Last updated: October 6, 2026
The privacy of your data — and it is your data, not ours — matters to us. This policy explains what posto collects and why, how your data is handled, and your rights with respect to it. We never sell your data.
When we say “posto”, “we”, “our” or “us”, we mean the operator of the service at posto.run. You can reach us at hello@posto.run.
1. What we collect and why
Our guiding principle is to collect only what we need to run the service.
- Identity and access. When you sign up we ask for your email address and, optionally, a name and a profile picture, so you can sign in and we can send you essential messages about your account. If you sign in with a third-party provider such as Google, we receive the basic profile that provider shares (identifier, email, name).
- Connected social accounts. When you connect a social account or channel (for example a Telegram channel, an Instagram or Facebook account), we store the identifiers of that account and the access credentials the platform issues to us. Credentials are encrypted at rest and used only to publish the content you schedule and to keep the connection working.
- Your content. We store the posts, texts, images and schedules you create, and the publishing results the platforms return (for example the identifier of a published post or an error), so the service can publish on your behalf and show you what happened.
- Sign-in and security data. We log sign-ins with the IP address and browser used, for security and fraud prevention, for as long as your account is active.
- Correspondence. When you email us, we keep that correspondence so we can refer to it if you contact us again.
2. Cookies
Only cookies strictly necessary for the service are set, so no consent banner is shown:
PHPSESSID— your session: set when the site needs to remember something about this visit, such as signing in or attempting to; ends when you close your browser.REMEMBERME— keeps you signed in, only if you chose “Keep me signed in”.ACCOUNT_SWITCH— remembers which accounts you have signed in to in this browser, so you can switch between them; set when you sign in, unless account switching is turned off for this site.locale— the interface language you chose; one year.
3. IP address location
Where the service shows the approximate location of a sign-in, it is derived from your IP address using IP Geolocation by DB-IP, licensed under CC BY 4.0.
4. When we access or disclose your information
- To publish what you asked us to. The content you schedule is sent to the platforms you selected, at the time you selected. Once published, it is governed by that platform’s own terms and privacy policy.
- To run the service. We use third-party providers for hosting, storage and email delivery. They process data only on our behalf.
- To help you, with your permission. No human looks at your content except to resolve a support request you made, or when an error stops an automated process and cannot be fixed without it.
- To investigate abuse, as a measure of last resort.
- When required by law, and then only the minimum needed.
5. How we secure your data
All data is encrypted in transit with TLS. Access credentials of connected social accounts are additionally encrypted at rest.
6. Data retention and deletion
We keep your information while your account is active and as long as needed for the purposes above. Disconnecting a social account deletes the credentials we hold for it.
How to delete your data. Deleting your data takes two steps. First, delete your posts and images: open the “Media” page in each workspace you own and use “Delete all posts and images”. Then delete your account yourself from your account settings, in the “Danger zone” section, by confirming it with your password or second factor; this permanently deletes your profile and connected accounts with their credentials. Posts already published on a social network stay there, and you remove them on that platform. You can also remove posto’s access from the connected platform’s own settings, or email hello@posto.run from the address on your account — for example if you signed up with a third-party sign-in and have no password — and we will delete your data for you.
7. Your rights
You have the right to know what personal data we hold about you, to access it, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable form, and to complain to a data protection supervisory authority. Most of these can be exercised by signing in and updating your account; for the rest, email hello@posto.run. We may need to verify your identity before acting on a request.
8. Changes and questions
We may update this policy as the service changes. When we make a significant change, we will refresh the date at the top of this page and notify account holders where appropriate. Questions about this policy or your data: hello@posto.run.
Adapted from the Basecamp open-source policies / CC BY 4.0.