Privacy Policy

This Privacy Policy explains how Postango LLC ("Postango," "we," "us") collects, uses, and shares information when you use our website, our iPhone and Android app, and our services (the "Service"). Postango turns the photos and video clips you upload into edited, captioned social posts and publishes them to the accounts you connect.

Aviso de privacidad en español (México) · Transferência internacional, em português (Brasil)

Information we collect

• Account information — your name, email address, and password (stored securely by our authentication provider), plus the business details you enter during onboarding.
• Content you upload — the video clips, photos, and audio (including any music you add) you provide, your logo and your own intro clips, and the finished videos, captions, voiceovers and AI-made intros we generate from them. For a clip whose speech you keep, and for a Podcast recording, that includes a written record of what is said in it.
• Connected social accounts — when you link a platform (e.g. Facebook, Instagram, TikTok, YouTube, X, LinkedIn, Pinterest, Threads, Bluesky), the authorization needed to publish on your behalf is kept by PostPeer, the service that publishes for us. We never receive your passwords for those platforms, with one exception: Bluesky connects with an app password, which you type into Postango and we pass straight to PostPeer. We do not keep it.
• Payment information — if you subscribe, the payment processor handles your card details: Stripe, on the website, or Apple or Google, if you subscribe in the app. We do not store full card numbers; we keep a payment reference and your subscription status (for a plan bought in the app: the store, plan, status and end date).
• Usage and technical data — basic logs, device/browser information, and product usage needed to operate and secure the Service. That includes the error reports your browser sends us when a page breaks (with your browser's description of itself and your account's ID), and the questions you ask the help assistant, with the page you asked from.
• In the Postango app — the app uses your camera and microphone only while you film a clip or take a photo, and your photo library only for the photos and videos you pick or choose to save. It reads nothing else on your phone. When you open the app, and again when you come back to it after a while, it asks your phone (Apple's Declared Age Range or Google Play's age signals) whether you are 18 or over; we use the answer only to allow or refuse access, and do not store it. When you sign up, on the website or in the app, you confirm that you are 18 or older; we keep that statement on your account with the time you gave it. If you turn notifications on, we keep your phone's notification address until you turn them off, sign out on that phone, or delete your account. When it starts, the app checks Expo's servers for updates, which shows Expo your IP address, the app's version, your device type and a random ID for that copy of the app.
• Advertising attribution — if you reach us through an advert or a tracked link (one carrying an ad click identifier or campaign tags), we record the click identifier and campaign tags it carried, the page you landed on, and the host that referred you. This lets us tell which adverts produce customers. An ordinary visit — a search result, or typing the address in — records nothing here. Until you sign up it waits in the storage your browser keeps for this site; after 30 days it is no longer used, and it is cleared the next time you visit. We keep it for as long as your account exists and delete it with the account; there is no separate purge. We do not currently send these identifiers to any advertising platform.
• Communications — messages you send us (support requests, feedback) and their contents. When you report something our AI made, we keep the report, which video it was about, and a copy of that video's captions and voiceover script, until your account is deleted; the same details are emailed to our support inbox, where they stay like any other message you send us, until you ask us to delete them.
• Feedback and reviews — ideas and feedback you send us, and any review or testimonial you give us. We publish a review, with the name and business name you choose, only if you agree to share it, and we stop showing it when you ask.

How we use your information

• To provide the Service — editing, captioning, scheduling, and publishing your content to the accounts you connect.
• To process payments and manage your subscription.
• To send you transactional email (e.g. account, billing, and support messages).
• To provide customer support and respond to your feedback.
• To maintain, secure, and improve the Service.
• To learn what makes a good edit: we keep the instructions our editor wrote for each video it cut from your clips, and whether you kept it, regenerated it or said no to it (see “How long we keep things”).
• To comply with legal obligations.

