Privacy Policy
Last updated: March 22, 2026
PostyPop ("we," "us," or "our") operates the postypop.app website and the PostyPop Chrome extension. This Privacy Policy explains how we collect, use, and protect your information.
Information We Collect
Account Information
When you create an account, we collect your name, email address, and a hashed version of your password. We never store your password in plain text.
Content You Provide
When you use PostyPop, you paste or submit content (text, URLs) for AI processing. We temporarily process this content to generate your social media posts. Your input content and generated outputs are stored in your generation history so you can access them later.
Usage Data
We track basic usage metrics: number of AI generations per month (for plan limits), platforms selected, and feature usage. This helps us improve the product and enforce plan limits.
Payment Information
Payments are processed by Lemon Squeezy. We do not store your credit card number, billing address, or other payment details on our servers. Lemon Squeezy handles all payment processing. See their privacy policy at lemonsqueezy.com/privacy.
Cookies and Local Storage
We use JSON Web Tokens (JWT) stored in your browser's local storage for authentication. We do not use tracking cookies or third-party analytics cookies. The Chrome extension stores your authentication token and preferences (theme, layout, font size) in Chrome's local storage.
How We Use Your Information
- To provide the service: Your content is sent to AI providers to generate social media posts.
- To maintain your account: Email for login, password reset, and account communications.
- To enforce plan limits: Usage tracking ensures free plan limits are respected.
- To improve the product: Aggregated, anonymized usage patterns help us improve PostyPop.
AI Processing and Third-Party Providers
Your content is processed by third-party AI providers to generate social media posts. These providers may include:
- Groq (groq.com) — primary AI provider for all tiers
- OpenAI (openai.com) — emergency fallback provider
Your content is sent to these providers solely for the purpose of generating social media posts. We do not use your content to train AI models. Each provider has their own data handling policies — we encourage you to review them.
Important: Do not submit sensitive personal information, confidential business data, or proprietary content through PostyPop. The service is designed for content you intend to publish publicly on social media.
Data Retention
- Account data: Retained until you delete your account.
- Generation history: Stored for as long as your account is active. You can request deletion at any time.
- Usage metrics: Retained for billing and analytics purposes.
Data Security
We protect your data with:
- HTTPS encryption for all data in transit
- Bcrypt password hashing
- JWT-based authentication with token expiration
- Database access controls and secure hosting
Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and associated data
- Export your generation history
To exercise any of these rights, contact us at support@postypop.app.
Children's Privacy
PostyPop is not intended for users under 13 years of age. We do not knowingly collect information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. We'll notify you of significant changes via email or a notice on the website. Your continued use of PostyPop after changes constitutes acceptance of the updated policy.
Contact
Questions about this Privacy Policy? Contact us at support@postypop.app.