This policy explains what PostClip ("we", "us", "our") collects, how we use it, and the choices you have.
1. What we collect
- Account info: email address and a hashed password when you register.
- Source material: URLs and audio/video you submit for processing.
- Generated content: clips, captions, blog drafts, and chapters produced for your account.
- Billing info: payment details are handled by Stripe; we store only a Stripe customer ID and subscription status. We never receive or store your card number.
- Usage analytics: aggregate page views and event counts via Umami, configured to use no cookies and no personal identifiers.
- Application logs: limited request and error logs for debugging and abuse prevention.
2. How we use it
- to provide and improve the Service;
- to communicate about your account (verification, password reset, billing);
- to enforce usage limits and prevent abuse;
- to comply with legal obligations.
We do not sell your personal data and we do not use your content to train machine-learning models.
3. Sub-processors
We share information only with the providers we use to operate the Service:
- Stripe — payment processing (stripe.com/privacy)
- Resend — transactional email (resend.com/legal)
- Fly.io — hosting and database (fly.io/legal)
- RepurposeAPI — clip and blog generation; operated by us, with equivalent data-handling commitments
- Umami — privacy-focused analytics, no third-party data sharing
4. Data retention
- Account info and history: kept until you delete your account.
- Source files: deleted shortly after processing completes.
- Generated kits: kept until you delete them.
- Application logs: retained for up to 30 days.
- Stripe billing records: retained according to Stripe's policy and applicable tax law.
5. Your rights (EU/EEA — GDPR)
If you are in the EU/EEA, you have the right to:
- access a copy of the personal data we hold about you;
- request correction of inaccurate data;
- request deletion of your account and personal data;
- receive your data in a portable format;
- restrict or object to certain processing;
- withdraw consent where processing is based on consent;
- lodge a complaint with your local data protection authority (in Sweden: Integritetsskyddsmyndigheten / IMY).
To exercise any of these rights, email [email protected].
6. International transfers
Some sub-processors are based outside the EU/EEA. Where personal data is transferred internationally we rely on appropriate safeguards (such as Standard Contractual Clauses) provided by those processors.
7. Cookies
We use a session cookie to keep you signed in and a visitor cookie to enforce free-tier limits. Our analytics provider is cookieless.
8. Security
Passwords are hashed with bcrypt. Connections use TLS. Payment data is handled by Stripe on PCI-compliant infrastructure.
9. Children
PostClip is not directed at children under 16; we do not knowingly collect personal data from them.
10. Changes
We may update this policy. Material changes will be announced via email or in-product notice.
11. Contact
Privacy questions: [email protected].