PostGaadiSign in

Privacy Policy

Effective 16 October 2026

PostGaadi lets you upload a video once and publish it to the social platforms you connect. This policy explains what we store to do that, why, how long we keep it, and how you can delete it.

Summary

  • We store your PostGaadi account, the platform connections you create, the media you upload, and the history of what you published.
  • Platform access tokens are encrypted at rest (AES-256-GCM) and are never shown in your browser.
  • We only act on a platform when you ask us to: publishing a video, checking a connection, or reading the statistics of posts you published through PostGaadi.
  • We do not sell your data, use it for advertising, or use data from platform APIs to train AI models.
  • You can disconnect a platform or delete your whole account at any time, and the data is deleted.

What we store

Your PostGaadi account

  • Name, email address and a salted hash of your password (we never store the password itself).
  • Preferences: time zone and notification settings.
  • Sign-in sessions, including the IP address and browser user agent of each session.

Connected platform accounts

When you connect YouTube, Instagram, Facebook, LinkedIn, Pinterest, TikTok or Telegram, we store:

  • The account or channel identifier, display name, username and profile picture URL the platform returns.
  • The permissions (scopes) you granted.
  • Encrypted access and refresh tokens (or, for Telegram, the bot token you provide). They are used only on our servers to publish and check status on your behalf.
  • Non-secret details needed to publish correctly, such as your role on a Facebook Page, your Instagram account type, your Pinterest boards, and the app-scoped user id Meta assigns to you.

We never ask for or store your social media passwords.

Uploaded media

  • The videos and thumbnails you upload, technical details we read from them (duration, resolution, codecs), a poster frame, and, if a platform needs it, a re-encoded copy. Your original file is never modified.

Campaigns and publishing history

  • Titles, captions, hashtags, schedules and per-platform settings you enter.
  • For each destination: its status, the identifiers and links of published posts, sanitized error messages and a record of each attempt.
  • Statistics of those posts (such as views and likes) where the platform provides them.
  • In-app notifications about your campaigns and connections.

Audit logs

  • Security-relevant events (sign-up, password resets, connecting or disconnecting accounts, uploads, publishing, deletions) with the time, IP address and user agent.

AI assistance (optional)

  • If you use the caption or title assistant, the text you provide and the suggestions generated are stored with your account.

How we use it

  • To run the service you asked for: validate destinations, publish your video, check publishing status, and show you results and statistics.
  • To keep the service secure: authentication, rate limiting, abuse prevention and audit logs.
  • To send you service emails, such as email verification and password reset.

We do not sell personal data, share it with advertisers, or use it for profiling. Data received from platform APIs is used only to provide features you can see in PostGaadi.

Data from Google, Meta, TikTok, LinkedIn and Pinterest

  • YouTube / Google. PostGaadi uses YouTube API Services to upload videos you choose to your channel and read the status and statistics of those videos. PostGaadi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. By connecting YouTube you also agree to the YouTube Terms of Service, and Google's use of data is described in the Google Privacy Policy. You can revoke PostGaadi's access at any time from your Google Account permissions page.
  • Facebook and Instagram (Meta). PostGaadi uses the Pages you select to publish videos and Reels and to read their status and statistics, and your Instagram professional account to publish Reels. You can remove PostGaadi in Facebook (Settings & privacy → Settings → Business integrations) or Instagram (Settings → Apps and websites). When you do, Meta notifies us and we stop using, then delete, that connection. See Data deletion.
  • TikTok, LinkedIn and Pinterest. We use the permissions you grant only to publish the content you choose and read its status and statistics. You can revoke access in each platform's app settings.

Who we share data with

We share data only with the services needed to run PostGaadi:

  • The platforms you connect (YouTube, Instagram, Facebook, LinkedIn, Pinterest, TikTok, Telegram). When you publish, we send the video, caption and settings you chose to that platform. Their own privacy policies apply to what you publish there.
  • Our storage provider (S3-compatible object storage), which stores uploaded media on our behalf.
  • Our hosting, database and email providers, which process data on our behalf to run the service and send service emails.
  • Our payment provider (Razorpay), when you buy a paid plan. Razorpay collects your payment details directly; we only store your subscription status, plan, amounts paid and Razorpay reference IDs.
  • Our AI provider (Anthropic), only when you use the AI assistant, which receives the text you submit to generate suggestions.

We may disclose data if required by law. If PostGaadi is ever transferred to another operator, this policy continues to apply to your data.

How long we keep it

  • Account, campaigns, publishing history and statistics: until you delete them or delete your account.
  • Platform tokens: until you disconnect the account, delete your PostGaadi account, or remove PostGaadi from the platform. They are deleted immediately at that point.
  • Deleted campaigns: kept for 30 days so you can undo, then permanently removed.
  • Uploaded media: until you delete it or your account. Uploads that never finish are removed after 24 hours.
  • Audit logs: kept for security after account deletion, but no longer linked to your account.
  • Backups: deleted data may remain in encrypted database backups until they expire on their normal schedule.

Deleting your data

  • Disconnect one platform: Accounts → Disconnect. The stored tokens and connection details are deleted, and we revoke the token with the platform where it supports this.
  • Delete everything: Settings → Delete account. This revokes platform tokens where possible, deletes your uploaded media from storage and deletes all your PostGaadi data. Posts already published on other platforms are not removed; delete them on the platform.
  • From Facebook or Instagram: remove PostGaadi from the app settings, or request deletion there. You will get a confirmation code you can check on our data deletion page.
  • By email: write to privacy@postgaadi.com from the address on your account.

Security

Traffic is encrypted with HTTPS. Platform tokens are encrypted at rest with AES-256-GCM and are never returned to the browser. Uploads use short-lived, size-limited links. Access to every record is checked against your account on each request.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. Most of this is available directly in the app; for anything else, contact us at privacy@postgaadi.com. You may also complain to your local data protection authority.

Children

PostGaadi is not intended for children under 16, and we do not knowingly collect their data.

Changes

If we change this policy, we will update the effective date above and, for significant changes, notify you in the app or by email before they take effect.

Contact

Questions or requests about privacy: privacy@postgaadi.com.