Legal

Privacy Policy

Effective date: October 14, 2026·Last updated: October 14, 2026

PostDock (“PostDock,” “we,” “us,” or “our”) provides social-media management tools that help individuals, creators, businesses, and teams connect accounts, create content, schedule and publish posts, collaborate in workspaces, and review performance across supported platforms.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you access or use:

  • The PostDock website;
  • The PostDock web application and related interfaces;
  • Our social-media connection, scheduling, publishing, media, analytics, collaboration, and related services;
  • Our customer support and product communications; and
  • Any other service that links to this Privacy Policy.

By using PostDock, you acknowledge the practices described in this Privacy Policy. Our Terms of Service also apply to your use of the Service.

1. Who We Are

PostDock is operated by the PostDock team through the website and services available at post-dock.com.

Service:
PostDock
Privacy contact:
[email protected]
Support contact:
[email protected]

For applicable data-protection laws, PostDock may act as a data controller for information collected directly from you and as a data processor or service provider when processing information on behalf of a business customer or workspace owner.

2. Information We Collect

The information we collect depends on how you interact with PostDock and which features and platform integrations you use.

2.1 Account Information

When you create or manage a PostDock account, we may collect:

  • Your name or display name;
  • Email address;
  • Password or authentication credentials;
  • Profile image;
  • Company, team, client, or workspace name;
  • Job title and business information;
  • Account preferences and plan details; and
  • Information provided through Google, Facebook, or another supported sign-in provider.

Passwords are processed in protected form. If you sign in through a third-party authentication provider, we receive only the information authorized by you and made available by that provider.

2.2 Connected Social-Media Account Information

When you connect a social-media account, PostDock may receive information permitted by the platform and the permissions you approve, including:

  • Platform user ID;
  • Account, page, profile, channel, board, location, or business name;
  • Username or handle;
  • Profile image and account metadata;
  • Access and refresh tokens;
  • Connected pages, profiles, channels, boards, locations, or business accounts;
  • Account permissions and connection status;
  • Published posts and associated metadata;
  • Comments, mentions, or engagement information, where supported;
  • Audience and performance analytics; and
  • Other information made available through the platform’s official APIs.

PostDock may integrate with the following platforms, subject to availability, your plan, and the permissions you grant:

  • Facebook;
  • Instagram;
  • Threads;
  • LinkedIn;
  • X (formerly Twitter);
  • YouTube;
  • TikTok;
  • Pinterest;
  • Reddit;
  • Bluesky; and
  • Google Business Profile.

The information available to PostDock varies by platform, your account type (for example personal profile, Page, Company Page, channel, board, or business location), the features you use, and the permissions you grant. We only request permissions needed to provide the social-management features you choose to use.

2.3 Content and Media

We collect and process content you upload, create, import, schedule, publish, or manage through PostDock, including:

  • Text and captions;
  • Images, graphics, videos, and audio;
  • Links, hashtags, tags, and mentions;
  • Drafts and scheduled content;
  • Publishing dates, times, and time zones;
  • Post status and publishing history;
  • Campaign labels, tags, and publishing groups;
  • Approval comments and internal notes; and
  • Other content-related metadata.

You are responsible for ensuring that you have the necessary rights and permissions to upload, process, and publish this content.

2.4 Analytics and Engagement Information

If you use analytics or reporting features, we may collect information provided by connected platforms, including:

  • Views and impressions;
  • Likes, reactions, comments, and shares;
  • Clicks and engagement rates;
  • Follower or subscriber counts;
  • Audience insights;
  • Video watch and retention data;
  • Post and account performance; and
  • Other analytics supported by the applicable platform.

We use this information to display reports, measure performance, and provide features requested by you. Coverage may differ by platform and may be incomplete when a network does not expose certain metrics through its API.

