Privacy Policy

Effective: March 17, 2026 · Version 1.0 · Last Updated: March 2026

1. Introduction

iPost AI ("iPost AI," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the iPost AI platform, including our website at ipostai.com, our iOS and Android mobile application, and all related services (collectively, the "Service").

By creating an account or using the Service, you consent to the practices described here. If you do not agree, do not use the Service.

Users in the European Union (EU) and United Kingdom (UK) have additional rights under the GDPR (Section 8). Users in California have additional rights under the CCPA (Section 9).

2. Who We Are / Data Controller

iPost AI is the data controller for all personal information collected through the Service.

Contact:
Email: [email protected]
Support: [email protected]
Website: ipostai.com

For privacy-specific requests, email [email protected] with subject: Privacy Request.

3. Information We Collect

iPost AI collects only what is necessary to deliver the Brand Soul Engine™ and social media content creation and scheduling features.

Data CategoryPurposeRetentionShared With
Email addressAccount login and transactional notificationsUntil account deletedSupabase Auth only
Business name & typeBrand Soul Engine™ personalizationUntil account deletedAnthropic Claude API (prompt context only, not retained for training)
Brand voice preferencesAI content generationUntil account deletedAnthropic Claude API (prompt context only)
Photo uploadsImage analysis for caption generationUntil you delete the momentSupabase Storage; Google Vision API (analysis only)
Voice notes (audio)Voice capture for post draftingDeleted immediately after transcriptionOpenAI Whisper (transcription only)
Generated post draftsPost history, editing, schedulingUntil account deletedNone, stored in your private database row only
Social OAuth tokensPublishing and scheduling approved postsUntil you disconnect; revoked on account deletionMeta Content Publishing API
Usage analyticsProduct improvement12 monthsPostHog (anonymized events)
Payment informationSubscription billingPer Apple/Google retention policyApple App Store / Google Play (processed by app stores, we never store card numbers)

We do not sell your personal information. We do not share your Brand Soul Profile or generated content with advertisers. We do not use your content to train AI models without your explicit consent.

4. How We Use Your Information

5. How We Share Your Information

5.1 Service Providers

All vendors process your data under Data Processing Agreements and are restricted from using your data for their own purposes. Key service providers include Anthropic (AI generation), Supabase (database and auth), Apple and Google (in-app purchase payment processing), Google Cloud Vision (image analysis), OpenAI (voice transcription), fal.ai (image generation), and Meta (social publishing).

5.2 Legal Requirements

We may disclose your information if required by law, court order, or to protect the rights, property, or safety of iPost AI, our users, or the public.

5.3 Business Transfers

If iPost AI is acquired or merged, your information may transfer as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

6. Data Security

In the event of a data breach, we will notify affected users within 72 hours of discovery as required by GDPR.

7. Data Retention

DataRetention
Account data (email, Brand Soul Profile, posts)Until account deletion, then hard-deleted within 30 days
Photo momentsUntil you delete the moment
Voice note audioDeleted immediately after transcription
Usage analytics12 months
Error logs90 days
IP addresses30 days
Payment recordsPer Apple/Google app store retention policy

8. Your Rights — GDPR (EU / UK Users)

9. Your Rights — CCPA (California Users)

Submit requests to hello@ipostai.com with subject "CCPA Request."

10. Cookies and Tracking

iPost AI uses essential cookies for session management only. We do not use advertising cookies or cross-site tracking. PostHog collects anonymized product usage events with no PII included.

11. Children's Privacy

The Service is not directed at children under 13. Users must confirm they are at least 13 during onboarding. Users aged 13-17 require parental or guardian consent. If we discover a child under 13 has created an account, we will delete all associated data immediately.

12. International Data Transfers

iPost AI's infrastructure is hosted in the United States. If you access the Service from the EU or UK, your data will be transferred to the United States. We rely on Standard Contractual Clauses (SCCs) with sub-processors to ensure adequate protection.

13. How to Delete Your Data

Option 1: In-app. Go to Profile, tap Connected Accounts to disconnect social accounts, or scroll to Delete Account to remove everything.

Option 2: Email. Send to hello@ipostai.com with subject "Data Deletion Request." Processed within 30 days.

Option 3: Via Facebook. Go to Facebook Settings, Apps and Websites, find iPost AI and click Remove.

14. Changes to This Policy

We will notify you of material changes by email or in-app notification at least 14 days before they take effect.

15. Contact Us

iPost AI LLC

General inquiries: hello@ipostai.com

Support: support@ipostai.com

Website: ipostai.com

For privacy-specific requests, email hello@ipostai.com with subject: Privacy Request.

We respond to all privacy requests within 30 days.