Sign up for $0
← Back to home

Legal

Privacy Policy

Last updated: October 4, 2026

PostAxis ("we," "us," or "our") is a social media scheduling tool operated at https://postaxis.io (the "Service"). This policy explains what data we collect, why we collect it, who we share it with, how long we keep it, and the controls you have. It applies to our website, dashboard, API, and related integrations.

By using the Service, you agree to this Privacy Policy.

1. Information We Collect

Account information

  • Name, email address, and optional company or brand name, used to create and manage your account and to communicate with you. You can sign in with email and password or with Google. Passwords are handled by our authentication provider and are never stored in plain text.

Payment information

  • Payments and subscriptions are processed by Polar. We do not store your full card number. We keep records of your subscription status, plan, and billing history needed to run the Service.

Social media connections

  • When you connect a social account (X/Twitter, Instagram, Threads, Facebook Pages, LinkedIn, TikTok, Telegram, or YouTube), we store the OAuth access tokens (and related secrets or refresh tokens where required), account identifiers, usernames, and profile pictures needed to publish on your behalf. Tokens are transmitted and stored using industry-standard safeguards.

Your content

  • The captions, images, videos, schedule times, drafts, and platform settings you upload or configure. This content exists so we can publish it to the platforms you choose.

Teams and workspaces

  • If you use teams, we store team membership, roles, invitations, and shared workspace data so collaborators can work in the same space according to the permissions you set.

Usage data and cookies

  • Standard web analytics such as IP address, browser type, device information, and pages visited, collected via cookies or similar technologies, used to keep the Service working and improve it.

2. How We Use Your Data

  • To provide the Service: connecting accounts, publishing and scheduling your content, processing your media, and showing status for posts you send through PostAxis.
  • To process payments and manage your subscription.
  • To send transactional emails about your account, such as confirmation codes, failed posts, or a social connection that needs to be reconnected.
  • To provide customer support.
  • To secure and improve the Service.

We do not sell your data, and we do not use your content for advertising.

3. API Access and AI Agents (MCP)

If you enable API access, API keys you create can call PostAxis on your behalf (for example to create or manage posts). Keys can be revoked at any time from your dashboard. API traffic is treated as content and account data belonging to your account, subject to this policy.

You can also connect AI assistants and agents (such as Claude, ChatGPT, Cursor or Codex) through our MCP server. When you approve a connection on the PostAxis sign-in screen, that app receives an access token that lets it, on your behalf: list your workspaces and connected social accounts; upload media; and create, schedule, publish, edit and delete posts, within the same permissions you have in PostAxis. We record which apps you have connected and when, so you can see and disconnect them in Settings → API keys → Connected agents; disconnecting revokes the app's access immediately. PostAxis does not receive your conversations with the AI app; only the requests the app sends to PostAxis. How the AI provider handles your prompts is governed by that provider's own privacy policy. We do not use data received through the MCP server to train AI models, and it is otherwise handled like any other content in your account under this policy.

4. Who We Share Data With

We share data only as needed to run the Service:

  • Social platforms you connect: when you publish, we transmit your content to those platforms (X/Twitter, Instagram, Threads, Facebook, LinkedIn, TikTok, Telegram, YouTube). Their handling of that content is governed by their own terms and privacy policies.
  • Service providers: Supabase (database, authentication, storage, edge functions), Vercel (hosting), and Polar (payments and subscriptions). We may also use analytics tools to understand how the Service is used.

We never sell your personal data, and we do not share it with third parties for their marketing.

5. Data Retention

  • Account information: kept while your account is active.
  • Social connection tokens: kept until you disconnect the account or delete your account, at which point they are removed.
  • Media and content: stored so we can publish your posts; you can delete media and posts from the dashboard. Published media may also be removed from our storage after successful publish according to how the Service operates.
  • If you delete your account, we delete your personal data within 30 days, except where we are legally required to retain records (such as billing records).

6. Your Controls

  • Disconnect any social account at any time from Connections. This stops further posting to that account from PostAxis.
  • Delete uploaded media and posts from the dashboard where available.
  • Revoke PostAxis access to your Google/YouTube data at any time via Google's security settings.
  • Revoke API keys at any time from your dashboard.
  • To access, correct, export, or delete your data, or to delete your account, contact us at postaxis.io@gmail.com.

7. YouTube API Services

PostAxis uses YouTube API Services to enable posting to YouTube. By using our Service to interact with YouTube, you are also subject to the YouTube Terms of Service.

8. Google Privacy Policy

As we use YouTube API Services, your data may also be subject to Google's Privacy Policy. You can revoke our access via the Google security settings page linked in section 6.

9. Children's Privacy

PostAxis is not intended for children, and we do not knowingly collect any data from children.

10. Security

Sensitive credentials such as OAuth tokens are protected with industry-standard encryption in transit and at rest. No method of transmission or storage is 100% secure, but we use commercially reasonable safeguards to protect your information.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in the dashboard. The "Last updated" date at the top reflects the latest revision.

12. Contact

Questions, concerns, or data requests: postaxis.io@gmail.com.