At PostNova, Inc. ("PostNova", "we", "us"), we believe in plain-language transparency. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using PostNova, you agree to this policy.
1. Information we collect
We collect information you provide directly to us, information we get from your connected social platforms (with your explicit OAuth consent), and standard usage data from the product.
- Account information: name, email address, password hash, billing details, and workspace metadata.
- Connected platform data: OAuth tokens, post drafts, scheduled content, analytics, and messages you choose to manage inside PostNova.
- Usage data: log files, device identifiers, IP addresses, and feature interaction events.
- Communications: messages you send to our support and sales teams.
2. How we use information
We use the information to operate, maintain, and improve PostNova; to authenticate you; to process payments; to provide customer support; to detect abuse; and to communicate updates relevant to your account. We never sell your personal data.
3. AI features and your content
When you use AI-powered features (such as caption generation, video generation via Sora 2, Veo 3, and other models), your prompts and any uploaded media are sent to the relevant model provider strictly for the purpose of generating your output. We do not train PostNova's own models on your private content, and we contractually require model providers to honor the same boundary.
4. Sharing of information
We share information only with vetted service providers (hosting, payments, analytics, customer support tools), with the social platforms you explicitly connect, when required by law, or in connection with a business transfer. All processors are bound by data-protection agreements.
5. Data security
We encrypt data in transit using TLS 1.2+ and at rest using AES-256. OAuth tokens are stored in a hardware-backed key management service. We perform regular penetration testing and follow least-privilege access controls. No system is perfectly secure, but we treat your data like it's our own.
6. Your rights
Depending on your jurisdiction, you may have the right to access, correct, port, or delete your personal data, to object to processing, and to withdraw consent. You can exercise these rights from your account settings or by emailing privacy@postnova.app.
7. Data retention
We keep account information for as long as your account is active and for a limited period after, as needed to comply with our legal obligations and resolve disputes. You can request earlier deletion at any time.
8. International transfers
PostNova is operated from the United States. By using the product from outside the U.S., you consent to the transfer and processing of your information in the U.S. and other jurisdictions where our service providers operate, subject to safeguards required by applicable law.
9. Children's privacy
PostNova is not directed to children under 13 (or 16 in the EU/UK). We do not knowingly collect personal information from anyone in those age groups.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date and, for material changes, notify you by email or in-app banner.
11. Contact us
Questions? Reach our privacy team at privacy@postnova.app or write to PostNova, Inc., 61 Greenpoint Ave, Brooklyn NY.