Privacy Policy

The short version

• We collect what you give us and what you connect, so Postmigo can write and publish posts for you.
• We don’t sell your personal data, we don’t use it for advertising, and we don’t train AI models on your content.
• We share data only with the services that run Postmigo, listed below, and only what each one needs.
• Nothing is posted to X or LinkedIn unless you approve it.
• You can export your memories and posts, and deleting your account deletes your data.

What we collect

From X, when you sign in

Signing in with X asks you to grant Postmigo these permissions: tweet.read and users.read to read your posts and profile, tweet.write to publish the posts you approve, media.write to upload the images and video attached to them, and offline.access to stay connected without asking you to sign in every time. With them we read and store:

• your X account ID, handle, name, profile picture, bio, location, website, public counts such as followers, verification, and when the account was created — and your follower count once a day, to chart your growth;
• your posts and replies, and the engagement X reports for them, including views: your latest 50 when you first sign in or connect X, then new ones as you post;
• posts that mention you, and trends X shows your account;
• public posts and profiles of other accounts, when the reply desk looks for conversations on your topics or you ask Postmigo to read a post.

We don’t ask X for your email address or your direct messages.

From LinkedIn, if you connect it

Connecting LinkedIn grants openid and profile, which give us your LinkedIn member ID, name and profile picture, and w_member_social, which lets Postmigo publish the posts and images you approve. When company-page posting is turned on, it also asks for r_organization_admin (the pages you administer) and w_organization_social (to post for them). We don’t ask LinkedIn for your email address, and we don’t read your LinkedIn feed or messages.

What you give us

• What you write in Postmigo: drafts, edits, notes, rules, topics and, for a company, its brand details.
• Your conversations in Create and Interview me.
• The memories Postmigo keeps from your posts, and the ones you save from conversations. Saving a memory from a conversation always takes your tap; you can turn those offers off in Settings → Routines → Remember from conversations.
• Short notes about how you like to work — a standing ask such as “shorter”, a correction, what a word means to you — kept from your requests so later drafts follow them. They steer how Postmigo writes and are never used as facts in a post.
• Your decisions: which drafts you keep, edit, schedule or discard. Postmigo learns your style from them, inside your account.
• Your email address, if you add one in Settings → Notifications. It’s used only to confirm the address is yours, to send you a sign-in link when you ask for one, and to tell you when a scheduled post didn’t go out or your trial is about to end — never for marketing. Remove it there at any time, and every one of those emails has a link that stops them.
• Files you upload: X archives (we read only the posts in them), analytics CSVs, documents, images and videos. Websites and pages you ask Postmigo to read.

When you pay

Stripe collects your payment details and billing email on its own checkout pages; we never see your full card number. We send Stripe your name, X handle and Postmigo account ID so the subscription is matched to you, and we keep your Stripe customer ID, your subscription’s status, plan and billing period, and the IDs of the Stripe events that changed it. When a trial that needs a card starts, we read the billing email Stripe holds to send you one email with the trial’s terms and how to cancel. We don’t keep that address. If you withdraw from a subscription in Settings → Billing, we keep when you did, which subscription and packs, the name and email you gave, and the refund you’re owed, even after you close your account, as proof that the refund was owed and issued. We email your receipt to that address and send the same details to our support team, who issue the refund.

Activity and connection details

• Activity logs: records of what happened in your account — a post written, which AI model wrote it and what it cost, a publish attempt, a routine that ran. They run your usage meter and billing and help us fix problems.
• Your IP address, used in memory to slow down abusive traffic. We don’t store it with your account. The request logs kept by our hosting and network providers include it.

Cookies and local storage

Postmigo sets only the cookies it needs to work:

• boswell_session keeps you signed in, for up to 90 days.
• boswell_account remembers which of your accounts you’re using.
• Short-lived cookies while you connect X, LinkedIn or Higgsfield (names starting x_, li_ or hf_). They expire after 10 minutes or when the connection finishes.

