Privacy policy

Last updated 6 Nov 2026.

Who is responsible

Postbroad, Latvia is responsible for this website and the Postbroad app.

For privacy requests, email hello@postbroad.com.

The short version

• We collect what we need to run Postbroad and nothing more.
• We don't sell your data.
• This policy covers this website and the Postbroad app.
• You can ask us for a copy of your data, or to delete it, at any time.

What we collect

On this website (applies now)

• The waitlist form: your email address and, if you choose to answer, what you run and where you post. We also keep which form you used and when. It is saved in a database on Cloudflare (D1). We use it to write to you once, when Postbroad opens. We keep it until we have written, or until you ask us to delete it.
• The contact form: your name if you give it, your email address, the topic and your message, saved in the same database with the time you sent it. We use it to read your message and to reply. We keep it until it has been dealt with, or until you ask us to delete it.
• Spam protection: to limit repeated tries we keep a one-way scrambled form of your network address (a salted hash, and for IPv6 only the first half of the address), never the address itself, with a count of tries per hour for each form. We delete counts older than a day. The forms also run Cloudflare Turnstile to tell people from bots; Turnstile sees your browser and network address while it checks.
• Referral and campaign tracking: if you arrive through a link that carries a referral code (ref) or campaign tags (utm_source, utm_medium, utm_campaign, utm_term, utm_content), your browser keeps them in its own storage (localStorage, not a cookie) under postbroad_first_touch, with the page you landed on, the name of the site that sent you and the time. The first visit wins and it is kept for 60 days. When you follow a link into the Postbroad app, these values are added to that link, so the app can keep them with your account when you sign up. Links into the app without them carry our own tags instead (which page of this site you came from).
• Affiliate link clicks: when you arrive through an affiliate's link, your browser sends the referral code, and nothing else, to the app's click counter, at most once a day per code. It remembers when it last did under postbroad_ref_click: followed by the code. Clearing this site's data in your browser removes both.

The site and its database are hosted by Cloudflare, which processes this data for us.

In the Postbroad app

• Your account: name, email and the brands and team you set up.
• Your posts: text, media and schedules, and the record of what happened on each network.
• Network connections: the access tokens each network gives us so we can post for you.
• Usage: basic logs that help us keep the service running and find errors.

How we use it

To publish your posts, check them on each network, show you what happened, and keep your account safe. AI drafting is off unless you switch it on. To switch it on, you choose the AI provider (OpenAI, Anthropic, Google, OpenRouter or another compatible service) and add your own key for it. Your drafts and brand rules are then sent to that provider to write the suggestion.

Who else sees it

The networks you post to receive your posts, as they must. The AI provider you choose receives what you ask it to draft. These companies process data for us:

• Cloudflare: Hosts this website and its form database, runs DNS and email forwarding, and runs the Turnstile check on the forms.
• Brevo: Sends transactional email, such as account emails and notices about your posts.

We share nothing else unless the law requires it. How we protect what we store is on the security page.

How long we keep it

While your account is open. When you delete it, we remove your data, except what we must keep by law, such as invoices.

Your rights

You can see, correct, export or delete your data. You can also object to how we use it, or complain to your local data protection authority. To use any of these rights, contact us.

Changes

If we change this policy in a way that matters, we'll email account owners before it takes effect, and the date at the top of this page will change.