Privacy Policy

Postomation (postomation.com) is operated by Marc Tyson Clebert, an individual based in the United States. For any privacy questions or requests, contact privacy@postomation.com.

We collect the minimum information needed to operate the service:

• Your name, email address, and profile picture from Google, when you sign in
• OAuth access tokens and account identifiers for the social media platforms you connect (e.g. Twitter/X, Instagram, Facebook, TikTok, YouTube, Threads)
• The content (text, images, videos, links) you submit to be posted through the service
• Basic technical logs (timestamps, error messages, request metadata) needed to operate and debug the service

We do not currently run third-party analytics or advertising trackers on this site.

We use the information we collect to:

• Authenticate you and maintain your account
• Publish content to the social media accounts you explicitly connect and request
• Display your post history and connected-account status within your dashboard
• Deliver webhook notifications you've configured for your own posts
• Diagnose and fix technical problems

We do not sell your information, and we do not use the content you submit for posting to train any AI/ML model.

Postomation is an early-stage product. All traffic to and from the site is encrypted in transit via HTTPS/TLS. Access to the underlying database is restricted to the application and requires authentication. We do not hold any third-party security certification (such as SOC 2) at this time — if that changes, this policy will be updated to reflect it. Because the product is still early, we recommend only connecting social accounts you're comfortable testing with, and revoking access for any account you no longer want connected (see "How to Disconnect a Platform or Delete Your Data" below).

Postomation integrates with TikTok, Instagram, Facebook, Twitter/X, YouTube, and Threads so you can publish content to accounts you connect. We only request the OAuth permissions/scopes necessary to publish content and read basic account information — never your platform password. Your use of each connected platform remains subject to that platform's own privacy policy and terms of service.

• Google / YouTube: Postomation's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements (see developers.google.com/terms/api-services-user-data-policy). You can review or revoke Postomation's access at any time at myaccount.google.com/permissions.
• TikTok: content and account information obtained via the TikTok API is used solely to publish the posts you create and is handled in accordance with TikTok's Developer Terms of Service.
• Meta (Facebook, Instagram, Threads): data obtained via the Meta Graph API is used solely to publish the posts you create and is handled in accordance with Meta's Platform Terms and Developer Policies.

We retain your account information and connected-platform tokens for as long as your account is active. Post content you submit is retained so you can view your post history in the dashboard. You can request deletion of your data at any time — see the section below.

You can revoke Postomation's access to any connected platform at any time directly from that platform's own security/apps settings (for example, Google: myaccount.google.com/permissions) — this immediately invalidates the token Postomation holds for that account, independent of anything on our end.

• To delete your entire Postomation account and all associated data (profile, connected-account tokens, and post history), email privacy@postomation.com from the address associated with your account with the subject "Delete my data."
• We will confirm the request and complete deletion within 30 days.
• Full step-by-step instructions are also available at postomation.com/data-deletion.

Depending on where you live, privacy laws such as the GDPR and CCPA may give you the right to:

• Access the personal information we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict certain processing

Contact privacy@postomation.com to exercise these rights.

Postomation is not directed at children under 13 (or the minimum age required by your platform accounts, if higher), and we do not knowingly collect information from them. If you believe a child has provided us information, contact privacy@postomation.com and we will delete it.

As Postomation adds features (such as additional platform integrations, analytics, or billing), this policy will be updated to reflect what the service actually does, and the "Last updated" date above will change accordingly. Material changes will be noted on this page.

Questions about this policy or your data: privacy@postomation.com.