Privacy Policy

AgentPost is a social media command center operated from agentpost.top. For data protection questions you can reach us at privacy@agentpost.top or through our contact form.

• Account data — name, email address, password hash and workspace membership when you sign up.
• Connected platform data — access tokens, account IDs and page or channel identifiers you grant when connecting a social platform. Tokens are stored encrypted and are never shown in full in the app.
• Content you create — drafts, scheduled posts, media, brand assets and approval history.
• Usage and analytics data — post performance metrics fetched from platform APIs, and page-view events from the optional website tracking beacon you install on your own sites.
• Billing data — plan, billing period and payment status. Card details are processed by our payment provider and never touch our servers.
• Technical data — log data such as IP address, browser type and error traces, used to keep the service secure and reliable.

We use your data only to:

• operate the service: publishing, scheduling, inbox, analytics and reporting;
• authenticate you and keep your workspace secure;
• process payments and manage your subscription;
• send service emails such as security notices, receipts and product updates you opt into;
• debug, monitor and improve the product.

We do not sell your data and we do not use your content to train AI models.

When you use agent drafting or AI replies, the relevant brief, brand context or conversation is sent to an AI model provider to generate output. These requests are used only to produce the result you asked for.

AgentPost connects to social platforms through their official APIs; data you publish or receive there is also governed by each platform's own privacy policy. We use a small set of subprocessors for hosting, database, email delivery, payment processing and AI inference, each bound by data processing terms. Connected-service security scans help us verify that tokens and credentials stay protected.

We use strictly necessary storage for sign-in sessions, language and theme preferences. The optional /t.js tracking beacon you install on your own websites records page-view events for your analytics; it does not set advertising cookies.

We keep your data while your account is active. When you delete content, a connection or your account, the associated data is removed from production systems within a reasonable period, except where we must retain records for legal, tax or security reasons. Encrypted backups rotate out on their normal cycle.

Depending on where you live (including under the GDPR), you have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, email privacy@agentpost.top. You also have the right to lodge a complaint with your local data protection authority.

We encrypt platform tokens at rest, use HTTPS everywhere, scope access by workspace and role, and run automated security scanning. No method of transmission or storage is perfectly secure, but we work to protect your data and will notify you of any breach that affects you as required by law. More detail is on our security page.

Some subprocessors process data outside your country. Where data is transferred internationally we rely on appropriate safeguards such as standard contractual clauses.

We may update this policy as the product and the law evolve. Material changes will be announced by email or in-app before they take effect, and the date at the top of this page will always show the latest revision.

Privacy questions and requests: privacy@agentpost.top. General support: support@agentpost.top.