Privacy Policy

We process account details (name, email, password hash, avatar, language and time zone); workspace, client and brand details; text, images, videos, schedules, approvals, tasks and media you store; connected social profile or page names, identifiers, permissions, encrypted tokens and platform analytics; billing and subscription records; support messages; and technical or security records.

We use data to provide and secure Postavel, store and publish content, schedule posts, retrieve platform analytics, provide support, bill and meet legal duties. Postavel uses Laravel-managed hosting administered through Laravel Forge; Cloudflare R2 stores media; Resend sends service email; Stripe handles payments; OpenAI processes prompts and relevant text or media for AI features; connected social platforms receive what is needed to publish or retrieve analytics. Trackavel receives analytics events only after consent. ChatGPT/Codex also handles MCP requests and results under OpenAI policies.

MCP tools process task inputs and relevant stored data from workspaces you are authorized to access; Postavel does not retrieve or reconstruct full chat history. Inputs can include workspace, client, brand, post or media names/IDs, post or task text, platform and schedule choices, AI prompts and selected media references. Results can include relevant names/IDs, content, media URLs, status, schedule and publishing outcomes. Necessary resource IDs, selected content and media names/URLs, and published-post URLs are returned to identify and use the requested resources; content, filenames or public URLs may themselves contain personal information or public destination handles. Tools do not return internal user IDs, separate social account names/handles or account IDs, social OAuth access/refresh tokens, or raw provider diagnostics. For a requested media transfer, tools can return short-lived signed upload URLs, required upload headers and an encrypted upload token scoped to the selected user, workspace and brand; these authorize that upload and are not social account credentials.

There is no automatic expiry currently defined for account, workspace, brand, post, media, task or platform analytics data. It remains while the account or workspace is active and until the user or workspace owner deletes it; inactive accounts are not automatically erased on a defined schedule. Disconnecting a social account soft-deletes its record, but encrypted credentials may remain to preserve publication history. Analytics sync diagnostic records are scheduled for deletion after 90 days (configurable); the optional analytics choice stays in your browser for 180 days. Stripe handles card data; billing records are retained as required for accounting, tax and legal obligations. Support correspondence and technical/security records are kept only as needed to handle requests, operate and secure the service, and meet legal obligations; no fixed retention period is currently defined for these records. Usage, trial and billing records may remain after account deletion, with direct database links to deleted users, workspaces and social accounts removed. Media file deletion is processed through queued jobs. To prevent repeat free trials after account deletion, we retain a keyed hash of the normalized email address without automatic expiry; the email address itself is not stored in this record.

You can update account details, delete your account and owned workspaces, remove posts or media, and disconnect social accounts. Shared-workspace content remains until its owner or an authorized member deletes it. Disconnect does not immediately erase the soft-deleted social record or encrypted credentials; contact us to request further deletion. You can reject or change Trackavel consent using cookie controls; AI processing occurs only when you use an AI feature. Social access tokens are encrypted at rest. Request access, correction or deletion at [email protected].