← Back to home

Privacy Policy

Last updated: January 2026

1. Introduction

nPosts.ai ("we", "our", "us") is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable French legislation. This privacy policy explains how we collect, use, store, and protect your personal data when you use our social media publication management platform.

2. Data We Collect

2.1 Account Data

When you create an account, we collect:

• First and last name
• Email address
• Password (encrypted)
• Organization information (name, business sector)

2.2 Connected Social Media Data

When you connect your social media accounts, we access:

• Facebook/Instagram: Pages you manage, page IDs, access tokens, publication metrics
• Google Business Profile: Business listings, location information
• TikTok: Business accounts, publication data

2.3 Usage Data

We automatically collect:

• IP address
• Browser and device type
• Pages visited and actions taken
• Date and time of access

3. Processing Purposes

Purpose	Legal Basis (GDPR Art. 6)
Service provision	Contract performance
Social media connection	Consent
Content publication	Contract performance
Service improvement	Legitimate interest
Customer support	Contract performance
Marketing communications	Consent
Legal compliance	Legal obligation

4. Data Sharing

We share your data only with:

• Supabase (database hosting) - EU
• Vercel (application hosting) - EU/US with standard contractual clauses
• Meta Platforms (Facebook, Instagram) - for publication
• Google (Google Business Profile) - for publication
• TikTok (ByteDance) - for publication

We never sell your personal data to third parties.

5. Data Retention

Data Type	Retention Period
Account data	Account duration + 3 years
Social media tokens	Until revocation or expiration
Published content	Account duration + 1 year
Usage logs	12 months
Billing data	10 years (legal obligation)

6. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Right of access (Art. 15): Obtain a copy of your data
• Right to rectification (Art. 16): Correct inaccurate data
• Right to erasure (Art. 17): Request deletion of your data
• Right to restriction (Art. 18): Limit processing of your data
• Right to portability (Art. 20): Receive your data in a structured format
• Right to object (Art. 21): Object to processing
• Right to withdraw consent: At any time

To exercise your rights: privacy@nposts.ai

Response time: Maximum 30 days

7. Data Security

We implement appropriate technical and organizational measures:

• Encryption of data in transit (TLS 1.3) and at rest
• Two-factor authentication available
• Data access limited to authorized personnel
• Regular security audits
• Hosting on secure servers in Europe

8. Changes

We may modify this policy at any time. Significant changes will be notified by email or through the application.