Privacy policy

Who we are and our two roles

Postevi (postevi.app) is run by MSECAMP LLC, 12 Daniel Road Suite 318-333, Fairfield, NJ 07004, USA (we, us). You can reach us at [email protected].

For your account and for visitors to our website, we decide how data is used, so we are the controller. For the comments and messages that people send to the social accounts you connect, you are the controller and we process that data on your instructions. Zernio acts as our subprocessor.

What we collect

We collect only what we need to run the service:

• Your account: email address, name, workspace name, the members of your workspace and their roles, and your language. You sign in with a one-time code sent by email or with your Google account, so we never store a password for you.
• Connected social accounts: account handle, profile details, the access the platform grants, follower counts and post statistics. Follower history starts on the day you connect an account.
• What you create: the text, images and videos of scheduled and published posts, comment-to-DM automation rules, keywords and templates.
• Your inbox: comments and direct messages your connected accounts receive, the sender's handle and profile details, and your replies.
• Billing: plan, billing period, currency, subscription status, your Stripe customer ID and X balance activity. Stripe collects your card and billing details directly; we never store card numbers.
• AI and developer access: OAuth grants for AI assistants you connect, API keys you create, outgoing webhook URLs, and usage logs for each of these.
• Technical data: IP address, browser details, session records and error logs, used for security and troubleshooting.

How we use it and our legal bases

We use each piece of data only for one of these purposes:

• To provide the service: schedule and publish posts, run automations, and show your inbox and statistics. Legal basis: performing our contract with you.
• To keep subscription, payment and accounting records. Legal basis: our contract and our legal obligations.
• To keep accounts secure, prevent abuse and fix errors. Legal basis: our legitimate interests.
• To send account emails: sign-in codes and workspace invites. Stripe sends payment receipts. Legal basis: performing our contract.

AI assistants

We never call an AI model on our own, and we don't use your data to train one.

If you connect your own assistant, such as Claude, ChatGPT or Cursor, it reads and writes your workspace data through our server. You set up the connection with OAuth or with an API key you create. The assistant can act only within the access you grant, and you can remove it from settings at any time.

What the assistant does with the data it receives is governed by its provider's own terms and privacy policy. Model costs are billed to your own subscription with that provider.

Who receives your data

We don't sell personal data and we don't use it for advertising. We share it with these parties to run the service:

Beyond these, data goes only to the API and webhook destinations you set up, and to authorities when the law requires it.

• Zernio (social media connection infrastructure): account connections, publishing, inbox, automation and statistics data.
• Stripe: sells the subscription as our reseller and processes payments. Stripe receives your card and billing details directly, calculates tax and issues receipts. Stripe's own privacy policy also applies to that data.
• Our hosting provider: application and database servers.
• Our email delivery provider: sign-in codes and account notices.
• Google: only if you choose to sign in with Google, to verify your identity.
• Social media platforms: the posts you publish and the messages you send go to the relevant platform on your instructions.

International transfers

MSECAMP LLC is based in the United States and our providers' servers are outside Turkey, so your data is transferred internationally.

We make these transfers in line with Article 9 of Turkish Law No. 6698 and other applicable rules, and we sign data processing agreements and standard contractual clauses with providers where required.

How long we keep it

Retention depends on the type of data:

• Account and workspace data: for as long as your account is open, and deleted within 30 days after you close it.
• If your trial ends without moving to a plan, we disconnect your social accounts and keep your workspace data for 30 days before deleting it.
• If you cancel a paid plan, we disconnect your social accounts when the period ends and keep your workspace data for 30 days before deleting it.
• Follower history and statistics: for as long as the social account stays connected.
• Inbox and automation records: for as long as the social account stays connected, or until you delete them.
• Subscription and payment records: for as long as tax and accounting laws require.
• Security and error logs: only as long as needed for that purpose.

Your rights

You can ask to access, correct or delete your data, or to restrict how we use it. People in Turkey have additional rights under Law No. 6698, described in our KVKK notice. Send requests to [email protected] and we will reply within 30 days.

If you commented on or messaged an account managed with postevi, please send requests about that data to the account owner first. When such a request reaches us, we pass it on and help the owner respond.

Security

Data travels over encrypted connections. Access grants and API keys are stored securely, workspaces are kept separate from each other, and important account actions are logged. No system is risk free; if we discover a breach, we will notify affected account owners and, where required, the relevant authority within the legal deadline.

Cookies

We use only the cookies the service needs to work. See our cookie policy for details.

Changes and contact

If we change this policy, we will post the new version here and update the date at the top. We will also email account owners about significant changes.

Questions and requests: [email protected].