Privacy
This page describes how the PostRelay software handles data. The operator of this deployment is responsible for adding its legal entity, contact address and jurisdiction-specific terms.
What we store
- Your account email and sign-in identity.
- Workspace settings, brand rules and posting rules you configure.
- Media you or your AI upload, stored privately; rendered variants and their metadata.
- Drafts, revisions, per-account delivery records, provider receipts and an audit log of actions.
- Agent credentials and OAuth grants, stored only as one-way hashes.
Third-party processors
- Upload-Post (api.upload-post.com) receives the copy, media links and target account for each delivery, and hosts the social-account authorization page. Social network tokens are held by Upload-Post, not by PostRelay.
- Cloudinary, when configured, receives your media to produce resized versions. Rendered files use signed delivery URLs; Strict Transformations must be enabled by the operator. Anyone holding a delivery URL can fetch that approved derivative.
- With explicit workspace consent and the paid add-on enabled: Audio is sent to Google through Cloudinary's paid transcription add-on. Captions are returned for review and never burned automatically.
- The social networks you publish to receive the content you approve, under their own policies.
What we don't do
- We don't sell data or use your content to train models.
- We don't post on your behalf without a validated revision and your approval or standing rule.
- We don't place API keys in your browser or in responses.
Your controls
- Revoke any AI connection or pause all publishing from Settings at any time.
- Disconnect social accounts through the provider connection page.
- Ask the operator to delete your workspace and its stored media.