Privacy Policy

• Account information. When you create an account, we collect your email address and a password (stored in hashed form). If you sign in with Google, we receive your name, email address, profile image, and Google account identifier.
• Content and prompts. The topics, prompts, text, captions, and images you create, upload, or generate using the Service.
• Communications. Information you provide when you contact support or otherwise communicate with us, and the contents of those messages.
• Payment information. If you purchase a paid plan, our third-party payment processor collects your billing details. We do not store full payment card numbers.

When you connect a TikTok account, you authorize us, through TikTok's official API, to access and store certain information from that account so we can provide the Service. This includes:

• Profile information: profile image, display name, username, and TikTok user identifiers (such as open_id and union_id).
• Access and refresh tokens, which we use to perform the actions you request (such as publishing or scheduling posts).
• Content you create, schedule, or publish through the Service, including carousels, videos, and captions.
• Basic account and engagement data returned by TikTok's API.

We request only the TikTok permissions (scopes) needed to operate the Service — for example, reading your basic profile information and publishing content to your account. We do not request access we do not need.

• Log data. Our servers and service providers automatically record information such as your IP address, browser and device type, and pages or features you use, along with timestamps.
• Cookies and local storage. We use cookies and browser local storage primarily to keep you signed in and to operate the Service. You can control cookies through your browser settings, though some features may not work without them.

• To provide and operate the Service — generating content, rendering slides, and scheduling and publishing posts to your connected accounts at your direction.
• To generate content using AI providers (such as Anthropic's Claude API) based on the prompts and topics you submit.
• To authenticate you, secure your account, and prevent fraud and abuse.
• To send you transactional emails (such as email verification and password resets) through our email provider.
• To improve the Service, analyze usage, and develop new features.
• To comply with legal obligations and enforce our Terms.

We do not sell your personal information. We do not use your content or personal data to train generalized AI or machine-learning models. Prompts and content sent to our AI providers are processed under their API terms and are not used by them to train their models.

We share information only in the following circumstances:

• Service providers. Vendors who help us operate the Service, including Google Firebase (authentication and database), Vercel (hosting and image storage), Anthropic (AI content generation), and Resend (transactional email). They may process your information only to provide services to us.
• Connected platforms. TikTok and any other platform you connect, in order to publish and manage content as you direct.
• Legal and safety. When required by law, regulation, legal process, or to protect the rights, property, or safety of PostCrows, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.

Our access to and use of information received from the TikTok API adheres to the TikTok Developer Terms of Service and applicable TikTok policies, including any limited-use requirements.

• We use TikTok data solely to display your connected account and to create, schedule, and publish content to your TikTok account at your direction.
• Access and refresh tokens are stored securely and used only to perform actions you initiate.
• You can revoke PostCrows' access at any time from TikTok: Settings → Security & permissions → Manage app permissions. You may also disconnect the account directly within PostCrows.
• When you disconnect a TikTok account or delete your PostCrows account, we delete the associated TikTok tokens and profile data. You may also request deletion at any time by emailing hello@postcrows.com.

We retain personal information for as long as needed to provide the Service and for legitimate business or legal purposes. When information is no longer needed, we delete or anonymize it. You may request deletion of your data as described in Section 8.

Depending on where you live (for example, under the EU/UK GDPR or the California CCPA/CPRA), you may have rights to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain processing. To exercise any of these rights, or to request deletion of your account and data, email us at hello@postcrows.com. You can unsubscribe from marketing emails at any time; transactional emails necessary to provide the Service may still be sent.

We use reasonable administrative and technical safeguards — such as encryption in transit and access controls — to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

PostCrows is based in the United States. Your information may be processed and stored in the United States and other countries that may have data protection laws different from those in your jurisdiction.

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can delete it.

The Service may link to or integrate with third-party websites and services that have their own privacy practices. We are not responsible for those practices; please review their policies before providing them with information.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

If you have questions about this Privacy Policy or our data practices, contact us at hello@postcrows.com. PostCrows is operated by AlgoPort Inc., Toronto, Ontario, Canada.