Privacy Policy

1. Introduction

PostShuttle is the name of our social scheduling service for individuals and solo founders. It is owned and developed by Kestrel10 Limited. In this policy, "we," "us," and "our" mean Kestrel10 Limited in its capacity as operator of the Service. We are committed to protecting your privacy and complying with applicable data protection laws, including the GDPR where it applies. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our websites and applications ("Service"). Please read it carefully.

Data controller: Kestrel10 Limited is the data controller for personal data processed in connection with the PostShuttle Service. For privacy enquiries, requests to exercise your data protection rights (including subject access requests in the UK), and service-related legal questions, use only the PostShuttle channels listed in the Contact section below (for example privacy@postshuttle.com and the Contact page). Those channels are the designated way to reach us about the Service; messages are handled by or on behalf of Kestrel10 Limited.

Business customers: for most processing we are the controller and this policy governs it. Where you use the Service to handle personal data about other people — a client named in a post you schedule, for example — you are the controller of that data and we act as your processor. Our Data Processing Addendum sets out the Article 28 terms for it, applies automatically, and needs nothing signed or requested.

This policy is information about how the Service handles personal data. It is not a contract, and using the Service is not treated as your consent to anything described here. Each kind of processing has a lawful basis, set out in section 3; where that basis is consent — analytics cookies, marketing email — we ask for it separately, and you can withdraw it at any time without affecting anything else.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you provide directly to us, including:

• Account Information: Email address, password (hashed), and timezone preferences
• Profile Information: Any additional information you choose to provide in your account profile
• Content: Post text, scheduled times, destinations, and media you upload for publishing (for example images attached to posts)
• PostAssist settings: Voice profile details (topics, tone, example posts, and similar preferences), encrypted API keys you supply for third-party AI providers, and your AI generation preferences
• PostAssist prompts: Draft text, campaign briefs, and image prompts you submit when using AI-assisted features
• Payment Information: Billing address and payment method details (processed securely through our payment processor)
• Communication Data: Information you provide when contacting us for support or other inquiries

2.2 Information We Collect Automatically

When you use the Service, we automatically collect certain information, including:

• Usage Data: How you use the Service (features accessed, actions taken, approximate timing)
• Device Information: Device type, operating system, browser type, and coarse identifiers useful for security
• Log Data: IP address, access times, request paths, and diagnostic logs on our servers
• Cookies and Similar Storage: Browser cookies for authenticated sessions and browser local storage for non-sensitive preferences (see our Cookie Policy)
• Browser telemetry (optional): If you accept analytics in the cookie banner, error and performance data from your browser is sent to Sentry to help us fix bugs. Choosing "Essential only" keeps this off
• Server-side error monitoring (always on): Separately from the above, our own servers report their errors to Sentry whenever the Service is running, whatever your cookie choice. This is not a cookie and does not track you between websites, but the diagnostic record of a failed request can include your IP address and which part of the Service you were using. We rely on legitimate interests here — a service whose failures are invisible to us cannot be kept working — rather than on consent, which is why the cookie banner does not control it
• Anti-abuse: When you use signup, login, or contact flows protected by hCaptcha, hCaptcha may process technical data according to its policy
• PostAssist usage metadata: Provider, model, success/failure, and approximate token usage for AI generations (stored in our service logs)

2.3 Information from Third-Party Services

When you connect social media accounts to the Service, we may collect:

• OAuth tokens and credentials for your connected social media accounts
• Account information from connected platforms (as permitted by their APIs)
• Content and metadata from your social media accounts for scheduling purposes

3. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal bases:

• Consent: When you provide explicit consent (e.g., for marketing communications, cookies)
• Contract Performance: To fulfill our contractual obligations to provide the Service
• Legal Obligation: To comply with legal requirements (e.g., tax records, fraud prevention)
• Legitimate Interests: For security, fraud prevention, and service improvement (where our interests don't override your rights)

4. How We Use Your Information

We use the information we collect for various purposes, including:

• Service Provision: To provide, maintain, and improve the Service
• Account Management: To create and manage your account, process transactions, and send related communications
• Content Scheduling: To schedule and publish your content to connected social media platforms
• PostAssist: To generate draft posts and images when you use AI-assisted features on an eligible plan, including transmitting prompts and voice-profile context to the third-party AI provider you configure
• Communication: To send you service-related notifications, updates, and support communications
• Security: To protect the security and integrity of the Service and prevent fraud or abuse
• Analytics: To analyze usage patterns and improve the Service's functionality and user experience
• Legal Compliance: To comply with legal obligations and enforce our terms and policies
• Marketing: To send you promotional communications (with your consent, where required by law)

