Privacy Policy

Poztify ("we", "us", or "our") operates https://poztify.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Poztify, you agree to the collection and use of information in accordance with this policy.

2.1 Information you provide directly

• Name and email address (when you sign up)
• Profile information from Google or Facebook when you connect those accounts
• Content you create: post captions, titles, descriptions, tags, and media files
• Payment information (processed securely by Stripe — we never store card details)

2.2 Information collected automatically

• Log data: IP address, browser type, pages visited, time spent
• Cookies and similar tracking technologies for session management
• Usage data: features used, posts created, platforms connected

2.3 Information from third parties

• Google / YouTube: When you connect your YouTube account, we receive an OAuth access token and basic channel information (channel ID, name, thumbnail). We use this solely to publish content on your behalf.
• Facebook / Instagram: When you connect Facebook or Instagram, we receive an OAuth token and page/account information. We use this solely to publish content on your behalf.
• Stripe: We receive subscription status and billing events from Stripe to manage your plan.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Publish content to your connected social media accounts on your behalf
• Process payments and manage your subscription
• Send transactional emails (post published, payment receipts, account alerts)
• Improve and personalise the Service
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your content or social media data for advertising purposes.

Poztify uses YouTube API Services to publish videos on your behalf. By connecting your YouTube account, you also agree to:

• YouTube Terms of Service
• Google Privacy Policy

You can revoke Poztify's access to your Google account at any time via the Google Security Settings page.

We only request the minimum YouTube permissions necessary: youtube.upload and youtube.readonly. We do not access your YouTube analytics, comments, or private data beyond what is needed to publish content you explicitly schedule.

When you connect Facebook or Instagram, we access your Pages and Instagram Business accounts to publish content on your behalf. We comply with the Facebook Platform Terms and Meta Privacy Policy.

You can revoke access at any time via Facebook Settings → Apps and Websites.

• Posts and media: Retained while your account is active. Deleted within 30 days of account deletion.
• OAuth tokens: Stored encrypted in our database. Deleted when you disconnect an account or delete your account.
• Media files: Stored on Cloudinary. Deleted after successful publishing or on account deletion.
• Billing records: Retained for 7 years for tax and legal compliance (Stripe manages payment data).

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit
• OAuth tokens stored encrypted at rest
• No storage of payment card data (handled by Stripe, a PCI-DSS certified processor)
• Access controls limiting who can access user data internally

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain processing of your data

To exercise any of these rights, email us at privacy@poztify.com. We will respond within 30 days.

We use cookies for:

• Authentication: Session cookies to keep you logged in (NextAuth.js)
• Preferences: Remembering your settings

We do not use third-party advertising cookies. You can control cookies through your browser settings.

We use the following third-party services, each with their own privacy policies:

• MongoDB Atlas — database hosting
• Cloudinary — media file storage and delivery
• Stripe — payment processing
• Resend — transactional email delivery
• Render — application hosting

The Service is not directed to individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email and by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

• Email: privacy@poztify.com
• Website: https://poztify.com