This Privacy Policy explains how postqueen.ai ("postqueen", "we", "us") collects, uses and shares personal data when you use our website, our cloud service and our apps. It applies to the hosted postqueen service; if you self-host the open-source version, the operator of that installation is responsible for its data handling.

1. Information we collect

Account information

Name, email address, password hash, workspace settings and, if you sign in with Apple or Google, the identifiers those providers share with us.

Connected social accounts

When you connect a social channel, we store the OAuth tokens and basic profile details (account name, avatar, account ID) needed to publish on your behalf. We never store your social media passwords, and tokens are revoked when you disconnect a channel or delete your account.

Content you schedule

Posts, media, captions, comments and schedules you create in postqueen, for as long as you keep them in your workspace.

Usage and device data

Log data (IP address, browser, pages viewed, timestamps), diagnostic events and crash reports, used to keep the service secure and reliable.

Payment information

Payments are processed by Stripe. We receive subscription status, plan, and the last four digits of your card, never the full card number.

Advertising identifiers and attribution

We run no advertising pixels and no attribution trackers. If a link brought you here with campaign tags in its address, we read them to see which campaign it was, and they are not tied to you.

2. How we use your information

To provide the service: scheduling, publishing and analytics for your connected channels.
To operate AI features you invoke (drafting, image generation) on the content you provide.
To secure accounts, prevent abuse and comply with law.
To improve the product through aggregated, cookieless analytics.
To send service emails and, with consent, product updates.

3. Legal bases (GDPR)

We process data to perform our contract with you (Art. 6(1)(b)), with your consent for analytics and marketing (Art. 6(1)(a)), to meet legal obligations (Art. 6(1)(c)) and for legitimate interests such as fraud prevention (Art. 6(1)(f)).

4. Who we share data with

We share data only with processors that help us run postqueen, with the social platforms you explicitly connect, and where the law requires it. We do not sell personal data.

Data recipient summary

Recipient	Purpose	Data shared	Region
Stripe, Inc.	Payment processing	Name, email, payment details	US / EU (SCCs)
Connected social platforms	Publishing your scheduled content	Post content, media, publish times	Per platform
Vercel Inc.	Website analytics and page speed measurement	Page path, referrer, country, device type. No cookie or identifier.	US / EU (SCCs)
Apple / Google sign-in	Authentication	Sign-in identifiers	Global
Cloud hosting provider	Infrastructure	All service data (encrypted)	EU / US (SCCs)

5. Cookies and tracking

We use essential cookies plus optional analytics and marketing cookies controlled by the consent banner. Details and durations are in our Cookie Policy; you can change your choice any time via "Cookie Settings" in the footer.

6. Security

Data is encrypted in transit and at rest; social tokens are stored encrypted; access is limited to personnel who need it. No system is perfectly secure, so please use a strong, unique password.

7. Data retention

We keep your data while your account is active. After deletion, personal data is removed or anonymized within 30 days, except records we must keep for tax and accounting law (kept up to the statutory period, then deleted).

8. Your rights

Depending on your location you may access, correct, export, delete or restrict processing of your data, object to processing, withdraw consent, and lodge a complaint with your supervisory authority. To delete your account, follow the steps on Delete My Account or email us.

9. International transfers

Where data leaves the EEA/UK, we rely on adequacy decisions or Standard Contractual Clauses with the recipients listed above.

10. Children

postqueen is not directed at children under 16 and we do not knowingly collect their data.

11. Changes to this policy

We will post any changes here and update the date above; material changes will be announced in the app or by email.

12. Company information & contact

Company name: Forceplay OÜ
Service brand: postqueen
Registration country: Estonia (EU)
Registered address: Harju maakond, Tallinn, Kesklinna linnaosa, Narva mnt 5, 10117
Website: postqueen.ai
Email: support@postqueen.ai

This policy is governed by the laws of Estonia and the European Union.