Privacy Notice

Kwame Appiah Twumasi-Ankrah, an individual based in Canada, operates PostPilot and is the controller of the personal data described here.

What we collect and why

• Account data (email, password or Google sign-in): to create and secure your account. Basis: contract.
• Content you enter and generate (business name, type, offers, generated weeks and graphics): to provide and save your content. Basis: contract.
• Usage and device data (IP address, browser, error logs): to keep the service secure and fix problems. Basis: legitimate interests.
• Subscription status: to unlock your plan. Basis: contract.
• Support messages: to answer your questions. Basis: legitimate interests.

Card and billing details are collected by Paddle, not by us.

Who we share data with

• Service providers: hosting and database, authentication, and AI providers that generate your text and images from the details you submit.
• Paddle, our Merchant of Record, for sales, subscriptions, payments, tax compliance and invoicing.
• Professional advisers, and authorities where the law requires it.

We do not sell your personal data. Some providers may process data outside Canada, the UK or EEA; where they do, we rely on appropriate safeguards such as standard contractual clauses.

Retention

We keep your data while your account is open. When you delete your account, or data is no longer needed, we delete or anonymise it, except where the law requires us to keep it.

Your rights

Depending on where you live, you can ask to access, correct, delete, restrict, port or object to the use of your data, and withdraw consent at any time. You can also complain to your local privacy regulator (in Canada, the Office of the Privacy Commissioner). We respond within one month.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and per-user access rules on saved content.

Cookies

We use only essential storage needed to keep you signed in. We do not use advertising cookies.