Privacy Policy - Post-EZ

Post-EZ (“we”, “us”) is a social media scheduling and cross-posting tool operated by POST-EZ SCANT LLC. This Privacy Policy explains what we collect, how we use it, and the choices you have. By using Post-EZ at postez.app you agree to this policy.

Information we collect

Account data. Email address (for sign-in), display name and handle (if you provide one), and the date you created your account.
Connected platform credentials. When you connect Discord, Beehiiv, Ghost, Patreon, Twitch, YouTube, or any other platform, we store the API keys, webhook URLs, or OAuth tokens required to publish on your behalf. These are encrypted at rest using AES-256-GCM with a server-side key.
Content you create. Drafts, scheduled posts, captions, brand voice samples, and media you upload to Post-EZ.
Usage data. Pages you visit, features you use, and basic device information (browser, OS) for product analytics and error monitoring.
Billing data. If you purchase a paid plan, Stripe (our payment processor) handles your card details directly. We receive the billing email, plan, and payment status from Stripe via webhook.

How we use information

To deliver the Post-EZ service: publish your posts to the platforms you connect, schedule them, surface analytics you opt into.
To authenticate you via email magic links.
To process payments and grant access to the plan you purchased.
To send service-related emails (login links, billing receipts, security alerts). We do not send marketing emails without opt-in.
To diagnose bugs and improve the product. Error and usage telemetry is aggregated.

Data we share with third parties

We only share data with third parties when necessary to operate Post-EZ:

Supabase — authentication, database, and file storage.
Vercel — application hosting.
Stripe — payment processing.
Resend — transactional email (magic links, receipts).
Anthropic — AI features (caption generation, brand voice analysis). Content you submit to AI features is sent to Anthropic's API for processing only.
Cloudflare R2 — media storage.
Connected publishing platforms — when you publish, we send your content to the platforms you selected (Discord, Beehiiv, Ghost, Patreon, Twitch, YouTube, Instagram, TikTok, X, Facebook, etc.).

We never sell your data and we do not run ads.

Security

Platform credentials are encrypted with AES-256-GCM before they are stored in our database. Each user's rows are isolated via Postgres Row Level Security. OAuth tokens are never readable by client-side code. We transport all data over TLS.

Your rights

Access. You can view all of your data inside Post-EZ.
Export. Email support@postez.app to request an export.
Deletion. Disconnect any platform at any time from the Accounts page. Email support@postez.app to delete your entire account; deletion is irreversible and completes within 30 days.
Correction. Update your profile from settings, or email us.

If you are in the EU, UK, California, or another jurisdiction with statutory data rights (GDPR, CCPA, etc.), the rights above also satisfy those regulations.

Cookies

We use first-party cookies for authentication (Supabase session) and OAuth state CSRF tokens. We do not use third-party advertising cookies.

Children

Post-EZ is not directed to children under 13. If we learn we have collected data from a child under 13, we delete it.

Changes

We'll update the “Last updated” date when we change this policy. Material changes will be announced in-app.

Contact

Questions: support@postez.app