Privacy Policy

1. Introduction

CoPost ("we," "our," or "us") operates the website at getcopost.com and the CoPost platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. By using CoPost, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of information:

Account Information: When you create an account, we collect your email address, name, and authentication credentials. If you sign in via Google OAuth, we receive your name, email address, and profile picture from Google.

Business Profile Information: To generate personalized content calendars, we collect information you provide during onboarding, including your business name, business type, city and state, service area, services offered, brand voice preferences, target customer description, differentiators, words to avoid, social media platforms, and posting consistency preferences.

Usage Data: We automatically collect information about how you interact with our service, including pages visited, features used, content calendars generated, timestamps, and device and browser information.

Payment Information: When you subscribe to a paid plan, payment information is collected and processed by our payment processor, Stripe. We do not store your full credit card number on our servers.

3. How We Use Your Information

We use the information we collect to:

• Generate personalized social media content calendars for your business
• Provide, maintain, and improve the CoPost service
• Process transactions and manage your subscription
• Send transactional emails (account confirmation, password resets, billing receipts)
• Communicate with you about service updates and new features
• Analyze usage patterns to improve our platform and content quality
• Detect, prevent, and address technical issues or abuse

4. Third-Party Services

We use the following third-party services to operate CoPost:

Supabase: Database hosting and user authentication. Your account data and business profile information are stored securely on Supabase infrastructure.

Anthropic (Claude AI): We send your business profile information to Anthropic's API to generate personalized content calendars. Anthropic processes this data in accordance with their usage policies and does not use your data to train their models.

Stripe: Payment processing for subscriptions. Stripe collects and processes your payment information in accordance with their privacy policy and PCI compliance standards.

Resend: Transactional email delivery. We share your email address with Resend to send account-related emails such as signup confirmations and password resets.

5. Data Storage and Security

Your data is stored on secure servers provided by Supabase with encryption at rest and in transit. We implement industry-standard security measures including row-level security policies to ensure your data is isolated from other users, HTTPS encryption for all data transmission, and secure authentication with hashed passwords. While we take reasonable measures to protect your information, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account and business profile information for as long as your account is active. Generated content calendars are retained for as long as you maintain an active account. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance reasons.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your generated content calendars
• Opt out of non-essential communications
• Withdraw consent for data processing where applicable

To exercise any of these rights, contact us at hello@getcopost.com.

8. Cookies

CoPost uses essential cookies to maintain your authentication session and remember your preferences. We do not use third-party advertising or tracking cookies. Essential cookies are necessary for the service to function and cannot be disabled.

9. Children's Privacy

CoPost is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of CoPost after changes are posted constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at hello@getcopost.com.

CoPost · getcopost.com