PostrflowSign in →

Privacy Policy

Last updated: July 1, 2026

1. Overview

Postrflow, operated by Internet Kids, Inc., a Delaware corporation ("Postrflow," "we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have over your data. By using Postrflow, you agree to the practices described here.

2. Information We Collect

Account Information

When you sign up, we collect your name and email address via Google or Apple OAuth, managed by Clerk. We do not store your Google or Apple password.

Content You Create

We store content ideas, production notes, and task data that you create within the Service. This data is stored in our database (Supabase) and is associated with your account.

Connected Platform Data

When you connect social media accounts, we store OAuth access tokens and the following data from those platforms:

  • YouTube: Channel name, subscriber count, view count, video count
  • Instagram: Username, follower count, post count, recent post performance (likes, comments)
  • Facebook: Page name, follower count, page insights (reach, impressions, page views), recent post performance
  • TikTok: Username, follower count, video performance data

We only request the minimum permissions necessary to display your performance data. We do not post, publish, or modify content on your behalf on any platform.

Usage Data

We may collect basic usage information such as pages visited and features used, to help us improve the Service.

3. How We Use Your Information

  • To provide and operate the Postrflow platform
  • To display your social media performance data within the Service
  • To authenticate your account securely
  • To respond to support requests
  • To improve the Service based on usage patterns

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

4. Data Storage and Security

Your data is stored securely using Supabase, a hosted database platform. OAuth tokens for connected platforms are stored server-side and are never exposed to the browser. We use industry-standard security practices to protect your information.

Postrflow is hosted on Vercel. Authentication is handled by Clerk. These services have their own privacy policies and security practices.

5. Third-Party Services

Postrflow uses the following third-party services:

  • Clerk: authentication and user management
  • Supabase: database and storage
  • Vercel: hosting and deployment
  • Google / YouTube API: YouTube performance data
  • Meta / Instagram API: Instagram and Facebook performance data
  • TikTok API: TikTok performance data
  • Anthropic Claude API: AI-powered idea analysis
  • Twilio: SMS text message delivery

Each of these services operates under its own privacy policy. Your use of connected platforms (YouTube, Instagram, Facebook, TikTok) is also subject to those platforms' privacy policies.

6. TikTok API Data

When you connect your TikTok account, Postrflow accesses your TikTok data solely to display performance analytics within the Service. We do not share TikTok user data with third parties, use it for advertising, or store it beyond what is necessary to operate the Service. You can revoke Postrflow's access to your TikTok account at any time via TikTok's app settings.

7. Email Triage (Shared Inbox)

Email Triage is an optional feature. If you turn it on and connect an account, Postrflow receives the messages in your connected mailbox or direct-message channel. You can connect an email account (Gmail, Outlook, or any IMAP mailbox) or a messaging account (Instagram, LinkedIn, or WhatsApp) through our connection provider. For each message we store the full content, including the subject, the body, and the sender and recipient addresses, together with a short AI-generated summary and category used to sort it.

This content is stored in our database (Supabase) and is encrypted at rest. We use the following subprocessors for this feature. Unipile (SOC 2 Type II certified, EU-hosted) is the unified inbox provider that securely connects your email and messaging accounts and relays their messages to us. Anthropic generates the summary and category, and Anthropic does not use your content to train its models.

We keep triage messages for a limited retention window, 18 months by default, and automatically delete messages older than that window unless a message is linked to a saved deal. You can disconnect Email Triage at any time from the inbox. Disconnecting permanently deletes every conversation, message, and internal note in that inbox, along with the connection itself.

8. Text Messaging (SMS)

Text messaging is an optional feature. If you verify your mobile number, Postrflow, operated by Internet Kids, Inc., may send you SMS text messages. The messages we send are idea-capture confirmations (for example, confirming that an idea you texted in was saved to your Ideas board) and account or service messages. These are not marketing messages; we do not send promotional text messages.

Consent

We collect your consent in the app when you verify your mobile number in Settings. During phone verification you actively select a checkbox to opt in to text messages. It is not pre-checked, and you are never required to verify a number to use Postrflow.

Message Frequency and Rates

Message frequency varies. Message and data rates may apply.

Help and Opt-Out

Reply HELP for help, or reply STOP to unsubscribe at any time. After you reply STOP we stop sending you text messages.

We do not sell or share your mobile information, SMS opt-in, or consent with third parties or affiliates for marketing or promotional purposes.

Subprocessor

We use Twilio as our SMS provider to send and receive these text messages. Twilio operates under its own privacy policy.

9. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and content within 30 days. OAuth tokens for disconnected platforms are deleted immediately upon disconnection.

10. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Disconnect any connected social media platform at any time
  • Withdraw consent for data processing where applicable

To exercise any of these rights, contact us at team@postrflow.com.

11. Children's Privacy

Postrflow is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. Continued use of Postrflow after changes constitutes acceptance of the updated policy.

13. Contact

If you have any questions about this Privacy Policy, contact us at team@postrflow.com.