Privacy Policy

Information we collect

We collect account information you provide, such as your name, email address, authentication details, workspace membership, settings, and support messages.

We also store the work you choose to put in Postlyra. This can include research sources, ideas, hooks, scripts, content profiles, drafts, schedules, media, automation settings, and performance records.

The application records limited technical and security information needed to operate accounts and sessions, investigate errors, and protect the service.

How we use information

We use information to provide and secure Postlyra, keep workspace context connected, run the features you choose, respond to support requests, and maintain the service.

When you use an AI-assisted feature, the content needed for that request may be sent to the AI provider configured for that feature. Postlyra also keeps usage records needed to operate and account for those requests.

Connected social accounts

When you connect a supported social account, Postlyra stores the platform account identifier, account name or handle, granted permissions, connection status, and encrypted credentials needed to keep the connection working.

Depending on the product and permissions you choose, Postlyra may receive or create platform content, publishing results, performance metrics, comments, direct messages, story replies, contact identifiers, tags, and webhook event records. Engage uses this information to show conversation history and run only the automations you activate.

You can disconnect an account in Postlyra. You can also manage Postlyra’s access from the connected platform. Platform copies of posts, messages, or other activity remain subject to that platform’s controls and policies.

Storage and service providers

Postlyra uses service providers to run its application and database, store uploaded media, deliver email, process payments when applicable, provide requested AI features, and connect to social-platform APIs. Those providers process only the information needed for their role and operate under their own terms and privacy commitments.

The exact infrastructure can change as the service develops. Contact us if you need the current list of provider categories used for your account before connecting a service.

Retention

We keep account and workspace information while your account is active and as needed to provide the features you use.

An in-product account deletion request starts a 30-day grace period. The current scheduled cleanup deletes the core account and workspace database relationships covered by that command; it is not, by itself, a complete privacy-erasure process for every operational event or stored media object.

A verified privacy request may require separate handling to identify and delete or de-identify account and connected-social data in Postlyra’s control as applicable. Limited information may be retained when required for security, legal, billing, or dispute purposes. Data held by third parties follows their retention rules.

Security

Postlyra uses access controls between workspaces, encrypted storage for connected-account credentials, signed webhook verification, and authentication controls designed to protect account data. No online service can guarantee absolute security.

Report a suspected security issue to [email protected]. Do not include passwords or access tokens in email.

Your choices and rights

You may ask to access, correct, or delete information associated with your account by emailing [email protected]. Rights vary by location, and we may need to verify your identity before acting on a request.

You can change workspace information in the product, disconnect supported social accounts, and withdraw platform permissions through the relevant platform. Withdrawing access does not undo activity already completed at your direction.

Children

Postlyra is built for creators, founders, and social media teams, not for children. If you believe a child provided personal information to Postlyra, contact [email protected] so we can review and remove it where appropriate.

Changes to this policy

We may update this policy as Postlyra and its providers change. The date at the top identifies the current published version. Material changes will be communicated through an appropriate service or account notice when required.

Contact

Questions and privacy requests can be sent to [email protected]. Include the account email so we can locate the correct account, but do not send passwords or access tokens.