it

To provide and operate the service; to send transactional notifications (sign-in links, approval reminders, cancellation confirmations); to investigate abuse and enforce our terms; to improve the product based on aggregate usage patterns; to comply with legal obligations. We do not sell personal data.

3. Marketing

We do not operate a general marketing newsletter. The early-access list on posttide.com is used solely to send a sign-in link when your tier opens and a small number of launch-related updates. You can unsubscribe from any such email and we will honour the request immediately.

4. Legal basis (EU/UK customers)

Processing is based on contract performance (to operate the service), legitimate interests (security, product improvement on aggregate data), your consent (for optional channels like marketing), and legal obligations (tax records, responding to lawful requests).

5. Sharing

We share data only with: subprocessors who help us run the service (hosting on Vercel, databases on Neon, email via Resend, AI via Anthropic through Vercel AI Gateway, payments via Stripe; sign-in through Google, Facebook or Apple when you choose one — a current list is available on request); the connected social platforms you authorize; legal and regulatory authorities when required by law. All subprocessors are bound by written data-protection terms consistent with this policy.

6. YouTube (Google) data

PostTide uses YouTube API Services. When you connect a YouTube channel, you authorize PostTide through Google to read your channel name, handle, profile picture and subscriber count; to upload the videos you publish from PostTide, with the title and description you write; to read the view, like and comment counts of those videos for your analytics; and to read the comments on those videos and post the replies you write in PostTide. We use this data only to provide these features to you. We do not sell it or use it for advertising, and we share it only with the subprocessors listed in section 5.

Connecting YouTube also means you agree to the YouTube Terms of Service. Google's own use of your data is covered by the Google Privacy Policy.

You can remove PostTide's access at any time from Google's security settings page or by disconnecting the channel in PostTide. When you disconnect a channel, we delete its access and refresh tokens immediately, so PostTide can no longer read from it or post to it, and the YouTube data we cached from it is permanently deleted within 7 days. The rest of your data is deleted as described in section 8 and on our data deletion page. Questions about your YouTube data: support@posttide.com.

7. The PostTide phone app

PostTide for iPhone and Android shows your upcoming posts and lets you post one now, change its time, delete it, try a failed one again, and delete your account. You sign in on PostTide's own sign-in page, opened in your phone's browser, with email and password, Google, Facebook or Sign in with Apple. Google, Facebook and Apple can share your name and email address with us when you use them. The app keeps its sign-in tokens in the phone's secure storage (the Keychain on iPhone, the Keystore on Android).

The app collects your name, your email address and your PostTide account id, only to run the app and your account. It talks only to PostTide's own servers: it reads your posts and sends back a post's id, a new time or the ids of its channels. Post texts and pictures are written on the website, not in the app. The app keeps nothing on the phone beyond the last list of posts it showed. It has no tracking, no advertising, no analytics, no crash reporter and no third-party code that sends your data anywhere.

You can delete your account in the app (Account › Delete account) or on the website (Settings › Security › Delete account). If your account uses Sign in with Apple, you confirm with Apple once more and we revoke PostTide's Apple token with Apple at once, so the link between your Apple ID and PostTide ends; we never store an Apple token. What is deleted, and when, is on our data deletion page.

8. Retention

Account and content data are retained while your subscription is active. On cancellation, your organization enters a 90-day retention window during which you can restore it; after the window passes, data is permanently deleted within 30 days except where retention is required by law (for example, invoices for tax records, typically held for 7 years). Data from your connected social accounts is the exception to the restore window: it is permanently deleted within 7 days of disconnecting a channel, cancelling or deleting your account, so restoring means reconnecting your channels. Logs are retained for up to 180 days.

9. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, delete, or restrict processing of your personal data, and to object to certain uses. You can exercise these rights by emailing support@posttide.com. We respond within 30 days. You also have the right to lodge a complaint with a supervisory authority (in the UK, the Information Commissioner's Office).

10. Security

We use encryption in transit (TLS 1.2+) and at rest, access controls, and regular security reviews. No system is perfectly secure — if a breach affects your data, we will notify affected users and relevant authorities in line with applicable law.

11. Cookies

We use essential cookies to keep you signed in and prevent fraud. We do not use advertising cookies. A small number of cookies are used for session analytics (page load times, error frequency); these are anonymous and aggregated. You can opt out of non-essential cookies via your browser settings.

12. Children

PostTide is not intended for users under 16. We do not knowingly collect personal data from children under 16. If you believe a child has created an account, contact support@posttide.com and we will delete the account.

13. International transfers

Data may be processed in the United States, the EU/EEA, and the United Kingdom. Where data is transferred to a country without an adequacy decision, we rely on Standard Contractual Clauses or other approved transfer mechanisms.

14. Changes

We will notify you by email at least 30 days before material changes take effect. Minor changes (clarifications, broken-link fixes) are updated in place with a new 'last updated' date.

15. Contact

Privacy questions: support@posttide.com. Data controller: BitShore Ltd, registered in England and Wales (CRN 17123841). Registered address available on request.