Privacy Policy

Plain-language summary: PostOnce.co processes the account, content, connected-channel credentials, and operational data needed to provide a multi-platform publishing service. We do not sell personal information or use customer content to train a general-purpose AI model.

1. Scope

This Privacy Policy describes how the independent PostOnce.co software project (“PostOnce.co,” “we,” “us,” or “our”) processes personal information when you visit our website, create an account, connect a destination, publish content, purchase a subscription, or contact support. PostOnce.co is a product and project name, not an incorporated entity.

It does not govern a destination platform such as Bluesky, Meta, LinkedIn, TikTok, WordPress, or Ghost. Those services process information under their own policies.

2. Information we process

Account and workspace information

We process information such as your name, email address, authentication records, workspace name, membership, role, preferences, and account status.

Content and publishing instructions

We process drafts, articles, images, videos, captions, titles, links, alt text, schedules, destination variants, and other material you submit. We also process the publishing instructions needed to deliver that material.

Connected-channel data

Depending on the connector, we process authorization grants, app passwords, API keys, bot tokens, webhooks, destination identifiers, profile details, account capabilities, and platform responses. We do not ask you to give us a general social-account password.

Operational and analytics data

We process IP address, device and browser information, session events, request timestamps, feature use, delivery attempts, error details, and retry events.

Billing and support

Polar Software, Inc. acts as Merchant of Record, authorized reseller, and contractual seller for paid purchases. Polar independently processes checkout, complete payment-card details, customer and billing details, subscriptions, invoices, refunds, and applicable transaction taxes under its Privacy Policy. We receive the customer, order, subscription, product, payment-status, and billing-period information needed to provision and support your plan; we do not receive complete card numbers. We process support messages and related attachments when you contact us.

Transactional email

Authentication messages are first placed in our PostgreSQL outbox with the recipient and message payload encrypted, then our worker decrypts and sends them through Resend. Resend processes the sender, recipient, message content, and delivery metadata needed to deliver the message. Signed Resend webhook events let us record bounces, complaints, and suppressions so we can stop sending to affected addresses.

3. How we use information

• Provide, secure, maintain, and troubleshoot the service.
• Authenticate users and enforce workspace roles.
• Connect destinations, validate content, publish as instructed, retry temporary failures, and display results.
• Process subscriptions and maintain billing records.
• Communicate about service, security, account, and support matters.
• Understand product use and improve reliability and usability.
• Detect misuse, enforce our Terms and Acceptable Use Policy, and comply with law.

We do not sell personal information. We do not use customer content or connected-channel credentials to train a general-purpose AI model.

4. Legal bases

Where the law requires a legal basis, we rely on performance of a contract to provide the service; legitimate interests in securing, maintaining, and improving the service; consent where requested; and compliance with legal obligations. You may object to processing based on legitimate interests where applicable.

5. How information is shared

We share information only as needed with:

• Connected destinations: content, metadata, and identifiers are sent to the platforms you select.
• Infrastructure and service providers: providers may host the application, database, files, monitoring, and customer support under contractual duties.
• Email provider: Resend processes transactional-email recipients, message content, and delivery events as described above.
• Merchant of Record: Polar independently processes paid checkout, payment, subscription, invoice, refund, and applicable transaction-tax information as the contractual seller for the transaction. PostOnce.co receives the limited billing state needed to provide product access and support.
• Professional advisers and authorities: information may be disclosed when reasonably necessary for legal advice, compliance, safety, fraud prevention, or defense of rights.
• Business transfers: information may transfer in a merger, financing, acquisition, reorganization, or sale, subject to appropriate notice and safeguards.

6. Cookies and local storage

We use cookies or similar storage necessary for authentication, session security, preferences, and service operation. If we introduce non-essential advertising or analytics technologies, we will provide notice and consent controls where required.

7. Retention

We retain information while your account is active and as needed to provide the service. Retention also depends on workspace settings, plan history limits, backup cycles, platform requirements, dispute resolution, fraud prevention, and legal obligations.

The email outbox stores a one-way recipient hash and an encrypted delivery envelope from the time a job is created. After a job completes or permanently fails, the application clears that encrypted envelope; terminal outbox metadata is scheduled for deletion after 30 days. A hashed suppression record may be retained longer to prevent further delivery to an address that bounced, complained, or was suppressed.

When you delete an account, we begin deletion or de-identification of active-service data unless retention is required. Data may remain temporarily in restricted backups until overwritten. Content already published to a destination must be removed through that destination unless a connector supports deletion and you instruct it.

8. Security

We use reasonable technical and organizational measures appropriate to the service. No online system is perfectly secure. Use a strong account password, protect connected-platform credentials, review workspace members, and revoke destination grants you no longer need. See our Security page for current practices and assurance limits.

9. International processing

PostOnce.co and its providers may process information in countries other than yours. Where required, we use recognized transfer mechanisms and contractual protections. Connected destinations may independently transfer information under their own policies.

10. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information, and to withdraw consent. You may also complain to a data-protection authority.

You can disconnect destinations and manage eligible media in the product. For account or draft deletion and other privacy requests, email [email protected]. We may verify your identity and authority before acting.

11. Children

The service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

12. Changes

We may update this policy as the product, providers, or law changes. We will post the updated date and provide additional notice when a material change requires it.

13. Contact

Questions or requests may be sent to [email protected].

Product and service name: PostOnce.co
Project status: independent software project; not represented as an incorporated entity
Product privacy contact: [email protected]
Paid transaction seller: Polar Software, Inc., acting as Merchant of Record