Privacy Policy

Postnilo uses your sign-in identity and account preferences to provide your workspace. It stores connected-channel credentials, uploaded media, post text, schedules and publishing results to carry out the actions you request.

Your chosen social platforms receive content and settings needed to publish. The billing provider handles payment details and subscription records. Postnilo does not ask you to enter card details into the posting editor.

To understand how people use Postnilo, we record the workspace, access method, read and connection activity, and when posts are created and first scheduled. We also record publishing or inbox-delivery results. Access methods include the web, API, CLI and connected AI tools; they do not identify a particular AI model, physical app or person. Automated system checks are excluded. Usage statistics do not contain your original prompts, post text, files or tokens.

Read and connection activity is combined by workspace, access method and hour, retained while the workspace is maintained, and removed during account deletion. Post creation and first-scheduling records stay with the post until it is deleted. Only authorized administrators can view usage statistics. Test and review accounts are excluded from customer statistics by default.

You can revoke a connected MCP app in your workspace without deleting your social channels. Revocation stops new calls through that connection. You can request account deletion in account settings or contact support about activity records and other account data.

When you configure an Instagram comment automation, Postnilo matches comments on your own posts against your keywords and sends an opening private reply. After the person responds, it delivers your configured message and link, optionally checking whether they follow your account. We do not store original comment or incoming DM text. Recipient and comment identifiers are encrypted; response times, deduplication hashes and delivery results are retained for up to 30 days. Rule settings are retained until you delete them. Deleting an automation or your account removes its processing records; disconnecting the channel removes pending deliveries and recipient records. Messages already delivered to Instagram are not removed by this deletion.

When you request account deletion, we check subscription and payment status and any publishing or upload in progress before removing stored files, channel connections, posts and related activity. Once deletion is complete, we remove the original sign-in identifier and unnecessary account preferences. For requests completed under this process, we keep the request and completion times and necessary references to ended billing relationships for 30 days, then delete them. To prevent delayed sign-in requests from recreating a deleted account, we retain an internal workspace identifier and a one-way hash of the sign-in identifier without an expiry date. This hash can be compared with a known sign-in identifier and is pseudonymous data, not anonymous data.

Subscription expiry stops paid access; it does not automatically delete uploaded media. The 30-day cleanup applies only to the deletion receipts and ended billing references described above. Some earlier deletion records are outside this automatic cleanup; contact support to check what remains and what can be deleted. Separate records held by service providers, legally required accounting records and content already published or delivered on social platforms are not deleted by this process.

Postnilo uses YouTube API Services. See the Google Privacy Policy. In addition to disconnecting a channel in Postnilo, you can revoke Postnilo's access in Google security settings.

We store your authorized YouTube channel's ID, name and profile image URL, and API-reported upload processing and visibility results, to identify the publishing destination and display its status. When you request channel data from a connected AI, that AI host also receives the channel information, images and links returned by the tool.

Canceling a reservation or deleting your Postnilo account does not delete videos already published on YouTube. Original media you upload directly and drafts you write are separate from data obtained through the YouTube API and follow the media and account retention and deletion rules.