On your privacy.

Account data. When you sign in we store your email address and any profile data (name, avatar) supplied by your auth provider (Google) or our magic-link flow.

Connected social account tokens. When you connect Facebook, Instagram, WhatsApp Business, or Google Business Profile we store the access tokens and (where issued) refresh tokens, encrypted at rest using AES-256-GCM with keys held in Supabase Edge Function secrets.

Post content. Captions, hashtags, media URLs, scheduled times, automation rules, approval requests, and approval responses you create inside Posteri are stored in our Supabase Postgres database, isolated per workspace via Row-Level Security.

Analytics. We log AI credit usage, post outcomes, and basic request metrics for billing, abuse prevention, and product improvement. We snapshot follower counts and reach from your connected Meta and Google accounts so we can show analytics dashboards.

Push tokens. When you install our mobile app we store an Expo push token tied to your account so we can deliver post-status and review-reply notifications.

We use your data to operate Posteri: render your dashboard, schedule and publish posts, audit your Google Business Profile, generate AI captions / images / review replies, send transactional email, charge your subscription, and notify you about relevant activity. We do not sell your data, do not train AI models on it, and do not share it with third parties for marketing.

We use the following processors. Each acts on our instruction only.

• ·Supabase — Postgres + Storage + Auth + Edge Functions hosting (AWS Asia Pacific, Mumbai).
• ·Anthropic (Claude API) — Caption and review reply generation. Prompts are not used to train Anthropic models by default.
• ·Replicate (Flux Schnell) — AI image generation.
• ·Meta Platforms — Facebook, Instagram, WhatsApp Business publishing + insights, via the Meta Graph API.
• ·Google — Google Business Profile audit, reviews, and replies.
• ·Razorpay — INR subscription billing and invoices.
• ·ZeptoMail (Zoho) — Transactional email delivery (invites, approval requests, post-status alerts).
• ·Expo — Push notification delivery to your mobile device.
• ·Sentry — Error monitoring (sampled at 10%). No personally identifying data is sent in error reports.

All primary data lives in Supabase (Postgres + Storage) hosted on AWS Asia Pacific (Mumbai). Logs and request metrics are retained for 30 days for debugging and abuse prevention. Subscription records are kept for 7 years to comply with Indian tax law.

You may export your data, correct inaccuracies, or delete your account at any time. Cancelling your subscription does not automatically delete your account — message us at hello@posteri.napdesigns.com with subject "Account deletion" or "Data export" and we will respond within 7 days. On deletion we erase all workspace, post, social-token, and analytics rows; tax records (invoices) are retained per law.

Posteri is not directed to children under 18. If you believe a child has provided personal data, contact us and we will delete it.

Material changes to this policy will be announced by email to active users at least 14 days before they take effect.

For privacy queries, deletion requests, or grievances: hello@posteri.napdesigns.com.

NAP Designs · Bengaluru, Karnataka, India.