Privacy Policy

Who we are

PostGate is operated by Iglu Online Projetos Web LTDA, which operates the postgate.studio website, dashboard, and API. For account, billing, security, and service telemetry data, Iglu Online Projetos Web LTDA is the controller. For the content and social account data you ask us to process, you (or your organization) are the controller and Iglu Online Projetos Web LTDA is the processor. Contact for any privacy matter: [email protected].

Data we process

Account identity (name, email, and avatar from our sign-in provider), workspace membership and roles, encrypted social platform credentials and OAuth tokens, the content and media you submit for publication, delivery logs and analytics snapshots, comments and messages synced from accounts you connect, billing identifiers, support communications, and technical logs needed for security and reliability.

Social network data, per platform

Facebook Pages, Instagram, and Threads (Meta): page and account identifiers, display names, avatars, encrypted access tokens, identifiers and permalinks of posts published through PostGate, engagement metrics, and — only for accounts you connect — comments and messages that you ask PostGate to sync so you can reply from your workspace.

TikTok: creator identity (open ID, display name, and avatar), profile statistics (followers, following, total likes, and public video count), public video identifiers and engagement metrics (views, likes, comments, and shares), current creator posting settings (privacy options, interaction toggles, and maximum video duration), encrypted access and refresh tokens, and the status of publications you request.

Google Business Profile: business location identity, encrypted OAuth tokens, publish status, and identifiers for content you ask PostGate to publish.

LinkedIn: personal profile connections use member identity (name, picture and member URN). Organization Page connections use only the identifiers, names and logos of Pages you administer and explicitly select, encrypted OAuth tokens, granted permissions and identifiers of posts published at your instruction. The Page connection does not request your member profile, contacts, follower identities, comments, messages or engagement data. Unselected Page choices and their encrypted credentials expire after ten minutes and are removed by periodic cleanup.

Pinterest: the minimum account identity needed to label the connection, encrypted access and refresh tokens, the board identifier you explicitly select for a publication, and identifiers of Pins created through PostGate. Board names are fetched live when you compose a Pin and are not retained. Pin analytics are fetched live when you open the published post and are not stored as analytics snapshots.

Bluesky and Mastodon: account identity and handle, the service or instance you connect, encrypted session credentials or tokens, and identifiers of published posts.

Telegram: bot token you provide (encrypted), destination chat or channel identity, message identifiers, and — if you enable it — inbound messages for the chats you connect.

LinkedIn Page data use

Page data is used only to identify the Pages you select, verify your publishing access and deliver your requested publications within your workspace. PostGate does not use LinkedIn Page API data for lead generation, recruiting, advertising, member profiling, public social feeds or AI model training. You can disconnect a Page or delete your workspace; the Data Deletion page explains both actions.

YouTube API Services data

PostGate uses YouTube API Services and accesses only the data needed for the features you request: your YouTube channel ID, title, thumbnail, subscriber count, channel view count and video count; encrypted OAuth access and refresh tokens; and, for videos managed through PostGate, the YouTube video ID, privacy status, view count, like count, and comment count. PostGate never receives or stores your Google password.

While your authorization remains active, PostGate stores your channel ID, title, thumbnail, encrypted OAuth tokens, video IDs, permalinks, upload status, and normalized analytics snapshots. It also stores the video and metadata you provide — title, description, privacy setting, audience setting, and scheduled publication time — so it can perform the upload or scheduling instruction you explicitly submit. YouTube analytics snapshots are refreshed or deleted within 30 days. If authorization is revoked, Google-authorized data is deleted as soon as possible and no later than seven days.

PostGate uses this data only to identify the channel you authorized, maintain its connection, upload or schedule videos at your instruction, show the publication result, and display channel and video performance to users of the same workspace. YouTube API data is shown in dedicated YouTube views and is not combined with data from other social networks. PostGate does not sell YouTube API data or use it for advertising, profiling, credit decisions, or training artificial intelligence models.

Your video and metadata are sent to YouTube when you request publication. Limited data may be processed by PostGate’s service providers solely to operate the service: Hetzner for application hosting, Oracle Cloud for database hosting, Cloudflare for network delivery and security, and Clerk for authentication. PostGate’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. See also the Google Privacy Policy (https://policies.google.com/privacy).

Why we process it

To authenticate users; to deliver the publications you request; to keep connections healthy (automatic token refresh); to show delivery logs and analytics; to sync engagement you ask for; to bill accounts; to secure the service and prevent abuse; and to meet legal obligations. Legal bases under the LGPD and GDPR are performance of contract, legitimate interest in securing and improving the service, and consent where required.

Cookies, browser storage, and similar technologies

PostGate uses essential cookies for Clerk authentication and for the active workspace and session. The website stores your analytics consent choice in browser local storage. If you accept analytics, Google Analytics may set analytics cookies and receive page views, navigation paths, referral source, and general browser and device information. Analytics remains off until you accept, and you can change your choice at any time using “Privacy choices”. PostGate does not place YouTube API data, channel or video data, post content, or OAuth tokens in analytics cookies, Google Analytics, or browser local storage. Google processes analytics data under its Privacy Policy (https://policies.google.com/privacy).

Sharing

Data is shared with the social networks you connect (to perform the publishing and engagement you request) and with infrastructure subprocessors — hosting, identity sign-in, payment processing (Stripe), transactional email, and monitoring — under contractual confidentiality and security obligations. PostGate does not sell personal data and does not use social network data for advertising or profiling.

Retention

Encrypted platform tokens are kept until you disconnect the profile, the platform revokes access, or the workspace is deleted. Delivery logs, webhook records, synced comments, messages, and analytics snapshots follow your plan’s retention window and any shorter provider-specific limit. Pinterest board names and Pin analytics are requested live and are not retained as snapshots. Data received from YouTube API Services is refreshed or deleted within 30 days while authorization is active and deleted as soon as possible, no later than seven days, after revocation. Media originals are removed on a lifecycle schedule after publication. Audit logs are kept while the workspace exists. Everything is removed on workspace deletion, subject to short-lived backups and legal retention duties.

Security

Platform credentials are envelope-encrypted at rest and decrypted only by the delivery workers that need them; token values are never written to logs. Tenant data is isolated with database row-level security. Access is scoped, audited, and protected in transit with TLS.

Revoke access and delete YouTube data

You can revoke PostGate’s access to your Google and YouTube data at any time at https://myaccount.google.com/connections?filters=3,4&hl=en or disconnect the account in Dashboard → Profiles. PostGate immediately stops future API access and deletes Google-authorized identity, identifiers, links, and analytics data as soon as possible, no later than seven days. PostGate may retain its own publication instruction, delivery outcome, and security audit record under an anonymized label. Permanently delete the workspace in Dashboard → Account, or email [email protected], to remove that retained PostGate history. See https://postgate.studio/legal/data-deletion for step-by-step instructions.

Your rights

Workspace owners and admins can download a machine-readable export of workspace data from Account settings at any time. Owners can permanently delete the workspace. Under the LGPD and GDPR you may request access, correction, portability, or erasure of your personal data by writing to [email protected]; we respond within 30 days. See https://postgate.studio/legal/data-deletion for step-by-step instructions.

International transfers and changes

PostGate may process data in regions outside your own using recognized safeguards. We will announce material changes to this policy on this page and, for significant changes, by email. Contact: [email protected].