AI processing of your content

Postango makes your videos with the AI services below, and one of them answers your questions in the help assistant. The app asks for your OK before anything of yours is sent to them, and you can withdraw it at any time in Settings › AI on the website, or Settings › AI sharing in the app. While it is withdrawn nothing more is sent (a step already under way finishes), and Postango cannot make videos or answer help questions. Your plan is still billed while it is withdrawn; to stop paying, cancel your plan. What each one gets, and what it keeps:

• Google Gemini — Plans each edit, frames the shots, and writes the captions, titles and voiceover scripts. It also answers questions in the help assistant.
  • Your clips and photos, usually as smaller copies, with their file names.
  • The finished video, with its sound, to write its caption and title.
  • Your notes on clips, your preset wording, your business name and what you make, and the titles of your recent posts.
  • Your logo and your business name when you ask for an AI-made intro, and what you make when you choose a spoken one.
  • What is said, written out as text, in clips where someone talks and in recordings you send as a Podcast (one video made from a recorded conversation).
  • Questions you ask the help assistant, the conversation so far, and the address and text of the page you are on (never what you have typed into a field).
  What it keeps: What we send, for up to 55 days, only to detect abuse. We use Google's paid service, so Google does not use it to improve its products.
• ElevenLabs — Speaks the voiceover, and writes down what is said in clips where someone talks and in recordings you send as a Podcast.
  • The voiceover script, when voiceover is on.
  • The sound of those clips and recordings (never the picture).
  What it keeps: A copy of each voiceover it makes, in Postango's ElevenLabs account, with no end date. That includes after you delete your Postango account: we keep no record of which voiceovers were yours, so we can't delete them. What it writes down from your clips is deleted as soon as we have read it.

ElevenLabs receives a clip's sound only when someone talks in it, or for a recording you send as a Podcast, which is made from what is said in it. First, our own servers check each clip's sound to hear whether anyone is talking; nothing is sent anywhere for that check. For a clip someone talks in, we take the sound off it, have the words written down, and give them to the AI so the edit is made from what is said as well as from the pictures. A clip nobody talks in is never sent, and nothing is sent when your clips' sound is replaced with music.

Your content is not used to train AI models. We do not train on it, and neither service above may train on it: we use Google's paid Gemini API tier, whose terms do not allow Google to use your prompts or content to improve its models, and ElevenLabs may not because we have switched off its model-training setting on our account. We do not sell your content. We do not watch your videos or look at your photos. To fix problems, we may read the instructions our system writes for each video and sends to our AI providers, and the AI's answers; these can include a transcript of what is said and a written description of what the footage shows. We look at the videos or photos themselves only if you ask us to (for example, for support), to investigate a credible report of unlawful content or a security incident, or where the law requires it.

We only look at a video to improve Postango when you tick “Share this video with our team to help improve Postango.” when you approve it. You can untick it any time on the video. Saying no changes nothing.

Service providers we share data with

We share information with vendors that help us run the Service, only as needed to provide it. The vendors we contract with may use it only to provide their service to us, and must protect it at least as well as this policy does. Two work differently, as said beside each: PostPeer handles what it receives under its own terms and privacy policy, and Microsoft handles what Clarity collects as its own business.

