What we collect
We collect what you give us and what the service needs to run:
- Account: your name, email address and password. Passwords and email verification codes are stored only in hashed form.
- Your content: the sources, prompts and files you bring, brands and personas, voice samples for voice cloning, and everything you generate.
- Billing: your plan, credit balance and history, and payment orders. Razorpay handles the payment itself; we never see or store card or bank details.
- Usage: if you accept product analytics, product events tied to a pseudonymous user ID, such as the pages you view (sent from your browser) and sign-ins, payments and the features you use (sent by our servers), with names and email addresses removed before they are sent; error reports; and server logs that include IP addresses.
- Browser extension: a device token (stored only as a keyed hash), which platforms the browser is signed in to (whether a sign-in cookie exists, never its value), the Chrome profile's account email used to name the device, and the progress of each post.
- Connected accounts: the access a social or marketing account grants when you connect it.
How we use it
To run Post House: generate your content, post it where you ask, bill for it, keep accounts secure, prevent abuse, answer support requests and understand which features are used. We send account emails (verification codes, password resets, a welcome note). We don't sell your personal data and we don't show ads.
Who processes it for us
Your prompts, sources and files are sent to the providers that do the work, under their own terms:
- AI models for text, images, video, voice and transcription, such as Anthropic, OpenAI, Google, xAI, ElevenLabs, fal.ai, Replicate, Groq, Sarvam and Inworld
- Research and search: Perplexity, Tavily, Exa and Serper
- Stock media searches: Pexels, Unsplash and Pixabay
- Payments: Razorpay
- Hosting and file storage: Cloudflare (including Cloudflare R2)
- Email delivery for account emails
- Product analytics, only if you accept them: Amplitude; error monitoring: Sentry
- Connected social and marketing accounts: Composio
Logs of AI calls
Requests to AI providers and their answers are logged so we can fix problems and bill correctly. Images, audio and video in those logs are replaced by a short description (type and size), and keys and signed links are removed. These logs are kept for up to 90 days, then deleted.
Cookies and browser storage
We use a cookie to keep you signed in (for 30 days when you tick "Remember me"). The app keeps small preferences, such as a dismissed tip, in your browser's storage. Product analytics (Amplitude) run only after you accept them. Until you accept in a browser, that browser sends Amplitude nothing; once you do, Amplitude stores an identifier there to recognise the device. Your answer is kept in your browser. Your account keeps the newest answer you give while signed in, or that a browser held when you signed in there; but a yes given in a browser before you signed in there, which on a shared browser may be someone else's, never replaces an answer your account already has. Our servers send Amplitude events about your account only while the answer kept with your account is yes, and a change reaches all of them within a minute. You can change your answer at any time with "Cookie settings" at the bottom of our public pages or in the account menu; declining removes Amplitude's identifier from your browser. We use no advertising cookies.
How long we keep it
We keep your data while your account exists. Deleting your account in Settings permanently removes your projects, videos and other media, voices (cloned voices included) and brand kits. Billing records (payments, the credit ledger and subscriptions) are kept in anonymized form for accounting.
Your choices
You can change your name, email address and password in Settings and delete your account there. To ask for a copy of your data, a correction, or anything else about your privacy, email [email protected].
Security
Traffic to Post House is encrypted (HTTPS), and passwords, verification codes and extension device tokens are stored only in hashed form. Anyone you share a link to a generated file with can open it, so share links with care.
Children
Post House is not meant for children. Don't use it if you are under the age at which you can agree to these terms where you live.
Changes to this policy
We may update this policy. The date at the top shows the latest version, and for a change that matters we will tell you by email or in the app.
Contact
Privacy questions and requests: [email protected].