Privacy Policy

1. Who we are

PostMyIsh (“PostMyIsh,” “we,” “us”) provides a tool for composing, scheduling, and publishing content to social networks, available at postmyish.com. For questions about this policy or your data, contact us at hey@postmyish.com.

2. Information we collect

• Account information — your name, email address, and a securely hashed password (we never store your password in plain text). If you sign in with Google or Apple, we receive the basic profile information those services return.
• Content you create — the captions, media references, schedules, and drafts you compose in the app.
• Connected accounts — when you link a social network, we store the handle and the authorization needed to publish on your behalf. We connect through each platform’s official OAuth and never see your social passwords.
• Billing information — handled by our payments processor, Stripe. We store your plan and subscription status, not your full card details.
• Usage & device data — basic logs such as requests, timestamps, and errors that help us operate and secure the service.

3. How we use your information

• Provide, maintain, and improve the service.
• Publish and schedule the content you ask us to publish.
• Process payments and manage your subscription.
• Communicate with you about your account, security, and — if you opt in — product updates.
• Detect, prevent, and address abuse, fraud, and technical issues.

We do not sell your personal data.

4. How we share information

We share data only with service providers that help us run PostMyIsh, and only as needed to deliver the service:

• Vercel — application hosting and delivery.
• Turso — our managed database.
• Stripe — payment processing and subscription billing.
• Google & Apple — optional sign-in, if you choose to use it.
• Social networks — the platforms you connect, to publish the content you send them.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

5. Data retention

We keep your data for as long as your account is active. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it to meet legal, accounting, or security obligations. You can disconnect a social account at any time to revoke our access to it.

6. Security

We take practical steps to protect your data: passwords are hashed with a salted scrypt function, sessions live in httpOnly, secure cookies, API keys are stored only as SHA-256 hashes, and all traffic is served over HTTPS. No system is perfectly secure, but we work to keep the risk low and to fix issues quickly.

7. Your rights

Depending on where you live (for example under GDPR or CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, email hey@postmyish.com and we’ll respond within the timeframe the law requires.

8. International transfers

Our providers may process data in countries other than yours. Where personal data is transferred across borders, we rely on appropriate safeguards (such as standard contractual clauses) to protect it.

9. Children

PostMyIsh is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

10. Changes to this policy

We may update this policy as the product evolves. When we make material changes, we’ll update the date above and, where appropriate, let you know in the app or by email. Please check back periodically.

11. Contact

Questions about your privacy? Reach us any time at hey@postmyish.com.