2.5 Payment and Subscription Information

If you purchase or manage a paid plan, we may collect:

  • Billing name and address;
  • Subscription plan and billing cycle;
  • Transaction amount and currency;
  • Payment status;
  • Invoice and tax information; and
  • Limited payment-method details supplied by our payment provider.

Complete payment-card information is generally collected and processed by our payment provider rather than stored directly by PostDock.

2.6 Usage and Technical Information

When you use PostDock, we may automatically collect:

  • IP address;
  • Browser and device type;
  • Operating system;
  • Device identifiers;
  • Language and time-zone settings;
  • Pages and features accessed;
  • Login and activity timestamps;
  • Referring URLs;
  • Crash reports and diagnostic information;
  • Cookie and similar-technology information; and
  • Security and audit logs.

2.7 Communications and Support

If you contact us, we may collect your contact details, message contents, support history, attachments, and any other information you choose to provide.

3. How We Use Information

We may use personal information to:

  • Create, authenticate, and manage PostDock accounts;
  • Connect and maintain authorized social-media integrations;
  • Upload, schedule, publish, edit, or manage content at your direction;
  • Retrieve and display social-media analytics;
  • Provide media library, campaign, group, and workspace features;
  • Provide team collaboration, invites, and permission controls;
  • Process subscriptions and payments;
  • Provide customer support;
  • Send service, security, billing, and administrative messages;
  • Personalize and improve PostDock;
  • Monitor system performance and resolve technical problems;
  • Protect PostDock, our users, and connected platforms against fraud, abuse, and unauthorized access;
  • Enforce our agreements and acceptable-use requirements;
  • Comply with legal and regulatory obligations; and
  • Send product or marketing communications where permitted by law and according to your preferences.

We do not use content obtained from connected social-media accounts for purposes materially different from providing and improving the features you request, except where required by law or with your permission.

Where applicable law requires a legal basis, we process personal information based on one or more of the following:

  • Contract: Processing is necessary to provide PostDock and fulfill our agreement with you.
  • Consent: You have given permission for a particular activity, such as connecting a platform or receiving marketing messages.
  • Legitimate interests: Processing is necessary for operating, securing, improving, and supporting PostDock, provided those interests are not overridden by your rights.
  • Legal obligations: Processing is necessary to comply with applicable laws, lawful requests, or regulatory requirements.

You may withdraw consent at any time where consent is the applicable legal basis. Withdrawal does not affect processing already carried out lawfully.

5. Social-Media Integrations and Platform APIs

PostDock uses official APIs and authorization systems supplied by third-party platforms. When you connect an account:

  1. You are redirected to the relevant platform or its authorization interface.
  2. The platform shows the permissions requested by PostDock.
  3. You choose whether to authorize those permissions.
  4. The platform provides PostDock with an authorization token and permitted information.
  5. PostDock uses that access to perform the actions you request, such as publishing, scheduling, retrieving posts, or loading analytics.

PostDock does not require you to provide your social-media password directly to us when the platform supports an official OAuth or comparable authorization process. Where a platform uses another secure credential method (for example an app password), we process only what is needed to maintain that connection.

Your use of a connected platform remains subject to that platform’s terms, privacy policy, developer policies, and account settings. A platform may change, limit, suspend, or discontinue its API or PostDock’s access to particular features.

You can revoke PostDock’s access through your PostDock Connections settings or through the security and connected-app settings offered by the relevant platform.

6. Platform-Specific Notes

6.1 Meta Platforms (Facebook, Instagram, Threads)

If you connect Facebook Pages, Instagram professional accounts, or Threads accounts, PostDock may access page or profile information, media, publishing capabilities, comments or insights (where available), and related tokens according to the permissions you approve. We use this information to publish and manage content and to show connection status and performance data in your workspace.

6.2 Google and YouTube

If you connect a Google, YouTube, or Google Business Profile account, PostDock may access data made available through Google APIs according to the permissions you approve.

PostDock’s use and transfer of information received from Google APIs will comply with the applicable Google API Services User Data Policy, including its Limited Use requirements.

You can review or revoke PostDock’s access to your Google account through your Google Account security settings. Revoking access may prevent related PostDock features from working.

Google’s privacy practices are described in the Google Privacy Policy.

6.3 LinkedIn, X, TikTok, Pinterest, Reddit, and Bluesky

When you connect LinkedIn, X, TikTok, Pinterest, Reddit, Bluesky, or other supported networks, PostDock may access profile or organization identifiers, media upload capabilities, posting permissions, and analytics exposed by those platforms. Exact data fields and publishing formats depend on each network’s API and your account type.

7. How We Share Information

We may disclose information to the following categories of recipients:

7.1 Connected Platforms

We transmit content and necessary account information to connected social-media platforms when you instruct us to publish, schedule, retrieve, update, or manage content.

7.2 Service Providers

We may use trusted providers for:

  • Cloud hosting and storage;
  • Database and infrastructure services;
  • Authentication;
  • Payment processing;
  • Email delivery;
  • Customer support tooling;
  • Error tracking;
  • Product analytics; and
  • Security and fraud prevention.

These providers may process information only for the services they supply to us and subject to appropriate contractual obligations.

7.3 Workspace Owners and Team Members

If you use PostDock through an organization or shared workspace, authorized workspace owners, administrators, or team members may access information associated with that workspace, depending on their assigned roles and permissions.

7.4 Business Transfers

Information may be transferred as part of a merger, acquisition, financing, restructuring, bankruptcy, or sale of all or part of our business or assets.

7.5 Legal and Safety Requirements

We may disclose information when we reasonably believe it is necessary to:

  • Comply with applicable law or legal process;
  • Respond to a lawful request from a public authority;
  • Protect the rights, safety, and property of PostDock, our users, or others;
  • Investigate fraud, abuse, security incidents, or violations of our terms; or
  • Establish, exercise, or defend legal claims.

7.6 With Your Direction or Consent

We may disclose information to another party when you direct us to do so or provide your consent.

We do not sell personal information for money. If our practices constitute “selling,” “sharing,” or targeted advertising under an applicable privacy law, we will provide the legally required disclosures and choices.

8. Cookies and Similar Technologies

PostDock may use cookies, local storage, pixels, and similar technologies to:

  • Keep you signed in;
  • Remember preferences;
  • Maintain security;
  • Understand how PostDock is used;
  • Measure performance;
  • Identify and fix errors; and
  • Support marketing, where permitted.

You can manage cookies through your browser settings and, where available, our cookie-consent controls. Disabling necessary cookies may prevent certain PostDock features from functioning.

9. Data Retention

We retain personal information only for as long as reasonably necessary to:

  • Provide PostDock;
  • Maintain your account and connected integrations;
  • Fulfill the purposes described in this Privacy Policy;
  • Comply with legal, tax, accounting, and platform requirements;
  • Resolve disputes; and
  • Enforce our agreements.

The applicable retention period depends on the type of information, why it was collected, the sensitivity of the information, and relevant legal obligations.

When you disconnect a social-media account, we stop using its authorization token for new requests and delete or invalidate the token within a reasonable period, subject to technical, security, backup, and legal requirements.

When you delete your PostDock account, we delete or anonymize associated personal information within a reasonable period (typically within 30 days), unless retention is required by law, necessary for security or dispute resolution, or permitted under an applicable platform policy. Residual copies may remain temporarily in protected backups before being deleted through our normal backup cycle.

Content already published to a social-media platform is controlled by that platform. Deleting it from PostDock may not remove it from the destination platform.

10. Data Security

We use reasonable administrative, organizational, and technical safeguards designed to protect personal information. Depending on the nature of the information and service, these safeguards may include encryption, restricted access, authentication controls, monitoring, backups, and security reviews.

