Privacy Policy

PostWire is a tool for building automated video pipelines. You point it at sources, it writes a script, generates a voiceover, renders a video, and publishes it to the social accounts you connect. This policy explains what data that involves.

It applies to postwire.ai, the PostWire console at console.postwire.ai, and the PostWire API. It does not apply to the social platforms you connect, which handle your data under their own policies.

We collect four kinds of data, and no more than the product needs to run.

• Account details. Your email address, your name, and a password stored only as a one-way hash. If you sign in with Google we receive your email, name and profile picture from Google instead of a password. We keep a record of sign-in attempts (email, time, and whether it succeeded) so you and we can spot unauthorised access.
• What you create. Your workspaces, pipelines, schedules, and the instructions you write for the script generator. The sources you configure, such as a subreddit name, a feed URL, or text you paste in yourself, along with the source material fetched from them. The scripts, voiceovers, images and finished videos produced by your runs.
• Connected accounts. For each social account you connect: the platform, your account identifier on it, your display name, your handle, and your profile picture. Access credentials are covered in the next section.
• Usage and billing. A record of every pipeline run, the steps it took, and the tokens it consumed, which is what your usage is billed against. If you subscribe, our payment processor holds your card details and gives us a customer reference, your plan, and its status. We never see or store your card number.

We do not sell your data, we do not use it for advertising, and we do not build profiles of you for any purpose other than running the product you are paying for.

Connecting an account such as TikTok or YouTube is what lets PostWire publish on your behalf. You authorise the connection on the platform itself, and you can revoke it at any time from either PostWire or the platform.

• What we receive. Basic profile information for the account you connected, so the console can show you which account a pipeline posts to. We do not read your messages, your followers, or content you did not publish through PostWire.
• What we do with it. We upload and publish the videos your pipelines produce, to the accounts you selected, and record whether each attempt succeeded along with the resulting post link.
• Access credentials. Tokens granted by the platform are encrypted before they are stored and are never shown in our interface or included in any data we return through the API. They are used only to publish content you approved or scheduled.
• Disconnecting. Removing a channel in PostWire deletes the stored credential for it. Revoking access on the platform has the same effect from the platform side, and PostWire will show the connection as revoked the next time it checks.

Data received from a platform is used only to provide the features you asked for. It is not sold, not shared for advertising, and not used to train any model.

• To run your pipelines: fetch sources, generate scripts and voiceovers, render videos, and publish them where you told us to.
• To show you what happened, including run timelines, previews, and the approval queue.
• To meter usage against your token balance and to bill your plan.
• To keep accounts secure, investigate abuse, and enforce our terms.
• To send messages you need, such as verification, approval requests, billing notices and service problems.

Where the law requires a legal basis, ours is performance of our contract with you for the first three, and our legitimate interest in operating a secure service for the rest.

Generating a video means sending content to third-party model providers. When a pipeline runs, the source material and your instructions go to a language model provider to produce the script, and the resulting script goes to a speech provider to produce the voiceover. The provider used depends on the model selected for that pipeline.

We send only what the step needs. We do not send your account details, your billing information, or the credentials for your connected accounts. We do not use your content to train models, and we select providers on terms that do not permit them to train on it either.

We use a small number of providers to run the service. They process data on our instructions and for no purpose of their own.

• Google Cloud. Hosting, video rendering, and storage of the media your pipelines produce.
• Neon. The managed Postgres database holding your account and pipeline data.
• Model providers. Language and speech generation, as described above.
• Stripe. Subscriptions and payments. Stripe handles your card details directly; we receive only a reference and status.
• Publishing providers. Delivering finished videos to the platforms you connected, where a pipeline publishes through an aggregator rather than a direct platform connection.

We also disclose data if the law requires it, or to protect our rights or someone's safety. If PostWire is ever acquired, your data would transfer with the business, and we would tell you before it did.

Data is stored in the United States. If you are outside the United States, using PostWire means your data is transferred there, and we rely on standard contractual clauses where they apply.

Traffic is encrypted in transit. Passwords are stored as one-way hashes and cannot be recovered by us. Credentials for connected accounts and other secrets are encrypted at rest and held in a managed secret store, separate from the application database. Access to production systems is limited to people who need it.

No service can promise perfect security, and we do not. If a breach affects your data, we will tell you and the relevant regulator as the law requires.

• While your account is open. Your account, pipelines and connected accounts are kept until you delete them or close your account.
• Generated media. Intermediate files from a run are cleaned up automatically once the run finishes. Finished videos are kept so you can review and download them, until you delete them or close your account.
• After you close your account. We delete your account, content and connected credentials within 30 days. Billing records are kept longer where tax and accounting law requires it.

You can edit or delete your pipelines, sources, videos and connected accounts at any time from the console, and you can close your account entirely. Depending on where you live, you may also have the right to access a copy of your data, correct it, delete it, object to processing, or ask for it in a portable form.

To exercise any of these, write to privacy@postwire.ai. We answer within 30 days. If you are in the EEA or the UK you may also complain to your local data protection authority.

PostWire is not for children. You must be at least 18, or the age of majority where you live, to use it. We do not knowingly collect data from children, and we delete it if we discover we have.

If we change this policy we will update the date at the top of this page. For changes that materially affect how we handle your data, we will tell you by email or in the console before they take effect.

Privacy questions and data requests: privacy@postwire.ai

Anything else: support@postwire.ai