• Supabase — authentication and database.
• Cloudflare R2 — storage for your media and finished videos.
• PostPeer — the posting aggregator that publishes to your connected platforms. It handles what it receives under its own terms and privacy policy.
• Stripe — payment processing and billing for plans bought on the website.
• RevenueCat — when you sign in to the Postango app, it creates a record under your account's ID (with your app version and device type) and records any plan you buy through the App Store or Google Play (the store, plan, status and end date), so the app and website know which plan you have. Apple and Google handle the payment itself. Deleting your account deletes your RevenueCat customer record too, but not a plan you bought in the app: Apple or Google bills you for that, so cancel it in your phone's subscription settings.
• Google (Gemini) — video editing, captions, search copy, and answers to your help questions; and, when you ask for one, your AI-made intro, from your logo, your business name and (if you choose a spoken one) what your business does. For the intro we ask Google not to store the request or the video; we delete our copy as described under “How long we keep things” below, and Google keeps abuse-monitoring logs for up to 55 days. Paid API tier; your content is not used to train Google's models. Only with your OK (see above).
• ElevenLabs — voiceover audio, only when you turn voiceover on; and writing down what was said in a clip, only for the clips you tick the speech question on and the recordings you send as a Podcast. Only with your OK (see above).
• Vercel — hosting for the website and the services behind it. Handles every request, so it processes your IP address and standard server logs. Its Web Analytics also counts page visits, including to your dashboard in a browser, without cookies; it does not run in our iPhone or Android app.
• Google (Analytics & Tag Manager) — measures how the site is used: which pages are read, which buttons are pressed, and what breaks. For visitors in the United States it uses analytics cookies, so it can tell a return visit from a first one and see which pages were visited in what order. Everywhere else it is configured not to store anything in your browser: no analytics cookies, so it cannot recognise you on a return visit or link one visit to another. Either way it receives your approximate location, device and browser, and never your footage, your email address, or anything you upload. On the website it also sees which dashboard pages you visit and the text of errors you hit, never your content. Google keeps this data for no longer than 14 months. You can block it with your browser's settings or with Google's opt-out browser add-on.
• Microsoft Clarity — shows us how visitors use our public pages (the home page, pricing, guides, sign-up and sign-in), so we can see what confuses people: it records clicks, taps, scrolling and mouse movement on those pages and lets us replay them, and makes heatmaps. Anything typed into a form is hidden from it, and it does not run in your dashboard or in our iPhone or Android app. It runs only for visitors in the United States, where it uses two cookies to link the pages of one visit, and to tell a return visit from a first one. Anywhere else it does not load at all. It receives your approximate location, device and browser. Microsoft keeps recordings for 30 days (9 months for any we mark to keep), and the rest, such as heatmaps and click counts, for 9 months. Microsoft handles what Clarity collects as its own business, not only for us, under its privacy statement at privacy.microsoft.com.
• Modal — the computers that make your videos. Your footage passes through it while a video is being made; none of it is kept there afterwards. Modal keeps its own logs of what ran, which can include file names, your business's name and the text of our alerts.
• Resend — transactional and support email delivery.
• Our email inbox provider — receives the emails you send us and our system alerts, which can mention your business name or email address.
• Slack — operational alerts about the health of the Service, so we find out when something fails instead of waiting for you to tell us. These messages carry identifiers for accounts, videos and jobs, along with error text, and can include a business's name, a file name, the address an email to you was sent to, or a line describing a clip; they never carry your media.
• ImageKit and Google Cloud Storage — serve some of the images and videos on our public pages, so, like any site a page loads from, they see your IP address and browser. The voice samples you can play in Settings come from ElevenLabs' public storage, which is also on Google Cloud.
• Your browser's push service (for example Apple, Google, Microsoft or Mozilla) — only if you turn notifications on, to deliver them. A notification says only that something happened to your videos (one is ready to review, couldn't be made or posted, needs your OK, or an account needs reconnecting) and is never marketing. It is encrypted on its way, so the push service cannot read it.
• Expo (Expo Push Service, which passes our notifications on to Apple or Google) — only if you turn notifications on in the Postango app. It receives your phone's notification address, the notification's title and text, and the page it opens, and unlike a browser's push service it can read them. They say only that something happened to your videos, as above, and are never marketing. Expo also delivers app updates, so the app contacts it when it starts.

When you publish, your content is sent to the social platforms you have connected, and is then governed by those platforms' own terms and privacy policies. If you connect YouTube, YouTube data is also handled under the Google Privacy Policy. You can revoke our access at myaccount.google.com/permissions or by disconnecting in Settings › Accounts (the same in the app).

Other people in your footage

Your clips and photos may show other people — staff, customers, passers-by. You decide what you film and upload; we only do what you ask us to do with it. Getting whatever permission those people need is your responsibility, not ours.

Faces in your footage

To frame a shot, Postango finds where faces are in the picture. When a Podcast shows both people half and half, our own servers find where each face is in each recording, and how big it is, so each half is centred on its person. In a photo post, our servers look for faces so a crop keeps them. When a video is cropped to a new aspect ratio, Google (Gemini, above) tells us where the face of the person talking is in each cut.

We never use a face to identify or recognise anyone, we never compare faces between videos, and we keep no record of anyone's face. What our servers find is held in memory for that one job and is gone when the job ends; it is never saved. What we keep, with the records of your videos, is the point each cut is centred on, which can be on someone's face: a position in the picture, not a measurement of the face.

