Privacy Policy

1. Information We Collect

We collect information you provide directly when creating an account, including your name, email address, and billing information. When you connect social media platforms, we store OAuth tokens necessary to publish content on your behalf.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process transactions and send billing-related communications
• Schedule and publish content to your connected social media platforms
• Send service-related notifications and updates
• Respond to your requests and provide support

3. API and Usage Data

We collect API request logs, including timestamps, endpoints accessed, and response codes. This data is used for rate limiting, debugging, and service improvement. API request logs are retained for 90 days.

4. Data Storage and Security

All OAuth tokens and API keys are encrypted at rest. We use industry-standard security measures to protect your data. Your content is stored only as long as needed to complete scheduled publishing and is not used for any other purpose.

5. Third-Party Services

We integrate with the following categories of third-party services:

• Social media platforms — to publish your scheduled content (e.g., Instagram, LinkedIn)
• Payment processing — Stripe processes all payments; we do not store full card details
• Infrastructure providers — for hosting, database, and queue services

6. Data Sharing

We do not sell your personal information. We share data only when:

• Required to provide the Service (e.g., publishing to connected platforms)
• Required by law or legal process
• Necessary to protect the rights, safety, or property of PennantPost or its users

7. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

8. Data Retention

Account data is retained for the duration of your account. Upon account deletion, we remove your personal data within 30 days. Some data may be retained longer where required by law or for legitimate business purposes such as fraud prevention.

9. Your Rights

You have the right to:

• Access and export your personal data
• Correct inaccurate information
• Request deletion of your account and data
• Disconnect social media platforms at any time, which revokes our access tokens

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or through the Service.

11. Contact

Questions about this policy? Contact us at privacy@pennantpost.com.