Privacy Policy
Last updated 10 September 2026
This policy explains what information PostPlanIt collects, why, and what you can do about it. It covers the actual data this app handles, not boilerplate - if something here doesn't match what you'd expect, please let us know.
Information we collect
Account information. Signing in uses Google OAuth. We receive your name, email address, and a Google account identifier - we never see or store your Google password.
Connected social accounts. When you connect Instagram, Facebook, X, LinkedIn, Bluesky, Threads, Pinterest, YouTube, TikTok, or Mastodon, we store the access token (and, for platforms that use one, a refresh token) each platform issues, along with your username and account ID on that platform. This is what lets PostPlanIt publish posts on your behalf - we request only the permissions needed for scheduling and, where available, basic engagement analytics.
Content you create. Captions, attached images/videos, and scheduling details for every draft and scheduled post. Media is stored using Cloudflare R2; everything else lives in our database.
Team & workspace data. If you invite teammates, we store their role, any comments left on drafts, and an activity log of workspace changes (who scheduled, approved, or rejected what).
Billing information. Payments are processed by Dodo Payments. We store your subscription plan and status, plus identifiers Dodo gives us to manage your subscription - we never receive or store your card details ourselves.
Cookies. A single session cookie keeps you signed in. It's required for the app to function and isn't used for tracking or advertising.
How we use this information
- To authenticate you and keep your account secure.
- To publish, on your instruction, the posts you schedule to the platforms you've connected.
- To show you your own content, schedule, and (where a platform supports it) engagement stats.
- To process Pro subscription payments and keep your billing status accurate.
- To send you notifications you've opted into (e.g. a post failed to publish) - you can turn most of these off from Settings.
What we don't do
We don't sell your data. We don't use your content or connected-account data for advertising. We don't share your information with third parties except the specific services required to run PostPlanIt itself: the social platforms you explicitly connect, Cloudflare (media storage), and Dodo Payments (billing) - each governed by their own privacy policy for the data that passes through them.
Your data, your control
From Settings, at any time and without contacting support, you can:
- Export your data - a full copy of your drafts, connected accounts (excluding access tokens), and publish history.
- Disconnect any social account, which removes its stored token immediately.
- Delete your account - permanently removes your drafts and their media, connected accounts, publish history, and profile. This can't be undone.
Data retention
We keep your data for as long as your account is active. If you delete your account, the data covered above is deleted immediately rather than retained - see Settings for the exact scope of what's removed.
Changes to this policy
If this policy changes in a way that meaningfully affects how your data is handled, we'll update the date above and, where appropriate, let you know directly.
Contact
Questions about this policy or your data can be sent through our feedback board.