Privacy Policy

Postavo ("we", "us", "our") operates postavo.in, a social media management platform for local businesses in India. We create, review, and publish content on behalf of our clients on Instagram, Facebook, and related channels.

For privacy-related questions, contact us at hello@postavo.in.

We collect information you provide directly and data generated when you use our service:

• Account & identity: mobile phone number, name, and role (client, team, manager, or admin).
• Business profile: business name, category, city/area, posting preferences, and language settings.
• Social accounts: when you connect Instagram or Facebook, we store encrypted access tokens, page/channel IDs, and connection status. We do not store your social media passwords.
• Content & orders: posts, captions, media files, order details, approvals, and scheduling information.
• Payments: transaction references and order status from Razorpay. We do not store your full card or UPI credentials — payments are processed by Razorpay.
• Communications: emails we send (invoices, welcome messages) and WhatsApp notifications where enabled.
• Technical data: device/browser type, IP address, and usage logs needed to operate and secure the platform.

We use your data to:

• Authenticate you via OTP and manage your account
• Create, review, schedule, and publish content on your connected social accounts
• Process orders and subscriptions
• Send service-related SMS, email, and WhatsApp updates
• Provide customer support and improve our service
• Detect fraud, abuse, and technical errors
• Comply with applicable law

We do not sell your personal data to third parties.

We use trusted providers to run Postavo. They process data only as needed to provide their service:

• Supabase — authentication and database hosting
• apitxt.com — OTP delivery via SMS
• Cloudinary — media storage and delivery
• Meta (Facebook / Instagram) — account connection and publishing
• Razorpay — payment processing
• Resend — transactional email
• AiSensy — WhatsApp notifications (where configured)
• Vercel / Upstash — app hosting and background job infrastructure

Each provider has its own privacy policy. When you connect a social account, you also agree to that platform's terms.

• Social access tokens are encrypted at rest
• Connections use HTTPS (TLS) in transit
• Access to client data is restricted by role inside the platform
• Database row-level security limits direct API access to your data

No method of transmission or storage is 100% secure. We work to protect your information but cannot guarantee absolute security.

We keep your account and business data while your account is active or as needed to provide the service. If you disconnect a social account, we remove the associated tokens. You may request account deletion by contacting us — we will delete or anonymise personal data unless we must retain it for legal, tax, or dispute-resolution purposes.

Under applicable Indian law, including the Digital Personal Data Protection Act, 2023, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Withdraw consent for optional processing
• Request erasure of your data (subject to legal exceptions)
• Disconnect social accounts at any time from Settings

To request deletion, see our Data Deletion Instructions or email hello@postavo.in. We will respond within a reasonable timeframe.

We use essential cookies and browser storage to keep you signed in and to operate the app. We do not use third-party advertising cookies on the client dashboard. The marketing website may use standard analytics as we add them in future — we will update this policy when that changes.

Postavo is a business service and is not directed at anyone under 18. We do not knowingly collect data from children.

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated date. Continued use of the service after changes means you accept the updated policy.

Postavo
Email: hello@postavo.in
Website: https://postavo.in