Last Updated: February 12, 2026
1. Introduction
Welcome to Postlazy ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you use our website and services at postlazy.com.
By accessing or using Postlazy, you agree to this Privacy Policy. If you do not agree with our policies and practices, please do not use our service.
2. Information We Collect
2.1 Information You Provide
- Account information: When you register, we collect your name, email address and password.
- Profile information: Any additional information you provide in your profile, including business context and website URLs.
- Payment information: When you subscribe to our premium services, payment details are collected and processed by our payment processor, Stripe. We do not store your full credit card number.
- Content: Information you input to generate content, including topics, preferences, prompts, images, videos, and any custom inputs for AI content generation.
- Communications: Information you provide when contacting us for support or other inquiries.
2.2 Social Media Integration Data
When you connect your social media accounts to Postlazy, we collect and store the following for each platform:
- OAuth access tokens and refresh tokens provided by each social media platform
- Profile information from connected platforms (username, profile picture, account/channel ID)
- Platform-specific identifiers (e.g., Facebook Page IDs, YouTube Channel IDs, TikTok user IDs)
- Token expiry information for automatic token refresh
We currently support integration with the following platforms: X (Twitter), Instagram, Facebook, LinkedIn, TikTok, and YouTube. Each platform has its own authorization process and data access policies.
2.3 Automatically Collected Information
When you use our service, we automatically collect:
- Usage data: Information about how you interact with our platform, features you use, content you generate, posts you schedule, and videos you create
- Device information: IP address, browser type, operating system and device identifiers
- Cookies and similar technologies: We use cookies and similar tracking technologies to enhance your experience and collect information about how you use our service
- Analytics data: We use Google Analytics to understand how users interact with our platform
3. How We Use Your Information
We use your information for the following purposes:
- Provide, maintain and improve our services, including AI content generation, image generation, video generation, and post scheduling
- Process payments and manage subscriptions through Stripe
- Connect to and post on your social media accounts with your authorization
- Generate AI-powered text content, images, and videos based on your inputs and preferences
- Schedule and automatically publish content to your connected social media accounts at your specified times
- Refresh authentication tokens to maintain your social media connections
- Analyze usage patterns to enhance user experience
- Communicate with you about updates, features and support
- Protect against unauthorized access and ensure platform security
- Comply with legal obligations
4. How We Share Your Information
We may share your information with the following categories of third parties:
- Social media platforms: When you connect your accounts and schedule posts, we share your content with X (Twitter), Instagram, Facebook, LinkedIn, TikTok, and/or YouTube as necessary to publish content on your behalf
- Payment processor: Stripe processes your payment information for subscription billing
- AI service providers: OpenAI (for text and image generation) and Google (for video generation) process your prompts and inputs to generate content. These providers may process your inputs according to their own privacy policies
- Cloud infrastructure providers: Vercel (hosting and deployment), Amazon Web Services (video rendering and file storage), and Neon (database hosting) provide the infrastructure for our services
- Email service provider: Resend handles transactional emails on our behalf
- Analytics providers: Google Analytics helps us understand usage patterns
- Legal requirements: When required by law, legal process, or government requests
- Business transfers: In connection with a merger, acquisition, or sale of assets
We do not sell your personal information to third parties for marketing purposes.
5. YouTube API Services
Postlazy uses YouTube API Services to enable you to connect your YouTube channel and upload videos. By connecting your YouTube account through Postlazy, you are agreeing to be bound by the YouTube Terms of Service.
When you connect your YouTube account, we access and store:
- Your YouTube channel name and profile picture
- Your YouTube channel ID
- OAuth 2.0 access tokens and refresh tokens to maintain your connection and upload videos on your behalf
We use this data solely to upload videos and manage content on your YouTube channel as directed by you. You can revoke Postlazy's access to your YouTube data at any time by:
- Disconnecting your YouTube account from Postlazy's Social Accounts settings page
- Removing Postlazy's access through your Google Account permissions page
Google's Privacy Policy applies to data collected and processed by Google through the YouTube API Services: https://policies.google.com/privacy
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of passwords using bcrypt hashing
- Secure storage of social media tokens in our encrypted database
- Rate limiting on all API endpoints to prevent abuse
- HTTPS encryption for all data in transit
- Access controls to limit who can access your data
However, no method of transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee absolute security.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide our services. Specifically:
- Account data is retained until you delete your account
- Generated content (posts, images, videos) is retained until you delete it or your account
- Social media tokens are retained until you disconnect the account or they are revoked
- Payment records are retained as required for accounting and legal purposes
- Usage logs are retained for up to 12 months for analytics and debugging purposes
When we no longer need your information, we will securely delete or anonymize it.
8. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
- Access and update your information through your account settings
- Request deletion of your personal information and account
- Opt-out of marketing communications
- Disconnect social media accounts at any time, which will delete stored tokens for that platform
- Request export of your data
- For EU/EEA residents: Rights under GDPR including access, rectification, erasure, restriction, data portability and objection
- For California residents: Rights under CCPA/CPRA
- For UK residents: Rights under UK GDPR
To exercise these rights, please contact us using the information provided in the "Contact Us" section.
9. Children's Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we learn we have collected personal information from a child under 16, we will delete that information promptly.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States and Australia (where some of our infrastructure is hosted). These countries may have different data protection laws. We will take appropriate measures to protect your information in accordance with this Privacy Policy.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date. We encourage you to review this Privacy Policy periodically. If we make material changes, we will notify you by email or by posting a prominent notice on our website.
12. Contact Us
If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:
Email: privacy@postlazy.com