5. How We Share Your Information

We may share your information in the following circumstances:

5.1 Service providers

We may share your information with third-party service providers who perform services on our behalf, such as:

• Payment processing (Stripe)
• Transactional email (Sender.net)
• Cloud hosting, databases, and object storage (for example media for posts)
• Scheduled job delivery (for example Upstash QStash) so due posts can be processed securely
• Error monitoring (Sentry) — from your browser only when you have consented to analytics/telemetry cookies, and from our servers at all times (section 2.2)
• Usage analytics (Google Tag Manager, and any tags loaded through it) when you have consented to analytics/telemetry cookies and a container is configured
• Bot protection (hCaptcha) on selected forms

Each of these acts on our instructions under a contract with us that requires them to protect your information and use it only for the purposes we specify. The AI providers in section 5.2 are different, and they are set out separately for that reason.

5.2 AI providers you choose

PostAssist works only with an AI provider you choose and an API key from your own account with them. You can use the rest of the Service without ever setting one up.

When you add a key and ask for a draft or an image, we send your prompt, voice-profile context and related inputs to that provider using your credentials, on your instruction, under the agreement you hold with them — not under one we hold. We have no contract with these companies and cannot impose terms on them. What happens to your prompt there is governed by the terms you accepted when you opened your account, including whether it is used to train their models and how long they keep it.

• Text: Anthropic, Google (Gemini), OpenAI, Groq
• Images: Google (Gemini), OpenAI, Hugging Face, Stability AI

Two of them are worth knowing about before you pick, and we say so again in Settings → AI at the point you choose: Google's unpaid Gemini tier is used to improve Google's products and their terms allow human reviewers to read API input and output, which the paid tier does not; and Stability AI trains on inputs and outputs by default unless you turn that off in your Stability account.

Hugging Face passes your request on. It routes to other inference providers — Groq, Together, Replicate, fal and others — so choosing it does not by itself determine where your prompt ends up.

We store your API keys encrypted, never return them through the API or in a data export, and delete them with your account.

5.3 Social media platforms

When you schedule content through the Service, we transmit your content and associated data to the social media platforms you have connected. This sharing is necessary to provide the Service and is subject to each platform's privacy policy.

5.4 Legal requirements

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users or others
• Prevent or investigate fraud or security issues

5.5 Business transfers

In the event of a merger, acquisition, reorganization, or sale of assets involving Kestrel10 Limited or the PostShuttle Service, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your information where required by law.

5.6 With your consent

We may share your information with third parties when you have given us explicit consent to do so.

6. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure password hashing using bcrypt
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Secure storage of OAuth tokens and credentials

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements
• Maintain security and prevent fraud

Some records are pruned automatically on a fixed schedule, whether or not you ask:

• Security audit events: 365 days
• Payment webhook delivery records: 30 days
• Administrative debug logs: 30 days
• Expired password-reset tokens: 2 days
• The text of a PostAssist prompt and the text the AI returned: 30 days
• Revoked session tokens: until the point they would have expired anyway

Your posts, connected-account records and account profile are kept until you delete them or delete your account.

PostAssist prompts are deliberately short-lived. When you use AI-assisted drafting we record each generation so you can see your usage against your plan and so we can look into a failure you report. After 30 days the two parts that carry what you actually wrote — the prompt you sent and the text that came back — are erased, and only the record of the generation itself remains: the provider and model, whether it succeeded, the approximate token usage and the date. We do this because a prompt is the place people are most likely to have written about someone else, and nothing in the Service needs to read it after that. Drafts you kept are your posts, and are not affected.

When you delete your account, we delete your profile, posts, images, connected accounts, PostAssist settings and API keys, and the files behind your images.

Three things outlive the account, and this is all of them:

• Security audit records naming actions taken on the account, including the IP address and browser they came from, for up to 365 days. These exist to investigate fraud and unauthorised access, which is work that often begins after an account is gone
• A one-way, keyed hash of your email address — not the address itself, and never joined to a user — so that each address gets one free trial
• Billing records held by Stripe, which are the invoices we are required to keep for tax purposes. Those are Stripe's records, under their retention rules, not ours

Nothing else is kept. Where we say "legitimate business purposes" elsewhere in this policy, these three are what that means — we do not treat it as a general licence to keep whatever we like.

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

8.1 Access and portability

You have the right to access and receive a copy of your personal information that we hold. In the UK this is often called a subject access request (SAR). Download an export yourself from Settings at any time, or email privacy@postshuttle.com for assistance, or call GET /api/v1/gdpr/data-export (authenticated) if you use our API directly. The export includes your account profile, posts, connected accounts (without access tokens), subscription summary, and usage limits; contact us if you also need PostAssist voice-profile or provider-setting details.

8.2 Correction

You can update or correct your account information at any time through your account settings.

8.3 Deletion

Delete your account yourself in Settings, where you confirm by typing a phrase; deletion is immediate and cancels any paid subscription. You can also email privacy@postshuttle.com, or call DELETE /api/v1/gdpr/account with your account token. We honor requests subject to legal and operational requirements (for example retaining minimal billing records for tax or fraud prevention, and the one-way hash described in section 7).

8.4 Opt-out

You can opt out of marketing communications by following the unsubscribe instructions in our emails or by contacting us directly.

8.5 Complaining to the regulator

If you think we have handled your personal data wrongly, please tell us first so we can put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office, without going through us: ico.org.uk/make-a-complaint, or by phone on 0303 123 1113. Their address is Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. If you live elsewhere in the UK or the EU you may also complain to your local supervisory authority.

8.6 Cookies and similar technologies

We use essential storage (including local storage for your session) and, only if you opt in via the cookie banner, optional analytics cookies/telemetry. You can change analytics consent through the banner or by clearing site data; see the Cookie Policy for detail.

9. Cookies and tracking technologies

We use cookies, local storage, and similar technologies as described in our Cookie Policy. Essential storage keeps you signed in and remembers your cookie choice; optional analytics in your browser (for example the Sentry browser SDK) runs only if you accept analytics in the banner. Server-side error monitoring is not a cookie and is not covered by that choice — see section 2.2.

• Essential: Required for security, session, and consent state
• Optional analytics: Browser error and performance telemetry when you choose "Accept analytics"

Blocking essential storage may prevent login or break core features.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

11. International Data Transfers

PostShuttle is operated from Scotland and your data is processed in the United Kingdom and, through the service providers listed in section 5, in other countries — principally the United States. Some of those countries are not covered by a UK adequacy decision.

Most of your data does not leave adequate territory at all: the Service is hosted in the Netherlands, and our email provider is in Lithuania. Where personal data does reach the United States, we rely on the recipient's certification under the UK Extension to the EU-U.S. Data Privacy Framework — the UK–US data bridge — which the UK recognises as providing an adequate level of protection. Where that is not available we rely instead on the UK International Data Transfer Agreement or the UK Addendum to the European Commission's standard contractual clauses, together with the transfer risk assessment those require. We do not rely on your consent as the basis for these transfers. You can ask us which safeguard applies to a particular provider by emailingprivacy@postshuttle.com.

The AI providers in section 5.2 are not covered by that paragraph, because those transfers are not ours to make. You open the account with the provider, accept its terms, choose the model and supply the key; we transmit your prompt on your instruction using your credentials. The safeguard for that transfer is the one in the agreement between you and that provider. If you need to know what it is, it is in the terms you accepted with them, and we are happy to help you find it.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose
• The right to delete your personal information
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including:

• Right to Access (Article 15): Make a subject access request (SAR) by contacting us or call GET /api/v1/gdpr/data-access with your credentials
• Right to Data Portability (Article 20): Export machine-readable data via GET /api/v1/gdpr/data-export or by contacting us
• Right to Rectification (Article 16): You can update your account information through your account settings
• Right to Erasure (Article 17): Request deletion by email or via DELETE /api/v1/gdpr/account (authenticated)
• Right to Restrict Processing (Article 18): You can request that we limit how we process your data
• Right to Object (Article 21): You can object to certain types of processing
• Rights Related to Automated Decision-Making (Article 22): PostAssist uses automated generation to suggest content, but we do not make solely automated decisions that produce legal or similarly significant effects about you

You can exercise these rights (including subject access requests) by contacting us using the information in the Contact section below (we will respond within the timeframes required by applicable law, typically within one month for access requests under UK GDPR or GDPR where those laws apply).

14. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party websites or services you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last updated" date
• Sending you an email notification (if you have provided an email address)
• Displaying a prominent notice on the Service

Your continued use of the Service after such changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

For privacy, support, account, and other questions about the PostShuttle Service, contact us through: