Privacy Policy

PostAndForget is a social media publishing tool operated by Zingaro AI (“we”, “us”). It lets you connect your own social media accounts and schedule and publish content to them. This policy explains what we collect, how we use it, and the choices you have. It applies to postandforget.com and the PostAndForget application.

• Account information. When you sign in with Google, we receive your name, email address and a unique account identifier from Google/Firebase Authentication.
• Connected social accounts. When you connect an account (for example a Facebook Page, Instagram professional account, Threads, LinkedIn, or X), we store the access tokens the platform issues, plus the account/page identifiers and display names needed to publish. Tokens are stored encrypted at rest.
• Content you create. Posts, captions, comments, schedules and any images or videos you upload for publishing.
• Usage and diagnostic data. Logs of publishing activity, timestamps and error information used to operate and secure the service.
• Billing information. Subscriptions are handled by our payment processors — Razorpay for customers billed in India, Dodo Payments elsewhere. We receive your plan and subscription status; we do not store your full card number.

• To publish and schedule the content you create, to the accounts you connect, at your direction.
• To operate, maintain, secure and improve the service.
• To manage your subscription and process billing.
• To communicate with you about your account and service changes.

We do not use your content or connected-account data for advertising, and we do not sell your data.

• The platforms you connect. To publish on your behalf, we send your content to the social platforms you have connected (e.g. Meta’s Facebook and Instagram, Threads, LinkedIn, X). Your use of those platforms is governed by their own terms.
• Service providers. Google Firebase / Firestore (authentication, database and media hosting), and Razorpay and Dodo Payments (billing), who process data on our behalf.
• Legal. Where required by law or to protect the rights, safety and security of our users and the service.

Our use and transfer of information received from Meta APIs (Facebook, Instagram and Threads) adheres to the Meta Platform Terms and Developer Policies. Access tokens obtained through Meta login are used solely to publish and manage the content you schedule, are stored encrypted, and are never sold or shared for advertising.

We keep your data for as long as your account is active. When you disconnect an account we delete its stored access tokens. When you delete your account or request deletion, we remove your personal data and content within 30 days, except records we must keep for legal, tax or fraud-prevention purposes. See our Data Deletion page.

All traffic is encrypted in transit over HTTPS. Access tokens for connected accounts are encrypted at rest. Access to production data is restricted to authorized personnel.

• Disconnect any connected account at any time from within the app, which deletes its stored tokens.
• Request access to, correction of, or deletion of your personal data.
• Delete your account and workspace, which removes your content and connections.

To exercise any of these, use the in-app controls or email [email protected].

PostAndForget is not directed to, and may not be used by, anyone under the age of 18.

Your data may be processed in countries other than your own. Where it is, we rely on appropriate safeguards for the transfer.

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, notified in the app.

Questions about this policy or your data? Email [email protected].