Privacy Policy

We process only the data necessary to operate the Service:

• Telegram user ID, username, display name, and language setting.
• Identifiers of channels or groups that the user explicitly connects to the Service.
• Content uploaded or scheduled for publication by the user.
• Technical information and interaction data, such as error logs, performance metrics, feature usage statistics, button interactions, usage limits, and security events, which may be linked to a user ID in order to operate and improve the Service.
• Subscription and payment records.

The Service does not have access to IP addresses or other network identifiers.

We do not use cookies or third-party advertising trackers. If third-party infrastructure or monitoring tools (e.g. hosting or error reporting services) process limited technical data, this is done only to provide and secure the Service.

Data is processed under the following legal bases:

• Performance of a contract (providing the Service to the user).
• Legitimate interests (ensuring security, preventing abuse, improving functionality).
• Compliance with legal obligations (accounting, regulatory requirements, law enforcement requests).

Data is used to:

• Provide and operate the Service.
• Manage subscriptions and payments.
• Maintain security and prevent misuse.
• Provide user support.
• Comply with applicable laws and legal requests.

Data may be processed by third parties directly involved in providing the Service, such as infrastructure, analytics, or payment providers, and only to the extent required for functionality, security, or improvement of the Service.

We do not sell or share personal data with third parties for advertising purposes.

We may disclose data if required by law, valid legal process, or requests from law enforcement authorities.

• Data is retained only as long as necessary to operate the Service, fulfill legal obligations, or maintain security.
• Technical logs and interaction data are retained only for a limited period necessary for security and troubleshooting, after which they are deleted or anonymized.
• When a user requests deletion, we erase the personal data stored by Posto, except where retention is required by law (for example, payment records).
• Certain minimal records (such as user IDs or channel IDs) may be retained to prevent fraud, misuse, or repeated abuse of Service features, and are not used for normal Service operations.

Users may exercise the following rights by contacting @posto_support_bot:

• Access to personal data.
• Deletion of personal data stored by Posto.
• Correction of inaccurate data.
• Request export of personal data the user has provided to Posto, where technically feasible.

Requests will be addressed within 30 days in accordance with applicable law.

Limitations:

• Data published to Telegram is outside Posto's control and cannot be deleted through the Service after publication.
• Deletion requests apply only to a user's personal data, unless the requester is the project or channel owner. If the project or channel owner requests deletion, all data associated with that project or channel within Posto (such as scheduled posts, templates, and settings) will be erased.
• Data that forms part of shared projects will remain accessible to the project owner, even if an individual editor requests deletion.
• For security, legal compliance, and abuse-prevention, certain minimal identifiers (such as numeric user or channel IDs) may be retained after deletion.
• Channel or group information (such as names or identifiers) may continue to be stored independently of individual users, since they are not personal data and may be managed by multiple administrators.
• Deletion is not immediate: data is marked for removal and permanently erased within 30 days as part of our regular database cleanup cycle. Backups may retain limited data for a short period until they expire, after which the information is permanently removed.

We apply access controls, encryption where appropriate, and internal policies to protect data. No online service can guarantee absolute security, but we take reasonable measures to reduce risks.

• Your data may be processed and stored on servers located outside your country of residence.
• For users in the European Economic Area (EEA), we rely on safeguards such as Standard Contractual Clauses to ensure an adequate level of protection.
• The Service does not maintain data centers or provide data localization in every jurisdiction. In particular, we do not commit to storing data within countries that require mandatory localization laws (such as Russia, Turkey, China, or others).
• By using the Service, you acknowledge and consent to your data being processed and stored abroad, subject to the applicable safeguards.

The Service is not directed to children under 18, and may not be used by persons under 13.

We do not knowingly collect personal data from children. If we become aware that we have, we will delete it.

This Policy may be updated. The latest version will be available within the Service. Continued use of the Service after updates constitutes acceptance of changes.

Posto acts as the data controller for processing described in this Policy.

For privacy-related inquiries or requests, contact @posto_support_bot.