Skip to content
post.social

Legal

Privacy Policy

Effective July 21, 2026

This Privacy Policy explains how NextScripts Corp (“we,” “us,” or “PostSocial”) collects, uses, processes, shares, and protects your information when you access post.social, web.post.social, our developer APIs, and associated web services.

1. Information We Collect

To provide and maintain the Service, we process the following categories of data:

  • Account and Profile Details: Name, verified email address, account preferences, and authentication logs.
  • Project Content and Media: Post drafts, text, media attachments (images, video links), and scheduled publishing configurations.
  • Destination and Social Credentials: Public profile metadata, target community identifiers, and OAuth access tokens or integration credentials. All access tokens and sensitive credentials are encrypted at rest and isolated from public application layers.
  • Delivery and Usage Records: Detailed logs of publication attempts, API responses from destination networks, timestamp data, and credit consumption records.
  • Billing Information: Billing contact details, transaction histories, and subscription identifiers. Direct payment card details are processed directly by our payment processor, Stripe; PostSocial never stores full card numbers.

2. How We Use Your Information

We process data solely to authenticate users, manage Projects and publishing queues, execute and troubleshoot social content delivery, prevent spam and abusive automation, secure platform infrastructure, provide customer support, and meet financial and statutory compliance requirements.

3. Third-Party Integrations and Processors

We do not monetize, rent, or sell your personal data. We disclose information strictly on a need-to-know basis to:

  • Connected Destinations: Third-party social networks (Meta, X, LinkedIn, Telegram, etc.) and WordPress sites as directed by your publishing settings.
  • Infrastructure and Core Services: Cloud hosting, transaction email providers, and security monitoring infrastructure.
  • Payment Gateways: Stripe for secure billing and payment operations.

4. Public Content and Media Routing

Media files uploaded for immediate or scheduled delivery are assigned unlisted, public-facing CDN URLs so target networks can ingest them. Any content intentionally dispatched to public social channels or published via a Project Public Page becomes accessible to third parties and the public. You are responsible for ensuring you have full authorization to distribute submitted media.

5. Data Retention Schedules

We apply differentiated retention rules based on operational and compliance requirements:

  • Core Audit Records: Post snapshots, final delivery statuses, remote post identifiers, execution timestamps, and credit ledger histories are retained for the lifetime of your account for operational auditing and accounting.
  • Technical Debugging Logs: Raw provider payloads, detailed network request/response headers, login histories, revoked session tokens, and administrative audit traces are automatically purged after 365 days.
  • Active Sessions: Session tokens remain active until deliberate sign-out or session expiration.

6. Account Deletion and Lifecycle

You can request account deletion at any time via your workspace settings. Upon submission, a 30-day grace period commences during which your Workspace becomes read-only. At the end of this period, all personal profile data, connected channels, scheduled posts, media files, and authentication tokens are permanently purged or irreversibly anonymized, except where statutory tax or legal retention rules require otherwise.

7. Your Privacy Rights

Depending on your jurisdiction (including GDPR in Europe and state privacy laws in the United States), you have the right to access, rectify, export, or restrict the processing of your personal data. You can manage connected accounts and active sessions directly from your settings panel or contact our privacy team for formal data requests.

8. Security and Cross-Border Transfers

We implement modern security safeguards, including TLS in transit, database encryption at rest, and strict network perimeter controls. Because our systems and service providers operate internationally, your information may be transferred and processed across jurisdictions subject to appropriate contractual safeguards.

9. Contact Us

NextScripts Corp
PO Box 1173, Fair Lawn, NJ 07410, USA
support@post.social