Privacy Policy

What Information Do We Collect?

• Account and sign-in information. When you first open the App we create an account for your device. If you sign in with Apple, Google or your phone number, we receive an identifier for that sign-in from the provider (through Firebase Authentication), and the email address or phone number it shares with us. We never see your Apple, Google or X password.
• X account information. When you connect an X account, or add a profile for an X handle, we store the username, display name, X user ID and profile picture, and the access tokens X issues so the App can act for you. X tokens are stored encrypted.
• Public posts from X. To learn a profile's voice, and to reply to or quote a post, we fetch public posts from X, including their text, links, attached media and engagement counts.
• What you create in the App. Your briefs, prompts and instructions; the sources you add (posts, links, text and screenshots or images you upload); your profiles' style rules, viewpoints, example posts and notes; and the drafts the App generates, with your history of them.
• Device information. A device identifier generated by the App, your device's platform, the App version, language, time zone, and a push notification token if you allow notifications.
• IP address and approximate location. We receive your IP address with each request and derive your country from it. The App does not collect precise location.
• Purchase information. If you subscribe, we receive the App Store transaction details (product, transaction identifiers, purchase and expiry dates) needed to unlock Premium. Payment is handled by Apple; we never receive your card details.
• Diagnostics and usage. Crash reports and App usage events are collected through Firebase (Crashlytics and Google Analytics for Firebase). Our servers also keep operational logs, including the requests sent to AI providers, and records of AI usage per account.
• Advertising data. On the free plan, Google AdMob receives device and ad interaction information (such as device type, IP address and the ads you see and tap), plus your device's advertising identifier (IDFA) only if you allow tracking.
• Support. When you contact us, we keep your message, your email address and any details you include, such as device type and OS version.

How Do We Use It?

• To provide the App: generate drafts and replies, train and maintain your profiles, and keep your history.
• To sign you in, keep your account in sync across sessions, and connect to X on your behalf.
• To process subscriptions and restore purchases.
• To keep the service secure and reliable: prevent abuse, enforce usage limits, and diagnose crashes and errors.
• To understand how the App is used, so we can improve it.
• To answer your support requests and send you the data export you ask for.
• To comply with legal obligations.

AI Processing

PostBee writes with large language models run by third-party AI providers. Nothing is sent to them until you agree in the App. With your agreement, we send the content needed for each request: your brief and instructions, the posts, links, screenshots and images you reply to or train from, and your profile's style rules, viewpoints, notes and example posts. The providers process it to answer our request. You can withdraw your agreement at any time in Settings › AI Data Sharing; writing and training then stay off, and your profiles and history remain available.

Who Do We Share It With?

We do not sell or rent your information. We share it only with the service providers that run the App for us, as needed for the purposes above:

• OpenAI, xAI and Google (Gemini): AI providers that generate drafts, train profiles and read screenshots. Which provider handles a request can change as we configure the service.
• X: the X API, to connect your account and to fetch public posts and profiles.
• Google Firebase: sign-in (Firebase Authentication), crash reporting, analytics, app configuration and app integrity checks. Google Sign-In, if you use it.
• Amazon Web Services: hosting, databases, file storage (such as uploaded screenshots and profile pictures), logging and email delivery.
• Apple: Sign in with Apple, App Store purchases and push notifications.
• Google AdMob: shows ads to free accounts and measures their performance (see Advertising below).

We may also disclose information:

• Legal Compliance: to comply with a subpoena, regulation or legal request, or to address fraud, security or safety issues.
• Business Transfers: if PostBee LLC is involved in a merger, acquisition or sale of assets, as part of that transaction.

Drafts are never posted to X unless you choose to post them. The App may link to third-party sites or apps; their own privacy policies apply there.

Advertising and Tracking

The free plan of PostBee shows ads served by Google AdMob. Premium has no ads. Ads never use your drafts, sources, profiles or X account content, and we do not sell your information.

• Advertising identifier. On the free plan, the App asks for permission through Apple's App Tracking Transparency prompt before it uses your device's advertising identifier (IDFA). Only if you allow it, Google receives the IDFA to measure ad performance and show ads relevant to your interests, which can involve your activity across other companies' apps and websites. If you don't allow it, the IDFA is never accessed and you see ads that are not personalized.
• What Google receives. Google AdMob collects device and ad interaction information (such as device type, OS version, IP address and the ads you see and tap) and processes it under Google's Privacy Policy (see also how Google uses information from apps that use its services).
• Opting out. Turn tracking off at any time in iOS Settings › Privacy & Security › Tracking, or upgrade to Premium to remove ads entirely.

Data Retention and Deletion

• Your account, profiles, sources and drafts are kept while you use the App, until you delete them or your account.
• Accounts that have not been used for 180 days are deleted automatically, unless they have an active subscription.
• Unfinished X sign-ins, and screenshots you upload but never use, are deleted after one day.
• Public X posts fetched from X are kept in a shared cache that is not tied to your account, and are not removed when you delete your account.
• Operational logs, backups and support emails are kept only as long as needed for their purpose, then deleted.

You can delete your account and its data at any time in the App, or by emailing us. See How to delete your account for the steps and for what is deleted.

Your Rights and Choices

• Access and export: in Settings, choose Download My Data to have a copy emailed to the address on your account.
• Correction: edit your profiles, rules, viewpoints and sources in the App.
• Deletion: delete individual items in the App, or your whole account in Settings.
• AI processing: turn it off at any time in Settings › AI Data Sharing.
• X access: disconnect the App from your X account in X's settings at any time.
• Ads and tracking: turn tracking off in iOS Settings › Privacy & Security › Tracking, or go Premium to remove ads.
• Notifications: turn push notifications off in your device settings.

Depending on where you live, you may have further rights over your personal information, such as to object to or restrict its processing. To make a request, email us at support@postbee.co.

Security

We use industry-standard practices to protect your data, including TLS encryption for all data transmitted between the App and our servers and encryption of your X tokens at rest. However, no electronic transmission or storage method is 100% secure. If you have security questions, contact us at support@postbee.co.

International Users

PostBee LLC is based in the United States, and our service providers may process your information in the United States and other countries. By using the App, you consent to the collection and processing of your information in the United States in accordance with U.S. privacy laws.

California Online Privacy Protection Act

We comply with CalOPPA and will not distribute your personal information to third parties without your consent, except as described in this policy.

Children's Online Privacy (COPPA)

PostBee is not directed at children under 13. If we become aware that a child under 13 has provided personal information, we will delete it and terminate the account. Please contact support@postbee.co if you believe this has occurred. Our Child Safety Standards describe how we prevent and report child sexual abuse and exploitation.

Updates to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced in the App or by email. The most current version will always be available at this URL.

Contact Us

Questions or concerns? Email us at support@postbee.co. We aim to respond within 30 days.