Privacy policy

Last updated:

Who is responsible

The data controller is Kamal Addi Haffout, self-employed professional trading as MarDevs, Tax ID (NIF) 78312807S, C/ Islas, 1, portal 7, 1.º D, 18110 Las Gabias (Granada), Spain. For any question or request: contact@postpluse.com.

The waitlist

What we collect

When you join the waitlist, we store:

  • your email address;
  • the language of the page you signed up on (French or English);
  • which form you used (the one at the top or the one at the bottom of the page).

Your IP address is also used, only while your request is being handled, to limit abusive form submissions. The server’s technical logs (IP address, browser, pages requested) are used only to keep the site secure and are kept for 30 days at most.

Why

  • To confirm your sign-up: you receive an email with a confirmation link (double opt-in).
  • To let you know when PostPulse opens and when it’s your turn.

We rely on your consent for this, and you can withdraw it at any time.

Where it lives

The waitlist runs on Listmonk, a mailing-list application we host ourselves. Your data is never sold or handed over to third parties.

Our technical providers can access it only to keep the service running: Oracle Cloud Infrastructure (hosting) and, to deliver our emails, the SMTP server we use, which sees your address only while the email is being sent.

How long we keep it

We keep your address until you unsubscribe. If you have not created an account 24 months after PostPulse launches, we delete your address. Sign-ups that are never confirmed are deleted after 30 days.

The PostPulse app

Your account

When you create an account we store your name, your email address and your sign-in details, plus the settings you choose in the app.

Data we receive from Facebook (Meta)

When you connect your Facebook account and Pages to PostPulse, and only with the permissions you grant, we receive and store:

  • your Facebook user ID, name and email address;
  • the list of Pages you manage and their access tokens, so PostPulse can act on them on your behalf;
  • the posts, comments and reactions of those Pages (permission pages_read_engagement);
  • the posts you create, schedule or publish from PostPulse (permission pages_manage_posts) and the comments you reply to or moderate (permission pages_manage_engagement);
  • the statistics of your Pages and posts, such as reach, engagement and, where available, monetization earnings (permission read_insights).

We use this data only to provide the features you ask for: publishing and scheduling content, managing comments, and showing statistics in your dashboard. We do not use it for advertising, we do not sell it, and we do not share it with third parties except the providers listed below. Our use of data received from Meta complies with the Meta Platform Terms.

Content you create

The texts, prompts, images, videos and voice-overs you create or upload in PostPulse are stored in your account so you can edit and publish them.

Why and on what basis

  • To provide the service you signed up for (performance of a contract, art. 6.1.b GDPR).
  • To keep the app secure and prevent abuse (legitimate interest, art. 6.1.f GDPR).

Who processes it for us

These providers process data only to run the features you use:

  • Oracle Cloud Infrastructure: hosting of the app and its databases.
  • Meta Platforms: the Facebook Graph API, to read and publish on your Pages.
  • Cloudinary: storage and delivery of images and videos.
  • AI model providers, mainly through OpenRouter: generation of text, images and videos from your prompts. Only the content needed for each request is sent.
  • ElevenLabs: generation of voice-overs from your scripts.

Some of these providers are located outside the European Economic Area. In that case, transfers rely on the safeguards provided by the GDPR, such as the European Commission’s Standard Contractual Clauses.

How long we keep it

  • Account data and content: as long as your account is active.
  • Facebook access tokens: until you disconnect the Page or remove PostPulse from your Facebook settings; after that we no longer access your Pages.
  • When you delete your account or ask us to delete your data, we erase it within 30 days, except what the law requires us to keep (for example, invoices).
  • Technical logs: 30 days at most.

Cookies and analytics

This website uses no cookies and no analytics or tracking tools. The app only uses the cookies and local storage needed for you to stay signed in.

Your rights

At any time you can access your data, have it corrected or deleted, restrict how it is used, get a copy in a common format (portability), object to its use, or withdraw your consent. Email us at contact@postpluse.com, or use the unsubscribe link included in every email we send. To have your data deleted, follow the steps on our data deletion page: we handle requests within 30 days.

These rights are granted by the General Data Protection Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the protection of personal data and the guarantee of digital rights (LOPDGDD).

If you think your data is not being handled properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es.

Changes

If this policy changes, we update the date shown at the top of this page.