Privacy Policy

Last updated: September 4, 2026

1. Who we are

goposts.ai is operated by Pinewood Labs1, LLC ("we", "us"), 30 N Gould St, Ste N, Sheridan, WY 82801, United States. This policy explains what personal data we collect when you use GoPosts.AI, why, who we share it with, and the choices you have. Contact: team@goposts.ai.

2. What we collect

• Account data: email address, name if you provide it, hashed password or your Google sign-in identifier, sign-in history, plan and subscription status.
• Business and brand data: your business name, industry, location, website URL, answers you give during setup, and the brand profile we build from your public website (logo, colors, offers, tone). We fetch your public pages and sitemap to build it.
• Connected social accounts: the platform, username, profile picture, and account identifier of each account you connect. Access tokens for those accounts are held by our publishing provider, Zernio, not stored in our database.
• Uploaded and generated content: logos, videos of yourself for AI avatars, voice selection, generated post copy, images, and videos, and the schedule and status of each post.
• Consent records: when you confirm you have permission to use a person's likeness, we store the confirmation with a timestamp, a hashed IP address, and browser type.
• Payment data: handled by Stripe. We store your Stripe customer and subscription identifiers, plan, and payment status, never full card numbers.
• Technical and usage data: pages visited, hashed IP address, browser type, and referral parameters (such as UTM tags and advertising click identifiers) captured when you arrive from a campaign.
• Support messages: anything you send us through the contact form or by email.

3. Why we use it

• To provide the Service: build your brand profile, generate content, and publish to accounts you connected.
• To bill you and manage your subscription.
• To send account, billing, and service emails, and to respond to support requests.
• To keep the Service secure, prevent abuse, and enforce our Terms.
• To measure our own advertising and understand how the website is used.
• To comply with legal obligations.

We do not use your content or personal data to train AI models, and we do not sell personal data.

4. AI processing

To generate content we send your brand profile, answers, prompts, and where relevant your uploaded media to the AI providers listed below. They process it to return a result and are contractually restricted from using it for their own purposes. AI outputs are probabilistic and should be reviewed before you rely on them.

5. Who we share data with

We share personal data only with the providers needed to run the Service:

We also disclose data when required by law, to protect our rights or users' safety, and in connection with a merger or acquisition, in which case this policy continues to apply.

6. Advertising measurement and your opt-out

We advertise on Meta and Google. To measure whether those ads work, we use the Meta Pixel, Meta's Conversions API, and Google Ads conversion tracking. These send events such as page views, sign-ups, and purchases to Meta and Google, together with cookie identifiers, hashed email, and IP address. Under the California Consumer Privacy Act this is treated as "sharing" personal information for cross-context behavioral advertising.

You can opt out at any time by choosing "Reject non-essential" in the cookie banner, which you can reopen from the Cookie settings or Do Not Sell or Share My Personal Information links in the footer. Your choice is stored in a first-party cookie and applied both in the browser and to server-side events. We also honor the Global Privacy Control signal where supported by your browser. See the Cookie Policy.

7. How long we keep data

• Account, brand, and content data: for as long as your account exists. Deleted when you delete your account.
• Connected social accounts: until you disconnect them or delete your account.
• Billing records: up to 7 years after the transaction, as required for tax and accounting.
• Consent records: 5 years after the account is closed, to evidence consent.
• Technical and usage logs: up to 24 months.
• Support messages: up to 24 months after the request is closed.

8. Your rights and how to delete your account

You can:

• Delete your account yourself in Settings → Delete account. This disconnects your social accounts, cancels your subscription, removes your uploaded and generated media, and deletes your account record. Billing records are kept as described above.
• Disconnect a social account at any time in Settings.
• Access, correct, or export your data, object to or restrict processing, or withdraw consent, by emailing team@goposts.ai. We respond within 30 days, or 45 days where the law allows.

If you signed in with Google or connected an Instagram account, you can also revoke our access from that platform's own settings. The account deletion path above is also the data deletion procedure for data obtained through those platforms.

9. California residents

Under the CCPA/CPRA you have the right to know what personal information we collect, to delete it, to correct it, to opt out of sharing for cross-context behavioral advertising, and not to be discriminated against for exercising these rights. We do not sell personal information and do not knowingly collect data from anyone under 16. The categories we collect are listed in section 2, the purposes in section 3, and the recipients in section 5. To exercise your rights, use the deletion path in section 8 or email us. You may designate an authorized agent to act for you; we will verify the request.

10. Users outside the United States

We are based in the United States and our providers are mostly located there, so your data is transferred to and processed in the United States. Our marketing is directed at U.S. customers. If you use the Service from the EEA, UK, or Switzerland, we rely on standard contractual clauses with our providers for transfers, and you have the rights described in section 8 plus the right to complain to your local supervisory authority.

11. Security

Data is encrypted in transit, stored with per-user access controls, and accessible only to staff who need it. Payment card data never touches our servers. No system is perfectly secure; if we discover a breach affecting your data we will notify you as required by law.

12. Children

The Service is for adults running a business. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

13. Changes

We may update this policy. Material changes will be posted here with a new date and, where appropriate, sent to your account email.

14. Contact

Pinewood Labs1, LLC
30 N Gould St, Ste N, Sheridan, WY 82801, United States
team@goposts.ai