POSTI — PRIVACY POLICY
Last updated: July 7, 2026

Posti is a private tool that helps a creator team coordinate content and logistics.
This policy explains what we collect and how we use it, including data obtained from
Instagram if you choose to connect it.

INFORMATION WE COLLECT
- Account data you provide: your name, email, and phone used to sign in and be
  contacted.
- Instagram data, only after you connect your professional account: your username
  and user ID, account type, metadata for posts you add (caption, permalink, media
  type, thumbnail, timestamp), and post insights (reach, likes, comments, saves,
  shares, views). We store an access token to retrieve this on your behalf.
- App data to run the product: schedule items, reminders, messages, announcements,
  guest entries, and a device token used to deliver push notifications.

HOW WE USE IT
- To show you and your team's admins the content you choose and its performance.
- To send you reminders, messages, and announcements.
- We do NOT sell your data or use it for advertising.

HOW IT'S STORED AND SHARED
Data is stored in our backend (Supabase) with access controls; Instagram access
tokens are kept server-side and are never exposed in the app. Push notifications are
delivered via Expo. We access Instagram data per Meta's Platform Terms and only for
the purposes above.

RETENTION & YOUR CHOICES
We keep your Instagram data until you disconnect Instagram or request deletion. You
can disconnect Instagram at any time in Settings > Instagram > Disconnect, which
immediately removes your stored token and connection. You can delete your entire
account and its data at any time in the app under Settings > Delete Account. To erase
Instagram-derived data specifically, see the Data Deletion page (append ?doc=deletion
to this URL), or remove Posti from your Instagram settings, which triggers automatic
deletion.

CHILDREN
Posti is not directed to anyone under 13 (or the minimum age in your region).

CHANGES
We may update this policy and will revise the date above.