Summary: PostWing Pro collects only the data necessary to provide our multi-platform social media automation service across Facebook, Instagram, X (Twitter), TikTok, Threads, Reddit, and Pinterest. We do not sell your data. Your OAuth access tokens, API keys, and app secrets are encrypted at rest (AES-256) and used strictly for publishing content and retrieving engagement analytics upon your explicit request.
1. Information We Collect
1.1 Account Information
When you register, we collect:
- Full name and email address
- Password (stored as a one-way bcrypt hash — we cannot read it)
- Timezone preference
- Subscription plan selection
1.2 Social Media Platform Integration Data
When you connect a social media account or channel, we store only the necessary authentication metadata:
- Meta (Facebook & Instagram): Facebook Page IDs, Instagram Business/Creator Account IDs, Page/Account names, category, profile avatar URLs, and OAuth access tokens.
- X (Twitter): Twitter User ID, handle (@username), profile image, OAuth 2.0 user tokens, and Developer API credentials.
- TikTok: TikTok Open IDs, usernames, display avatars, follower counts, and OAuth access tokens.
- Threads: Threads user identifiers, account names, and Meta Threads access tokens.
- Reddit: Reddit usernames, subreddit access scopes, and OAuth tokens.
- Pinterest: Pinterest User/Board IDs, board names, and access tokens.
All social platform access tokens and secrets are encrypted at rest using AES-256. We do not store personal passwords, private direct messages, contacts, or unrequested account data.
1.3 Post & Content Data
Posts you create or that are AI-generated are stored in our database, including content text, image URLs, scheduled times, and publishing status.
1.4 Usage Data
We collect basic usage analytics: pages visited, features used, login timestamps, and IP addresses for security purposes.
1.5 Payment Data
Payment processing is handled entirely by PayPal. We store only the PayPal subscription/order ID for reference — no credit card numbers or financial details are stored on our servers.
2. How We Use Your Information
We use the collected data to:
- Provide, maintain, and improve PostWing Pro
- Authenticate your account and maintain security
- Post to your Facebook pages on your behalf at scheduled times
- Send transactional emails (post status, token expiry alerts)
- Process subscription payments via PayPal
- Generate analytics about your posts' performance
- Respond to support requests
- Comply with legal obligations
We do not use your data for advertising, sell it to third parties, or use it for any purpose beyond operating the service you have requested.
3. Social Media Platform Data & API Usage
PostWing Pro integrates directly with official developer APIs to interact with your social channels on your behalf. By connecting your accounts, you grant us permission to:
- Read the list of pages, profiles, subreddits, or boards you manage
- Publish scheduled text, image, and video posts to those channels
- Read post engagement data (likes, comments, shares, views) for your analytics reports
We comply with all relevant platform policies and developer terms:
Your social account data is used exclusively to operate your scheduling dashboard. You can revoke access at any time through each platform's app settings or by removing the channel in your PostWing Pro accounts manager.
4. Data Storage & Security
Your data is stored on secure servers. We implement the following security measures:
- Encryption at rest: Facebook access tokens are encrypted using AES-256
- Encryption in transit: All data is transmitted over HTTPS/TLS
- Password hashing: Passwords use bcrypt with cost factor 12
- Access control: Strict role-based access to production systems
- Regular backups: Daily automated database backups with 30-day retention
- Security audits: Quarterly vulnerability assessments
Despite our best efforts, no method of internet transmission is 100% secure. We encourage you to use a strong, unique password for your account.
5. Sharing Your Information
We do not sell, trade, or rent your personal information. We share data strictly with:
- Connected Social Networks (Meta, X, TikTok, Reddit, Pinterest): Via official APIs, solely to dispatch your scheduled posts and pull analytics
- AI Service Providers (OpenAI & OpenRouter): If you use AI features, your keywords or prompt drafts are processed to generate post copy (no account credentials are ever shared)
- PayPal: For payment and subscription management
- Legal Authorities: If required by law, court order, or to protect our legal rights
All third-party services we use are bound by strict data security and privacy standards.
6. Cookies & Tracking
We use minimal, essential cookies:
- Session cookie: Keeps you logged in (expires when you close your browser or after 30 days if "Remember Me" is enabled)
- CSRF protection cookie: Prevents cross-site request forgery attacks
We do not use advertising cookies, Google Analytics, or third-party tracking pixels on authenticated pages. We use basic server-side logging for security and debugging only.
7. Your Rights (GDPR & Global)
Depending on your location, you may have the following rights regarding your personal data:
- Right to Access: Request a copy of all data we hold about you
- Right to Rectification: Correct any inaccurate personal data
- Right to Erasure: Request deletion of your account and all associated data
- Right to Portability: Receive your data in a machine-readable format
- Right to Object: Object to certain types of data processing
- Right to Withdraw Consent: Disconnect Facebook pages or close your account at any time
To exercise any of these rights, contact us at privacy@postwingpro.com. We will respond within 30 days.
8. Children's Privacy
PostWing Pro is not intended for use by persons under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided personal data, we will delete it immediately. If you believe a child has registered, please contact us at privacy@postwingpro.com.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will:
- Update the "Last Updated" date at the top of this page
- Send an email notification to registered users
- Display a prominent notice in the application dashboard
Your continued use of PostWing Pro after changes are posted constitutes acceptance of the updated policy.
10. Contact Us
For privacy-related questions, data requests, or concerns, please contact: