Legal

Privacy Policy

Last updated May 29, 2026

1. Introduction

Postqued ("we", "our", or "us") operates the Postqued application. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

2. Information We Collect

We collect the following types of information:

Account Information

Email address when you sign in via Google OAuth.

Connected Social Account Data

When you connect TikTok, Instagram, Facebook, or another supported social account, we receive and store account identifiers, usernames, display names, avatars, connected Page or business account identifiers where applicable, granted permissions, and OAuth tokens necessary to publish content on your behalf.

API Keys

Hashed API keys you generate for programmatic access.

Content

Photos, videos, captions, scheduling details, and publishing status information you upload or create through Postqued for posting to connected social platforms.

3. How We Use Your Information

To provide and maintain our API service.
To authenticate you and manage your account.
To publish content to connected social platforms on your behalf.
To store and manage your uploaded media.
To improve our service.

4. Data Storage and Security

Your data is stored securely using PostgreSQL (database) and Cloudflare R2 (media files). We use encryption in transit and secure authentication tokens. OAuth tokens for connected social accounts are stored server-side and are never exposed to the client. API keys are hashed before storage.

5. Third-Party Services

We integrate with the following third-party services:

TikTok

To publish content on your behalf. TikTok's privacy policy applies to your TikTok account.

Meta: Instagram and Facebook

To connect Instagram business/creator accounts and Facebook Pages, list eligible publishing destinations, publish media and captions, retrieve publishing status, and support comments or analytics features when you choose to use them. Meta's privacy policies apply to your Instagram and Facebook accounts.

Cloudflare R2

To store your uploaded media files.

Google OAuth

For authentication.

6. Your Rights

You can disconnect connected social accounts at any time, which will revoke our access to post on your behalf. You can revoke API keys at any time. You can request deletion of your account and associated data by contacting us or following the instructions on our data deletion page.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account or disconnect a connected social account, we will delete the associated tokens and connected-account data unless we are required to retain limited records for security, fraud prevention, legal compliance, or billing.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at hello@mentign.com