Privacy Policy

We collect the following categories of information:

a. Information you provide

• Account information — your name, email address, and password (stored in hashed form) when you register or join the waitlist.
• Content — the posts, captions, drafts, schedules, media (images and files), hashtags, and link-in-bio pages you create, upload, or generate within the Service.
• Brand voice & preferences — persona, writing style, target audience, and topic settings you configure to personalize AI output.
• Communications — messages, bug reports, and feedback you send us.

b. Connected social media accounts

• When you connect a social account (LinkedIn, Instagram, Facebook, X/Twitter, Pinterest, and others we may add), we receive OAuth access and refresh tokens, your account identifiers, profile/page names, and the permissions you grant. We use these solely to publish and manage content on your behalf.
• We do not collect your passwords for these third-party platforms. Authorization is handled through each platform’s official OAuth flow.

c. Information collected automatically

• Usage & device data — IP address, browser type, pages viewed, and interactions, collected through cookies and analytics tools such as Google Analytics.
• API usage — when you use PostPilot LB API keys or our MCP server, we log requests to operate, secure, and rate-limit the Service.

We use the information we collect to:

• Provide, operate, and maintain the Service, including scheduling and publishing your posts.
• Generate AI-assisted content (captions, ideas, images, hashtags) at your request.
• Authenticate you and secure your account and API access.
• Communicate with you about updates, security notices, and support requests.
• Monitor usage, prevent abuse, and improve the Service.
• Comply with legal obligations.

PostPilot LB uses third-party AI providers, including Anthropic (Claude) and OpenAI (GPT and DALL·E), to power features such as content generation, ideation, and image creation. When you use these features, the prompts and relevant content you submit are sent to these providers to produce a response.

We do not sell your content, and we do not use your private content to train our own models. Third-party AI providers process data under their own terms and privacy policies; we encourage you to review them.

We do not sell your personal information. We share information only as follows:

• Social platforms — content you choose to publish is transmitted to the platforms you have connected.
• Service providers — infrastructure, database, storage, authentication (Supabase), AI providers (Anthropic, OpenAI), and analytics vendors who process data on our behalf under confidentiality obligations.
• Legal — when required by law, legal process, or to protect the rights, property, or safety of PostPilot LB, our users, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy.

Certain features, such as your link-in-bio page, are intentionally public. Any information you place on a public page will be visible to anyone who has the link. Do not include information you wish to keep private.

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us. We may retain certain information as required by law or for legitimate business purposes, such as fraud prevention.

We implement reasonable technical and organizational measures to protect your information, including encryption in transit, hashed credentials, and scoped OAuth tokens. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information.
• Disconnect any connected social account at any time from within the Service.
• Revoke API keys you have generated.
• Object to or restrict certain processing, and request data portability.

To exercise these rights, contact us at support@postpilotlb.com.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand usage through analytics. You can control cookies through your browser settings; disabling them may affect Service functionality.

The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

PostPilot LB is operated from Lebanon. If you access the Service from outside Lebanon, your information may be transferred to, stored, and processed in Lebanon or other countries where our service providers operate.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us at support@postpilotlb.com.

See also our Terms & Conditions.