Where your information is processed

We operate from the United States, and your information is stored and processed there: our database is in Amazon's Ohio data centres, through Supabase, and our other providers store and process it mainly in the United States. Some of them may process it in other countries as part of providing their service. If you live outside the United States, your information leaves your country, and the law of the United States applies to it there, including the access its courts and government can have to it. When you publish, your content goes to the social platforms you connected, wherever they operate — that is a transfer you initiate, and the platform's own terms govern it from that point.

If you are in Japan: the United States has no national privacy law like Japan's. Personal information there is protected by the Federal Trade Commission Act, which holds a company to what it promises, and by the laws of some states. Each provider above may use your information only to provide its service to us, except as said beside PostPeer. By using Postango you agree to your information going to them in the United States as this policy describes.

If you are in South Korea: the providers above receive what is listed with each of them, in the United States, sent over an encrypted connection when you use the part of Postango that needs it. They use it only to provide their service to us (PostPeer under its own terms, as said above) and keep it as stated above; each one's privacy contact is on its own website. You can refuse by withdrawing your OK to AI or by deleting your account; either way, Postango can then no longer make your videos.

How long we keep things

Specific, because “a limited period” is not an answer:

• Your raw footage and photos — 14 days. After that they are deleted from our storage automatically; you do not have to ask. We keep them longer only while a video made from them is still being made or is waiting for your review, because Regenerate cuts the video again from the originals; a video that waits too long for your review is deleted with them (below). A clip you post as it is, or a photo in a photo post, is kept as long as the finished video it became.
• Finished videos — 90 days after that video's last post, so you have time to download anything you want to keep. A video waiting for your review is deleted 90 days after it was ready, with the footage it was cut from, and one you approved that never posted is deleted 180 days after you approved it. Before either of those is deleted, we tell you 3 days ahead, by email (unless you turned that email off) and by notification if you turned notifications on. While a post is scheduled for a video, it is kept, and its 90 days count from its last post. A video that could not be made is deleted 14 days after it failed. An earlier version replaced by Regenerate is deleted once the new version is approved or rejected, or 90 days after it was replaced while the new one waits for your review.
• Rejected videos — usually within minutes, at most a day. Say no to a video and we delete it: the video, its thumbnail, and the footage it was cut from, unless another of your videos still uses that footage. Not archived, not held for 30 days. We keep the instructions our editor wrote to make it, as text (below).
• Your IP address — with your sign-in, and briefly in logs. When you sign in, Supabase, which runs our sign-ins and database, saves your IP address and your browser's description of itself with that sign-in, and keeps them until you sign out or delete your account. Our host, Vercel, and our file storage, Cloudflare R2, see it whenever your browser reaches them, and may keep it in their logs for a short time; Supabase keeps its logs 7 days. To stop one person opening many trial accounts, and to limit error reports from people who are not signed in, we also turn it into a code that cannot be read as an address without a secret key only our servers hold, and delete those codes after 30 days (3 for error reports). When you sign up we also keep the country your IP address is in, not the address, with your account; it goes when you delete your account.
• Editing instructions — while your account exists. The text our editor writes to cut each video it makes from your clips, with whether you kept, regenerated or rejected the video. It is never the footage itself, but it can describe what the footage shows. We keep it to learn what makes a good edit, and it is deleted with your account.
• What was said in your clips — no longer than the footage. When the words in a clip or a Podcast recording are written down, we keep them, with when each was said, so the edit can cut between sentences and caption the video with them. They are deleted when the footage they came from is, if not before. The captions made from them are kept with the records of your videos (below).
• Website visit log — 90 days. When you open a page of our public website, our server writes down the page, the time, your IP address and the town and country it is in, your browser's description of itself and the page that linked you there, to run and protect the site. We keep it 90 days in our own storage and share it with no one. It does not include your dashboard, and nothing is written down in our iPhone or Android app. When you first set up your account on the website, we also note which setup step you reached, and in the Studio which steps you took (opening it, choosing files, an upload starting, being turned away or failing, and pressing Make video), never the files themselves, to improve sign-up and the Studio; that is kept 90 days too, and goes when you delete your account.
• Our working logs — 30 days. What our video editor sent to the AI, which can include your notes, names and what was said in a clip, and what came back. We keep them to find and fix problems. That includes copies we download to investigate a problem.
• Help-assistant questions — 90 days. What you asked, and the page you asked from.
• Error reports from your browser — 30 days. What broke, with your browser's description of itself and your account's ID.
• Notifications — 30 days. If you turned notifications on, each one we send (what it said, and whether it reached a device), so we can tell when they stop arriving.
• Usage records — 12 months, then monthly totals. What each AI and video-making step cost for your videos; after 12 whole months they become one total per month, kept until your account is deleted.
• Records of your videos and posts — titles, captions, voiceover scripts, the notes you add to an upload, the AI's description of each cut, and the names of the files you uploaded — for as long as your account exists, after the files themselves are gone.
• Your logo and the music you upload — for as long as your account exists.
• Your intro clip — the file you upload and the copy we prepare from it, for as long as it is your intro. If you replace or remove it, or it can't be used, we delete it 1 day later. We wait longer only while a video still being made uses it, or a video that failed with it can still be tried again. Videos already finished with it keep the intro in them, and are kept as above.
• An AI-made intro — the video Google makes from your logo, the copy we prepare from it, its small preview and its last frame, kept as your intro clip is. If you tell us your business name is spelled wrong in it, we delete it the same way, 1 day after you tell us. The one you can make on the free trial can be used in your videos only once you subscribe; if you haven't subscribed 30 days after it was made, we delete it the same way, 1 day later.
• Account details — for as long as your account is open.
• A code made from your email address — kept after your account is deleted. Each email address gets one free trial. To hold to that, once you confirm your address we keep a code made from it, with the date. It is made with a secret key that never leaves our database, it cannot be turned back into your address, and it is not linked to your account or to anything else about you. We keep it after you delete your account so that the free trial, and its free AI-made intro, cannot be started again with the same address, including the same Gmail address written with dots or a +tag. We use it for nothing else.

