PostFlow Privacy Policy

Information We Collect

• Telegram account information needed to identify the user in PostFlow, such as Telegram user ID, chat ID, username, and profile details provided by Telegram.
• Project and content information users provide, including business context, prompts, captions, uploaded media, drafts, schedules, and publishing history.
• Connected social account information, such as Facebook Page IDs, Instagram professional account IDs, account names, usernames, access tokens, granted scopes, post IDs, comment IDs, and provider responses.
• Comments and replies from connected Facebook or Instagram accounts when users enable comment handling.
• Payment and entitlement records needed to provide paid or complimentary access, including Telegram payment identifiers and subscription status.
• Technical information such as request logs, error logs, IP-derived request metadata, device/browser data, and security events needed to operate and protect the service.

How We Use Information

• To authenticate users through Telegram and provide access to PostFlow features.
• To generate, rewrite, schedule, and publish social media content selected by the user.
• To connect to Facebook and Instagram through official APIs.
• To fetch, classify, suggest replies for, and reply to comments when the user chooses to use comment management features.
• To process subscriptions, complimentary access, support requests, abuse prevention, debugging, security, and service improvements.

Third-Party Services

PostFlow uses third-party services only as needed to provide the product. These may include Telegram, Meta/Facebook/Instagram, OpenAI, hosting providers, database providers, and payment-related services. Future providers such as TikTok will apply only after they are configured and connected through official authorization. Information sent to those services is subject to their own terms and privacy policies.

Social Platform Data

When a user connects a Facebook Page or Instagram professional account, PostFlow requests only the permissions needed for publishing, account selection, comment handling, and related features. PostFlow does not sell social account data. Users can revoke PostFlow access at any time from the relevant platform settings or by disconnecting the account in PostFlow.

Data Storage and Security

We use reasonable technical and organizational safeguards to protect user data. Access tokens and sensitive integration data are protected in storage. No internet service can guarantee perfect security, but we work to limit access to data and keep the service protected.

Data Retention

We keep information for as long as needed to provide PostFlow, maintain account history, comply with legal obligations, resolve disputes, and protect the service. Users may request deletion of their account data by contacting us.

User Choices

• Users can disconnect social accounts to stop future publishing and comment access.
• Users can revoke platform permissions directly in Facebook, Instagram, or another connected provider.
• Users can request access, correction, or deletion of their PostFlow data.

Children

PostFlow is not intended for children under 13 years old, and we do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this policy when PostFlow changes or when legal, security, or operational requirements change. The updated version will be posted on this page with a new last updated date.

Contact

For privacy requests or questions, contact the PostFlow operator through the official PostFlow Telegram bot or support channel used to access the service.