There are no analytics, advertising or tracking cookies. Your browser’s local storage keeps preferences, such as the theme and panel sizes, and unsent work on that device.

How we use it

• To sign you in and keep your accounts separate.
• To keep your memories and topics, and to write drafts, replies and suggestions from them.
• To check drafts against what you’ve told Postmigo before you see them.
• To publish and schedule what you approve, and to measure how your posts on X do.
• To email you, if you added an address: to confirm it, and when a scheduled post didn’t go out or your trial is about to end.
• To send one email to your billing email when a trial that needs a card starts: what you’ll pay, from when, and how to cancel.
• To send a receipt to the email you give when you withdraw from a subscription, and to tell our support team the refund to issue.
• To find news and trends for your topics.
• To meter usage, bill you, keep Postmigo secure, and fix problems.
• To answer you when you contact us, and to meet legal obligations.

We use your data to provide the service you signed up for, for our legitimate interest in keeping it secure and working, and where the law requires. We don’t use it for advertising and we don’t sell it. We don’t train AI models on your content: Postmigo adapts to your style by keeping your own choices in your account and using them when it writes for you.

AI and automated processing

To write and read for you, Postmigo sends the text a task needs — your conversation, notes, memories, drafts or posts — to the AI providers below, along with images you attach for it to read and the audio of videos you add, for transcripts. Their answers are suggestions: nothing is published until you approve it, and no decision with legal or similarly significant effects about you is made automatically.

Who we share it with

Inside Postmigo, only the people who run the service can reach your data, and only to run, support and secure it. These services process data for us, to run Postmigo:

Other services our servers contact

To find news for your topics, our servers send search words — never your name or account — to public news, discussion and reference sites such as Bing News, Google News, Hacker News, Reddit, Lobsters and Wikipedia. When you paste a YouTube link, Supadata reads that video’s captions for us. Where links to other sites are switched on, our servers fetch a video or its transcript from where it lives, such as YouTube, Vimeo or Loom. When you ask Postmigo to read a web page, our servers or Tavily fetch it. When you search for stock B-roll for a video or a stock photo for a carousel, our servers send your search words — never your name or account — to Pexels, or to Openverse for photos and Pixabay for videos, and download the video or photo you pick from it (an Openverse photo from the site that hosts it, such as Flickr or Wikimedia Commons).

Apps you connect

If you connect an app such as Claude, ChatGPT, Codex or the Postmigo command line in Settings → Agents & apps, it acts for you and receives what you ask it to read through Postmigo — your videos’ details, clips, drafts, schedule and how your posts did — under its provider’s own terms and privacy policy. It’s your service, not one we use. We keep each connection (the app’s name, what it may do, when it was made and last used), a hash of each key and token — never the key itself — and a log of each call without its content. Revoke a connection or a key in Settings → Agents & apps.

Things your browser loads from other services

Some screens load content straight from other services, which see your IP address when they do: X and LinkedIn profile pictures, small website icons from Google’s favicon service in Create, YouTube’s privacy-enhanced player and thumbnails when you work with a YouTube video, and Pexels’, Openverse’s and Pixabay’s previews when you search their stock videos or photos.

If you use the microphone in Create, your browser turns your speech into text with its own speech service — in Chrome, for example, Google processes the audio. Only the text reaches Postmigo; we never receive or keep the audio.

When the law or a sale requires it

We may disclose data when the law requires it, or to protect people’s safety or Postmigo’s rights. If Postmigo is sold or merged, your data moves with it and this policy keeps applying to it.