When you delete your account we remove your account data and the files we hold, and disconnect the services you linked. Most of it goes at once and the rest within 30 days; anything that cannot be done at that moment is queued and retried until it is — it is not abandoned. A few things are kept: the code made from your email address (above); the voiceovers ElevenLabs made for your videos, with no end date, because we keep no record of which voiceovers were yours and so cannot delete them; the emails you sent us; and operational messages and logs that mention your account (our alert channel and alert email, and the logs our hosting, video-processing and email providers keep), which are deleted on those services' own schedules. Our Delete your account page lists what goes when, and what we keep.

Your choices and rights

• Access and update — you can view and edit your brand, business, and account details in Settings.
• Delete your account — you can permanently delete your account and its data, on the website from Settings › Security, and in the app from Settings › Delete account. This removes your stored data and media and ends a subscription bought on the website at once. A plan bought in the app is billed by Apple or Google, so cancel it in your phone's subscription settings too. See our Terms for details.
• Disconnect platforms — you can unlink any connected social account at any time.
• Withdraw your OK to AI — you can stop your content going to the AI services above at any time, in Settings › AI on the website, or Settings › AI sharing in the app.

Wherever you live, you can also ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Email support@postango.ai and we will answer within 15 days.

Where the information is in content another Postango customer uploaded — you appear in a business's footage, for example — that business decides what happens to it. Ask them, or tell us and we will pass the request on.

US state privacy rights

We do not sell your personal information or share it for cross-context behavioral advertising, and we have not done so in the past 12 months. Depending on your state, you may ask us what personal information we collect, use and disclose, and ask us to correct or delete it, by emailing support@postango.ai. An authorized agent may ask on your behalf. We will not treat you differently for asking. The categories of information we collect, their sources and our purposes are those described above. If your state gives you further rights, tell us what you want and we will honour it.

Security

We use reasonable technical and organizational measures to protect your information, including encrypted transport and access-controlled storage. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

The Service is intended for business owners and is not directed to anyone under 18. We do not knowingly collect information from children.

Changes to this policy

We may update this policy. We will revise the "last updated" date above, and for a material change — a new purpose, a new category of data, or a change that lets more people or companies see it — we will email the address on your account at least 30 days before it takes effect, the same notice our Terms promise.

Contact us

Questions about this policy or your data? Email us at support@postango.ai or use our Contact page. The person responsible for your personal information at Postango is Daniel Flint, at the same address.

Postango LLC61405 North Ridge TrailWashington, MI 48094United States