Privacy policy

What Postwyre stores

Account details for each team member (name, email, a hashed password), your workspaces and the posts and records you create in them, including each post's text, schedule and the result of each send. When you connect a Bluesky account, Postwyre stores its handle, name and profile picture address, and the app password you enter, encrypted. It does not store Bluesky's session tokens. The saved password is used only to publish or schedule the content you direct, through your own agent or the product's interface; Postwyre does not read your connected accounts' content beyond what Bluesky's API requires to post and report back on that post. Disconnecting an account deletes the saved password.

Connected platforms

Bluesky is the only platform you can connect today. Instagram, Facebook Pages, Threads, X, TikTok and YouTube are built but not switched on. Everything below applies from the day a platform is switched on.

• What we read. Only the profile of the account you connect, so the Accounts screen can show it, and for TikTok the account's current posting options. We do not read your followers, messages, comments, analytics or other posts.
• What we post. The text, pictures and video you or your agent send, to the account you chose, when you send or schedule them.
• Instagram. You sign in on Instagram. We ask to read the account's id, username, name, picture and account type, and to publish. Posts need a Business or Creator account.
• Facebook Pages. You sign in on Facebook and pick the Pages to connect. We read each Page's name, picture and the access token Facebook gives for it, and we publish to those Pages only, not to your personal profile. Facebook bundles reading Page engagement into the permissions publishing needs, and Postwyre does not read it.
• Threads. You sign in on Threads. We read the profile's id, username, name and picture, and publish.
• X. You sign in on X. The sign-in goes through Postwyre's own X app when it is available. If it is not, X connects only through a workspace's own X app. A workspace can also choose its own X app at any time: it pastes the app's client id and secret, which we store encrypted, and accounts it connects afterwards go through that app. We read the account's id, username, name and picture, and publish posts and the media attached to them. We count the posts each workspace sends through our X app each month, to apply its plan's X limit.
• TikTok. You sign in on TikTok. We read the account's display name and picture, and each time you open the TikTok post screen we ask TikTok what the account may do. We upload the video you choose. Until TikTok approves our app, TikTok limits every post to Only me, so Postwyre posts to TikTok as private and nothing posts publicly.
• YouTube (Google). You sign in with Google. We ask to upload videos and to read your channel, which we use to find the channel and show its name and picture. We do not read your videos, comments or analytics. Until Google verifies our app, Postwyre uploads to YouTube as private and nothing posts publicly. Postwyre's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Tokens. The sign-in tokens each platform gives us are stored encrypted and used only to post what you direct and to renew themselves before they expire. They are never shown to anyone, including workspace admins.
• Revoking access. Disconnecting an account on the Accounts screen deletes its saved tokens from Postwyre at once. It does not tell the platform, so also remove Postwyre from the connected apps in that platform's settings, which cuts off access on its side. If a platform stops accepting a token, the account shows a Reconnect button and posts waiting for it fail until you reconnect. Posts already published stay on the platform until you delete them there.

Third-party processors

The application and database run on Vercel and Neon. Attached files are stored in Cloudflare R2. A post you send goes to the platform you chose, today Bluesky, which receives its text and the sign-in for the account you connected. Once another platform is switched on, it receives the same for its accounts: Meta for Instagram, Facebook Pages and Threads, X, TikTok, and Google for YouTube. No AI feature is switched on today, so no text you enter is sent to an AI provider. If one is added, this page and the subprocessors page will name it before it handles any of your text. No data is sold. The only data shared for advertising is the ad measurement described below. The subprocessors page lists each vendor and the data it handles.

Ad measurement (Meta pixel)

Our home, pricing, contact and legal pages and the signup page use the Meta pixel, from Meta Platforms, to measure our ads on Facebook and Instagram. The pixel tells Meta which of those pages you view and sets Meta's cookies (_fbp, and _fbc when you arrive from an ad). When you create an account, and when you start a trial or a paid plan, the page you land on tells Meta too. Meta never receives your posts, workspace data or card details. Inside your workspace, the pixel loads only on the page you return to after checkout, to report that one event.

To opt out, turn on Global Privacy Control in your browser: we then load no pixel and send Meta nothing about you. You can also block cookies from facebook.com, or change how Meta uses this data in the ad settings of your Facebook or Instagram account.

Where data lives

Postwyre is one shared service with many workspaces. Each workspace's posts, connected accounts, records, attachments and team membership are scoped to that workspace; one login can belong to several workspaces, but workspaces do not see each other's data.

Deletion requests

You can delete a draft or a scheduled post that has not started, and disconnect an account, from within the product. An admin can delete any record, which removes the database row and any attached file. A post already published to Bluesky is removed from Bluesky in Bluesky. To request deletion of an account or of data you cannot reach yourself, contact the operator at privacy@postwyre.com.

Cookies

Postwyre sets one strictly necessary cookie to keep you signed in. On the pages listed under Ad measurement, the Meta pixel also sets Meta's advertising cookies, as described under Ad measurement. There are no other analytics or advertising cookies.

Contact

Questions about this policy can be sent to privacy@postwyre.com.