--- title: "Trust Center: GDPR, EU Hosting and Subprocessors" description: "PostQueen is made by Forceplay OÜ in Tallinn, Estonia, and runs on servers in Frankfurt. See every processor, how we protect data and your GDPR rights." canonical_url: "https://postqueen.ai/trust-center" markdown_url: "https://postqueen.ai/trust-center.md" last_updated: "2026-09-25" llms_txt: "https://postqueen.ai/llms.txt" --- # Built in the EU. Your data stays here too. Trust center PostQueen is made by Forceplay OÜ, a company in Tallinn, Estonia. The app and its database run on servers in Frankfurt, Germany, your media and backups are stored in the EU, and the GDPR shapes how we handle every piece of data. [Start 7-day trial for $0](https://app.postqueen.ai/auth?utm_source=postqueen.ai&utm_medium=landing&utm_campaign=trial&utm_content=trust-center-hero) [Read the privacy policy](https://postqueen.ai/privacy-policy) $0 due today. Cancel in one click. Where PostQueen runs In the EU, end to end. - Tallinn, Estonia The company: Forceplay OÜ EU company - Frankfurt, Germany The app, its database and scheduler Servers - European Union Your media and the backups Storage - TLS on every request - GDPR rights built in - Breach notice in 72 hours - EU company Forceplay OÜ, registered in Estonia - Frankfurt Germany where the app and database run - 72h breach notice to the authority, and to you where the law requires it - 30 days to erase an account’s remaining data after deletion Where your data lives ## Every processor, and where it runs. The app, your database and your media stay in the EU. These are the companies that help us run PostQueen, each under a contract that limits them to our instructions. | Processors Processor | What it does for us | Where | | --- | --- | --- | | Hostinger | Servers that run the app, its database and scheduler | Frankfurt, Germany | | Cloudflare | Storage for uploaded media and backups, and the bot check on sign-in | EU storage | | Stripe | Payments, subscriptions, invoices and tax | EU and US | | Resend | Sign-in codes and service emails | US | | Sentry | Error reports and the bug reports you send | Frankfurt, Germany | | OpenAI only when you use AI | AI Copilot, writing, images and slide scripts only when you use AI | US | | fal only when you use AI | Images for narrated slide videos only when you use AI | US | | ElevenLabs only when you use AI | Voice for narrated slide videos only when you use AI | US | | EvoLink only when you use AI | Seedance video only when you use AI | Hong Kong | | Vercel | Hosting this website, and page statistics if you consent | US and worldwide | | Dub | The affiliate program: affiliate links and commissions | US | Where a processor is outside the EEA, we rely on an adequacy decision of the European Commission, such as the EU and US Data Privacy Framework, or on the Commission’s Standard Contractual Clauses. We do not sell personal data. How we protect it ## Security you can actually check. No badges we have not earned. Just the measures that are in place today. ### Encrypted in transit Every request to PostQueen runs over TLS, from your browser, your agent and the API. ### No passwords in plain text Passwords and sign-in codes are stored only as one-way hashes. Codes stop working after 10 minutes. ### Guarded sign-in Rate limits and a bot check protect sign-in, and changing your password ends your older sessions. ### Access-controlled servers Only the people who run the service can reach the servers, and backups are kept off the server. ### Official sign-in to networks Most networks connect through their own sign-in, so we never see those passwords. Remove a channel and we stop using its access at once. ### Keys only admins can see Only workspace admins can reveal or rotate the API key, and approve an AI agent’s sign-in. AI agents, with guardrails ## Your agent helps. You stay in charge. ### Drafts stay drafts Ask your agent for drafts and nothing goes out until you schedule it. ### No deleting over MCP An agent can draft, schedule and read results. Deleting a post stays with you in the app. ### Admins approve agents An agent that signs in waits for a workspace admin to approve it. ### Revoke in one click Remove an agent under Connections, then Approved Apps, or rotate the API key. Your rights under the GDPR ## Your data. Your call. - See your data Ask for a copy of everything we hold about you. - Correct it Fix most of it yourself in Settings, then Account. - Take it with you Get the data you gave us in a machine-readable format. - Delete it Delete My Account removes identifying details at once, and the rest within 30 days. - Object or restrict Ask us to stop or pause a use of your data. - Change your mind Withdraw consent any time, for example in Cookie Settings. Email [support@postqueen.ai](mailto:support@postqueen.ai) from your account’s address. We answer within one month, and requests are free. For businesses and agencies ## The paperwork, ready when you are. ### Data processing agreement When your workspace holds data about your clients or teammates, we process it for you. Email us for a DPA under GDPR Article 28. ### A lead authority in the EU Our lead supervisory authority is the Estonian Data Protection Inspectorate. You can also complain in the EU country where you live or work. ### Clear retention Invoices are kept 7 years, as Estonian accounting law requires. Backups are replaced within 30 days. Support messages go within 24 months. The company behind it **Legal name** Forceplay OÜ **Registry code** 17013892 **VAT number** EE102906853 **Address** Narva mnt 5, 10117 Tallinn, Estonia **Contact** [support@postqueen.ai](mailto:support@postqueen.ai) [Check it in the Estonian Business Register](https://ariregister.rik.ee/eng/company/17013892/FORCEPLAY-O%C3%9C) ## The documents - [Privacy policy What we collect, why, and for how long](https://postqueen.ai/privacy-policy) - [Terms of service The agreement between you and us](https://postqueen.ai/terms-of-service) - [Trust and safety The rules for using PostQueen](https://postqueen.ai/trust) - [Cookie policy Every cookie, and how to change your choice](https://postqueen.ai/cookie-policy) ## Trust questions, answered. ### Where is my data stored? The app, its database and its scheduler run on servers in Frankfurt, Germany. Your uploaded media and the backups are stored in the EU with Cloudflare. ### Is PostQueen GDPR compliant? We are an EU company and the GDPR applies to everything we do: a clear legal basis for each use, your rights built in, EU hosting, contracts with every processor and breach notice within 72 hours. Businesses can ask us for a DPA. ### Do you sell my data or use it for ads? No. We do not sell personal data and we do not share it for cross-context behavioural advertising. ### What happens when I use the AI features? Your request, and the post text or media you choose, go to the AI provider only to produce the answer or the image, video or narration you asked for, and for nothing else. ### What happens when I remove a channel? We replace the access we stored for it at once, so PostQueen can no longer use it. You can also revoke our access in the network’s own settings. ### How do I delete my account? Choose Delete My Account in Settings. Identifying details are removed or replaced with one-way hashes at once, and the rest is erased within 30 days. ### Who can see my API key? Only admins of your workspace can reveal or rotate it. Members see it masked. An AI agent that signs in instead needs an admin’s approval. ### How do I report a security issue? Email [support@postqueen.ai](mailto:support@postqueen.ai) with the details. A person reads every report, and we fix what we confirm. Anything else? Write to [support@postqueen.ai](mailto:support@postqueen.ai) and a person answers. ### Built in the EU. Ready when you are. Your data stays in the EU, and every post waits on your calendar until it goes out. [Start 7-day trial for $0](https://app.postqueen.ai/auth?utm_source=postqueen.ai&utm_medium=landing&utm_campaign=trial&utm_content=trust-center-band) $0 due today. Cancel in one click.