Privacy Policy

Last Updated: October 2026

1. Introduction

posthell ("we", "our", or "us") is a social media post scheduler operated by Rohan Gotwal as a sole proprietor. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use posthell to compose, schedule, and publish posts to your connected social networks.

By using posthell, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use the service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address (for sign-in via a one-time code)
  • Name (optional)
  • Subscription and billing information (processed by DodoPayments; we do not store your card details)

2.2 Connected Social Accounts

When you connect a social network, the connection (OAuth) is brokered by our publishing partner, Post for Me. We store only a reference to that connection so we can publish on your behalf:

  • The network (e.g. X, LinkedIn, Instagram), your handle, display name, and avatar
  • A connection identifier from our publishing partner and the connection status

We do NOT store your social network passwords or access tokens. Those are held by our publishing partner, which performs publishing for us. When you disconnect an account, we ask our publishing partner to disconnect it and revoke its access.

2.3 Content You Create

To provide the service, we store the content you give us:

  • Post text, including any per-network variations you write
  • Media you upload (images and video)
  • Schedules, draft status, and the publishing outcome of each post

2.4 YouTube and Google User Data

posthell uses YouTube API Services to publish videos to YouTube for you. When you connect a YouTube channel, you sign in with Google and choose which permissions to give posthell. By connecting a YouTube channel, you agree to be bound by the YouTube Terms of Service, and Google handles your data under the Google Privacy Policy.

With your permission, posthell accesses only:

  • Your channel name and profile picture, so you can see which channel is connected
  • The ability to upload videos, so we can publish the videos you add and schedule in posthell
  • The details of those videos (title, description, tags, category, visibility and publish time), which we set from what you enter in posthell
  • The list of videos posthell published for you and their links, so you can see each post's status
  • View, like and comment counts for those videos, shown to you on posthell's Analytics page

We use this data only to publish your videos and to show you your own channel and post results inside posthell. We never change, delete or comment on videos you did not publish through posthell, we never sell YouTube data, we never use it for advertising, and we never share it except with our publishing partner, Post for Me, which performs the upload for us. Video statistics are read when you open Analytics and kept only briefly so the page loads quickly; we do not keep a long-term copy of them.

posthell's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect a YouTube channel at any time from the Accounts page in posthell. You can also revoke posthell's access from your Google security settings at myaccount.google.com/permissions. After you revoke access, posthell can no longer read from or post to your channel. To delete the data posthell holds about your channel, delete the posts in posthell or delete your posthell account in Settings, or email us at the address below.

2.5 Usage Analytics

We use a third-party analytics tool (AnalyzeUser) on our marketing and application pages to understand how the product is used and to improve it. This may collect:

  • Pages visited and basic interactions
  • Browser type, device type, and operating system
  • Approximate location (country/city, derived from IP address)
  • Referrer information (the site that led you to us)

We also use Microsoft Clarity to see how people use our pages. It records clicks, scrolling and mouse movement as session replays and heatmaps. Clarity hides numbers, email addresses and anything typed into a form field, but other text shown on a page, such as your posts in the calendar, can appear in a replay. Our admin pages and one-tap approval links are never recorded, and payment details go into DodoPayments' own form, which Clarity cannot see. Microsoft handles this data under the Microsoft Privacy Statement.

We use this data to improve posthell, never to advertise to you.

3. How We Use Your Information

We use the collected information to:

  • Publish and schedule your posts to the networks you connect
  • Provide and maintain the service, including drafts, the calendar, and post analytics
  • Process payments and manage your subscription and its usage allowances
  • Send sign-in codes and service notifications (for example, a notice that you are close to your monthly posts, or that a payment failed)
  • Improve the product and develop new features
  • Prevent fraud and abuse, and comply with legal obligations

We do NOT:

  • Sell your data to third parties
  • Use your content or data for advertising
  • Post anything on your behalf that you did not schedule or request
  • Read or use your content for any purpose other than operating the service

4. Data Storage and Retention

4.1 Data Retention Periods

We retain your posts, scheduled content, media, and connected-account references for as long as your account is active. When you disconnect an account, we ask our publishing partner to disconnect it and revoke access.

Account information is retained until you delete your account.

4.2 Data Storage Location

Your data is stored in secure databases provided by Supabase (PostgreSQL) and on hosting provided by Vercel. These providers may process data in various regions; please refer to their privacy policies for details.

5. Data Sharing and Disclosure

We share data only in the following circumstances:

5.1 Service Providers

  • Post for Me: Brokers the connection to each social network (including YouTube) and publishes your posts
  • Supabase: Database hosting and authentication
  • DodoPayments: Payment and subscription processing
  • Resend: Transactional and service email delivery
  • AnalyzeUser: Product usage analytics
  • Microsoft Clarity: Session replays and heatmaps of how our pages are used
  • Vercel: Application hosting

These providers are bound to protect your data and use it only for the purposes we specify. When you publish a post, its content is necessarily shared with the social networks you have chosen.

5.2 Legal Requirements

We may disclose information if required by law or in response to valid legal requests.

6. Your Rights (GDPR & CCPA)

If you are located in the European Economic Area (EEA), California, or other regions with data protection laws, you have the following rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data ("Right to be Forgotten")
  • Right to Data Portability: Receive your data in a structured, machine-readable format. You can export your data at any time from Settings
  • Right to Object: Object to processing of your data
  • Right to Restrict Processing: Request limitation of data processing
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at: contact@posthell.com

We will respond to your request within 30 days (or as required by applicable law).

7. Cookies and Local Storage

posthell itself only uses browser storage that is essential to the service, primarily to keep you signed in (managed by our authentication provider, Supabase). We do not run ads.

Our analytics providers set their own cookies, as described in Section 2.5. AnalyzeUser may set cookies or use local storage to measure product usage. Microsoft Clarity sets cookies on our site (_clck and _clsk) to connect your page views into one replay, and Microsoft sets cookies on its own domains (such as MUID and CLID) that Microsoft also uses for its own purposes, including advertising. For visitors in the EEA, the UK and Switzerland, Clarity runs without cookies.

You can block these cookies through your browser settings or a content blocker and posthell keeps working. Disabling the essential sign-in storage will stop you from signing in.

8. Data Security

We implement industry-standard security measures:

  • Encryption in transit (HTTPS/TLS)
  • Encryption at rest for sensitive data
  • Row-level access controls and authenticated APIs
  • Holding social network credentials with our publishing partner rather than in our own database
  • Secure API key management

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

Our service is not intended for children under 13 (or 16 in the EEA). We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We rely on our service providers' safeguards, including standard contractual clauses where applicable, and compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on our website. The "Last Updated" date at the top indicates when changes were made.

Your continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us: