Privacy Policy | Post with Purpose

1. Who we are

Post with Purpose ("we", "us", "our") operates the content platform at app.postwithpurpose.co.uk. We are a UK-based company.

2. Data we collect

Account data: email address, display name, and authentication credentials (managed by Supabase Auth).
Brand data: brand name, website URL, products, collections, blog posts, voice settings, messaging pillars, and editorial rules you provide.
Content: articles, notes, images, and content plans you create within the platform.
Usage data: API token consumption for billing purposes.
Technical data: IP address, browser type, and page visits (collected automatically by our hosting provider).

3. How we use your data

To provide and operate the content generation platform.
To generate AI-powered content using your brand data as context.
To track token usage against your credit allowance.
To send transactional emails (e.g. password resets).
To improve and maintain the platform.

4. Third-party services

We use the following third-party services to operate the platform:

Supabase (database and authentication) — your data is stored in Supabase-managed PostgreSQL databases.
OpenAI (AI content generation) — your brand context and content briefs are sent to OpenAI's API to generate articles. OpenAI does not use API data to train its models.
Vercel (hosting) — the platform is hosted on Vercel's infrastructure.
Postmark (transactional email) — used for password resets and notifications.

5. Data retention

We retain your data for as long as your account is active. If you delete your account or request data deletion, we will remove your personal data within 30 days. Aggregated, anonymised usage statistics may be retained indefinitely.

6. Your rights (GDPR)

If you are in the UK or EEA, you have the right to:

Access the personal data we hold about you.
Rectify inaccurate data.
Request deletion of your data.
Restrict or object to processing.
Data portability (receive your data in a structured format).

To exercise any of these rights, contact us at the email address below.

7. Children's data

Our platform is designed for adult brand managers and content creators. We do not knowingly collect data from children under 16. The content generated by our platform may be about children's products, but the platform users are adults.

8. Security

We use industry-standard security measures including encrypted connections (HTTPS), row-level security policies on our database, and authenticated API access. However, no method of transmission over the internet is 100% secure.

9. Contact

For privacy-related enquiries, contact us at: privacy@postwithpurpose.co.uk