Privacy Policy

PostLea operates PostLea, a content planning workspace for creators. This policy explains what happens to your information when you use the site or the installable app. You can reach us at postleacreatorsupport@gmail.com.

• Account data: your name, email address and a salted password hash. We never store your password.
• Your content: posts, captions, hashtags, scheduled dates, saved ideas, reminders and profile details you choose to add.
• Billing data: if you subscribe, our payment providers return a customer and subscription identifier and status. Card or bank details are entered on the provider's page and are never sent to or stored by PostLea.
• Technical data: short-lived security counters (hashed email or IP, attempt counts and reset times), session records, and standard server logs used to keep the service available and prevent abuse.

PostLea sets one essential cookie so you stay signed in. It is HTTP-only, expires after 30 days and is not used for advertising. We do not run third-party advertising or cross-site tracking scripts.

• To create and secure your account and keep your workspace private.
• To store and show the content you plan, and to send reminders you enable.
• To process subscriptions, cancellations and billing support.
• To generate ideas when you ask the AI writer for them.
• To prevent abuse, investigate errors and meet legal obligations.

When you request AI ideas, the category, your niche, the platform and any angle you type are sent to our AI provider to produce drafts. Do not put sensitive personal information in that prompt. Generated drafts are returned to your browser and only stored if you choose to save them. AI output can be inaccurate; check it before publishing.

We use Cloudflare for hosting, database and file storage; Stripe and PayPal for payments; our email provider for transactional messages such as password resets; and an AI provider for idea generation. Each provider processes only what it needs to deliver that service. We do not sell personal information.

Your account and content stay until you delete them. Deleting your account removes your posts, ideas, reminders, AI usage records, terms acceptance and sessions. Security counters expire automatically; password reset links expire after one hour. Billing records held by payment providers are kept by them under their own policies and legal requirements.

You can update your profile and email, change your password, export a CSV of your posts, or delete your account from Settings. Depending on where you live you may also have rights to access, correct, restrict or object to processing. Email postleacreatorsupport@gmail.com and we will respond within the time required by applicable law. You can cancel a subscription at any time from the plans page.

Passwords are hashed with PBKDF2-SHA256 and per-user salts. Sessions use random tokens stored only as digests in HTTP-only cookies. Every post, idea and reminder query is scoped to your account on the server. No system is perfect, so use a unique password and contact us if you suspect unauthorised access.

PostLea is not intended for children under 16, and we do not knowingly collect their personal information.

If this policy changes materially we will update the date below and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.