Privacy Policy

Postivex Ltd. ("Postivex", "we", "our", or "us") operates the social media management platform accessible at https://postivex.com and its subdomains.

For the purposes of the General Data Protection Regulation (GDPR), Postivex Ltd. is the data controller of personal data processed through our platform.

Contact: privacy@postivex.com

We collect personal data in the following categories:

We use your data for the following purposes:

• Service delivery: To operate and maintain your Postivex account and provide features
• AI analysis: To generate profile audits, content recommendations, and lead analysis using your profile and post data
• Content publishing: To schedule and publish posts to your connected social profiles on your behalf
• Analytics: To provide you with performance insights on your content and profiles
• Billing: To process subscription payments and manage your account plan
• Communications: To send transactional emails (receipts, alerts, password resets) and, with consent, product updates
• Security: To detect fraud, abuse, and security incidents
• Legal compliance: To comply with applicable laws and regulations

We do not sell your personal data to third parties. We do not use your data for advertising on other platforms.

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process your data under the following legal bases:

Postivex integrates with the following third-party services, each with their own privacy policies:

We implement industry-standard security measures including:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for sensitive data at rest (OAuth tokens, passwords)
• Access controls limiting employee access to production data
• Regular security audits and vulnerability assessments
• Automatic session expiry and secure cookie handling
• Rate limiting and DDoS protection

While we take every reasonable precaution, no system is 100% secure. If you discover a security vulnerability, please contact security@postivex.com.

Postivex operates from the European Union and stores data on servers within the EU. When data is processed by third-party AI providers (Anthropic, OpenAI) based in the United States, such transfers are conducted under:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• The EU-U.S. Data Privacy Framework (where applicable)

By using Postivex, you acknowledge these international transfers as described in this policy.

We retain your data for as long as your account is active or as needed to provide services. Specific retention periods:

• Account data: Retained until account deletion, then deleted within 30 days
• Content & posts: Retained while account is active; deleted upon account deletion
• Payment records: Retained for 7 years for tax/legal compliance
• Activity logs: Retained for 90 days for security purposes
• Backups: Encrypted backups are retained for up to 30 days

You can request deletion of your account and personal data at any time through Settings → Account → Delete Account, or by emailing privacy@postivex.com.

Depending on your location, you have the following rights regarding your personal data:

To exercise any of these rights, email privacy@postivex.com. We will respond within 30 days. We may need to verify your identity before processing the request.

For US residents (California): You have additional rights under the CCPA, including the right to know, the right to delete, and the right to opt-out of sale (we do not sell data). Contact us at the same email.

Postivex is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact privacy@postivex.com and we will delete it promptly.

We use cookies and similar tracking technologies. For a full breakdown of cookies we use and how to manage them, see our Cookie Policy.

In summary, we use:

• Essential cookies: Required for authentication and security (cannot be disabled)
• Functional cookies: Remember your preferences
• Analytics cookies: Understand how the service is used (requires consent)

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Sending an email to your registered address
• Displaying a prominent notice in the Postivex dashboard
• Updating the "Last Updated" date at the top of this page

Your continued use of Postivex after changes take effect constitutes your acceptance of the updated policy.

For privacy-related inquiries, to exercise your rights, or to report a concern:

EU residents may also contact their local supervisory authority. A list of EU data protection authorities is available at edpb.europa.eu.