Privacy policy

1. Introduction

Welcome to My Post Factory (“we”, “us”). This policy explains how we collect, use, store and share data when you use our social content creation, scheduling and publishing service.

By using our services, you acknowledge the practices described below.

2. Data we collect

• Account information: display name, full name, email address, language and time zone.
• Authentication information: hashed password for local accounts, Google identifiers when using Google OpenID Connect, sessions and related security information.
• Social connections: profile, page or account identifiers, granted permissions, access tokens and refresh tokens required for publishing.
• Content and settings: briefs, tones, structures, imported or generated media, selected products, automations, posts, schedules and publishing history.
• Billing information: Stripe identifiers, plan, credit balance, credit operations and the minimum metadata required to track payments.
• Technical data: security logs, sanitized errors, IP address when necessary for security, browser type and session information.

3. How we use data

• Create and secure your account, manage sessions and prevent unauthorized access.
• Generate, prepare, review, schedule and publish requested content.
• Connect the social networks and stores you choose to use.
• Process payments, subscriptions, credits, accepted refunds and associated records.
• Send service, security, generation, publishing and billing notifications.
• Diagnose errors, prevent abuse and improve service reliability and experience.

4. Legal basis and user choice

We process data as necessary to provide the requested service, comply with legal obligations and legitimately protect the service. Where consent is required, you may withdraw it for the future.

Optional features such as web research, social connections or store integrations are used only when you enable or configure them.

5. Storage and security

Passwords are hashed and cannot be recovered. Session secrets and one-time tokens are stored as hashes where their operation allows it. Provider tokens that must be reused are protected with authenticated encryption.

We apply access controls, encryption in transit, sanitized security logs, rate limits and backup and recovery procedures appropriate to the service.

6. Sharing and processors

We do not sell or rent personal data. We only transmit information required by providers involved in delivering the service.

• Selected social networks, to authenticate accounts and publish requested content.
• AI and research providers, to generate requested content according to enabled features.
• Stripe, to process purchases, subscriptions and billing operations.
• Hosting, email and notification providers required to operate the service.
• Competent authorities when disclosure is required by law.

7. Your rights

To exercise these rights, email contact@mypostfactory.com. We may request reasonable identity verification before responding.

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion where the legal conditions are met.
• Request restriction or object to certain processing.
• Receive eligible data in a portable format.
• Withdraw consent without affecting processing already carried out lawfully.

8. Revocation and deletion

You can disconnect a social connection, store or connected application from your account or the relevant provider settings. Revocation prevents new operations that require that connection.

You can also request deletion of your account and associated data. Some information may be retained only as long as required for legal compliance, security or dispute resolution.

9. Retention

Data is retained for as long as necessary to provide the service and according to retention policies shown in the product. Sessions, temporary tokens, media, technical logs and billing records may have different retention periods.

After account closure, data is deleted or anonymized within applicable time frames, subject to legal obligations and temporary backups.

10. Changes

This policy may change to reflect updates to the service, providers or applicable law. The last-updated date appears at the top of the page. Material changes will be communicated through an appropriate channel.

11. Contact

• Email: contact@mypostfactory.com
• Address: 67 Allée Claude Monet, 83130 La Garde, France