No system or transmission method is completely secure. We therefore cannot guarantee absolute security. You are responsible for protecting your account credentials, using a strong password, and promptly notifying us if you suspect unauthorized access.

11. International Data Transfers

PostDock and its service providers may process information in countries other than the country where you live. These countries may have different data-protection laws.

Where required, we use appropriate safeguards for international transfers, such as contractual protections, adequacy decisions, or other legally recognized transfer mechanisms.

12. Your Privacy Rights

Depending on your location, you may have the right to:

  • Request access to personal information we hold about you;
  • Request correction of inaccurate or incomplete information;
  • Request deletion of your personal information;
  • Request restriction of processing;
  • Object to certain processing;
  • Withdraw consent;
  • Receive a portable copy of certain information;
  • Opt out of certain sales, sharing, targeted advertising, or profiling;
  • Appeal a decision concerning a privacy request; and
  • File a complaint with an applicable data-protection authority.

To exercise a right, contact us at [email protected].

We may need to verify your identity before completing a request. Authorized agents may submit requests where permitted by law, subject to appropriate verification.

You may also:

  • Disconnect an individual social-media account from PostDock;
  • Revoke PostDock’s permissions from the relevant platform;
  • Delete drafts and uploaded media;
  • Update account details; or
  • Request deletion of your entire PostDock account.

We will not unlawfully discriminate against you for exercising a privacy right.

13. Social-Media Data Deletion Requests

To request deletion of data received from a connected social-media platform:

  1. Sign in to PostDock.
  2. Open Connections (or your connected-account settings) and disconnect the relevant account.
  3. Contact [email protected] and identify the platform and account for which deletion is requested.

We will process verified deletion requests in accordance with applicable laws and platform requirements.

You may also revoke PostDock’s access directly through the connected-app or security settings of the applicable social-media platform.

14. Marketing Communications

You may opt out of promotional emails by using the unsubscribe link included in those messages or by contacting us.

Even after opting out of marketing, you may continue to receive important transactional messages concerning your account, subscription, security, connected accounts, or changes to PostDock.

15. Children’s Privacy

PostDock is intended for business users, professionals, creators, and individuals who are at least 18 years old, or the minimum age required to enter into a binding agreement in their jurisdiction.

We do not knowingly collect personal information from children below the applicable minimum age. If you believe a child has provided personal information to us, contact [email protected], and we will take appropriate steps to investigate and delete it.

16. Third-Party Websites and Services

PostDock may contain links to third-party websites or interact with third-party platforms. We do not control their privacy, security, or data-processing practices.

This Privacy Policy applies only to PostDock. You should review the privacy policies and settings of each third-party service you use, including each connected social network.

17. Business and Team Accounts

If an organization provides your PostDock account or invites you to its workspace, that organization may control the account and associated information. Its administrators may be able to:

  • Add or remove users;
  • Assign roles and permissions;
  • Access workspace content and activity;
  • Manage connected accounts;
  • Control retention and deletion; and
  • Restrict or terminate access.

If your use of PostDock is managed by an organization, direct questions about its handling of your information to that organization.

18. Automated Processing and Artificial Intelligence

If PostDock offers AI-assisted features, such as caption suggestions, content recommendations, post optimization, or idea generation, information you submit to those features may be processed to generate the requested output.

We will identify relevant AI features in the product and provide additional disclosures where required. PostDock will not use private social-media content or customer content to train general-purpose AI models unless we clearly disclose that practice and obtain any consent required by law.

AI-generated suggestions may be inaccurate or inappropriate. You are responsible for reviewing content before publishing it.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to PostDock, our integrations, legal requirements, or our privacy practices.

When we make material changes, we will provide notice through PostDock, by email, or through another appropriate method. The “Last updated” date at the top indicates when this Privacy Policy was most recently revised.

20. Contact Us

If you have questions, concerns, or requests concerning this Privacy Policy or our handling of personal information, contact:

PostDock
Privacy email:
[email protected]