How long we keep it

• Your memories, drafts, posts, conversations, files and connections: until you delete them or close your account.
• Versions Postmigo wrote that never became a saved draft: 90 days.
• Activity logs: 90 days; progress through first-session onboarding: 365 days. Records of account and billing actions — who acted as which account, checkouts, plan changes — and the latest run of each routine stay for as long as the account exists.
• Records of publish attempts on finished posts: 180 days.
• Uploaded files that nothing in your account uses any more: 7 days.
• Your email address: until you remove it or close your account. A note of each email we sent you — which kind and when, never what it said: 90 days.
• Backups of the database and files: up to 97 days, then they are deleted.
• Stripe keeps payment records under its own obligations.
• If you asked to join while sign-up is by invitation and haven’t been admitted, your request — your X account ID, handle, name and the public profile details X showed us — stays so we can review it. Write to [email protected] to have it deleted.

When you close your account, it goes at once, with every account you own and their files. What’s left: copies in backups until they expire; Stripe’s records; the IDs of Stripe events we processed, no longer linked to you; the numeric ID of the X account you signed in with and the date its trial started, so the trial stays once per X account if you come back; and, if you joined through the invite list, the decision to admit you, kept with that same ID — your handle, name and profile details are removed — so that decision still holds too; and the details of any withdrawal from a subscription — when, which subscription, the name and email you gave, and the refund it was owed — so the refund is issued and can be shown to have been. Posts you published stay on X and LinkedIn.

Your rights and choices

• Export. On the Import page (your account menu → Import), Download my data saves one JSON file with your login and every account you own: memories and the links between them, notes, drafts and posts, post metrics, conversations, how-you-work notes, your keep-and-discard decisions, imports, the list of your files, image and clip records, publishing attempts, your email address and a list of the emails we sent you, and your plan, billing events, withdrawals and usage — up to 20,000 rows of each, newest first, and the file says if any were cut. It never includes a password or access token. It doesn’t include the files themselves, operational logs (kept 90 days) or backups; ask [email protected] for those.
• Correct and remove. Edit your drafts, and remove a memory in Brain → Memory. A memory that a published post relies on is kept with that post. Your X profile details come from X; change them there.
• Switch things off. Settings → Routines turns off what Postmigo does on its own, account by account. Settings → Connectors disconnects X, LinkedIn, YouTube, TikTok, Instagram or Higgsfield: we ask the service to end Postmigo’s access (Higgsfield, where its sign-in server supports it; Instagram has no way for us to ask, so you remove Postmigo in Meta Business Settings), then delete the stored connection. Settings → Notifications turns Postmigo’s emails off or removes your address; the Stop these emails link in each email turns them off in one click. The one email confirming a card trial’s terms, sent once to your billing email when the trial starts, isn’t affected by either, and neither is the receipt for a withdrawal from a subscription. A sign-in link is sent only when someone asks for one for your address; removing the address stops those.
• Delete everything. Settings → Account → Delete account deletes your login, every account you own and their data and files, cancels any subscription, and asks X, LinkedIn and Higgsfield to end Postmigo’s access.
• Anything else. Write to [email protected]. Depending on where you live, you may have the right to access, correct, delete or port your data, and to object to or restrict how we use it; you can also complain to your data protection authority.

Security

• The X, LinkedIn and Higgsfield connections we store are encrypted at rest with AES-256-GCM.
• Access codes, API keys and the tokens of apps you connect are stored only as hashes.
• Connections to postmigo.ai are encrypted in transit with TLS (HTTPS).
• Your private files are served only to the account that owns them.
• Sessions end after 90 days, and Settings → Account → Sign out everywhere ends them all at once.

No system is perfectly secure. If you find a problem, tell us at [email protected].

Children

Postmigo is for people 18 and older. We don’t knowingly collect data from anyone younger. If you think someone under 18 has an account, write to [email protected] and we’ll delete it.

Where your data is processed

Postmigo’s servers run on Google Cloud in the United States (the us-central1 region). If you use Postmigo from elsewhere, your data is transferred to and processed in the United States. The services listed above may process data in other countries under their own terms.

Changes to this policy

The date at the top says when this policy last changed. If a change is significant, we’ll give you notice before it takes effect.

Contact

Privacy questions and requests: [email protected]. Everything else: [email protected], or see Contact. Postal: Orbyt Social, Inc., United States.