Privacy Policy

PostPigeon is a product and trading brand of Gladiolus Limited, its holding and operating company. PostPigeon is not a separate legal entity. Gladiolus Limited is the data controller for account, billing, support, security, and service-usage information described in this notice.

This policy applies to PostPigeon at postpigeon.uk, its account features, APIs, and related support.

Account and organisation information

This may include your name, email address, password hash, organisation name, profile image, role, workspace memberships, permissions, invitations, language, time zone, preferences, subscription status, and account settings.

Connected social-account information

When you connect a platform, we may receive platform identifiers, profile names and images, permissions and scopes, OAuth access and refresh tokens, expiry information, pages or channels you administer, and metadata returned by the platform’s API.

Content, media, and platform data

We process drafts, captions, links, tags, prompts, comments, schedules, target accounts, uploaded images, video and audio, generated content, approvals, publication results, posts, and analytics made available by connected platforms.

Technical, usage, and security information

This may include IP address, browser, operating system, device and language information, approximate location inferred from an IP address, timestamps, session data, request and API logs, security events, errors, performance information, and feature usage.

Billing and communications

If paid features are enabled, payment providers process card or bank details. We may receive billing identifiers, plan, payment status, invoices, billing contact details, and limited transaction information. We also process support messages, feedback, and service communications.

We receive information directly from you, automatically from your use of the Service, from people who administer a workspace you join, and from social platforms and other services you choose to connect.

• Contract: to create accounts, provide requested features, store content, carry out scheduling and publishing instructions, return available analytics, provide support, and administer paid plans.
• Legitimate interests: to secure and maintain the Service, prevent fraud and misuse, diagnose faults, improve reliability and usability, understand aggregate usage, and protect our legal rights.
• Legal obligation: to comply with tax, accounting, regulatory, court, law-enforcement, and other legal requirements.
• Consent: where required for optional marketing, non-essential cookies or similar technologies, and any processing for which consent is the appropriate basis. You may withdraw consent at any time.

If you do not provide information required for an account or connection, we may be unable to provide that part of the Service.

We use connected-account credentials and content to perform actions you request, such as finding profiles, uploading media, publishing posts, checking status, and retrieving available analytics. The selected platform receives the information needed for that action and processes it under its own privacy policy.

You can disconnect a platform in PostPigeon and may also revoke access through that platform. Disconnecting stops future use of the connection but does not remove content already published or information retained independently by the platform.

Gladiolus Limited acts as controller for account administration, billing, support, service security, and our own operational usage information.

Where PostPigeon processes audience, follower, customer, message, or other third-party personal data solely on your publishing or analytics instructions, you are normally the controller and Gladiolus Limited acts as your processor. You are responsible for a lawful basis, required notices, permissions, and responding to those individuals’ rights.

If you use an AI feature, relevant prompts, instructions, and selected content may be sent to the configured model provider to generate a response. Do not enter confidential, sensitive, or third-party personal data unless you are authorised to do so.

We will identify material AI providers in service or subprocessors information when those features are enabled. You remain responsible for reviewing generated output before publication.

We may disclose information to:

• social platforms and integrations you choose to connect;
• other members of workspaces you join, according to their roles and permissions;
• hosting, database, storage, email, monitoring, security, support, analytics, AI, and infrastructure providers acting for us;
• payment processors when paid features are used;
• professional advisers, auditors, insurers, regulators, courts, or law-enforcement bodies where appropriate; and
• a buyer, investor, successor, or restructuring participant in a corporate transaction.

We do not sell personal data.

Some connected platforms and providers may process information outside the United Kingdom. Where required, we rely on an applicable adequacy regulation, approved contractual safeguards, or another lawful transfer mechanism. You may contact us for information about safeguards relevant to your data.

• account and workspace information is kept while the account is active and for a reasonable closure, recovery, dispute, and legal compliance period afterwards;
• scheduled content is kept until published, deleted, or the account is closed, subject to normal backup expiry;
• published-post records and analytics may be kept while the account remains active;
• connected-platform credentials are kept while the connection remains active or until they expire, are revoked, replaced, or deleted;
• billing records are retained as required by tax and accounting law; and
• operational, security, support, and backup records are retained for periods based on security needs, dispute handling, provider settings, and normal backup cycles.

Content already published may remain with a social platform after deletion from PostPigeon.

We use technical and organisational measures designed to protect information, including transport encryption, password hashing, access controls, restricted infrastructure access, monitoring, and backup procedures where appropriate. No internet service can guarantee absolute security.

PostPigeon uses storage technologies needed for authentication, security, language, theme, and requested functionality. If we enable non-essential analytics, advertising, or similar technologies that require consent, we will provide an appropriate consent choice before using them.

Depending on the circumstances, UK data-protection law gives you rights to access, correct, erase, restrict, or receive your personal data, and to object to certain processing. Where processing relies on consent, you may withdraw it. Rights can be limited by law and may not apply in every situation.

You have the right to object to processing based on our legitimate interests. To exercise a right, email [email protected]. We may need to verify your identity.

You may complain to the UK Information Commissioner’s Office at ico.org.uk.

PostPigeon is intended for adults and is not directed to children. We do not knowingly collect personal data from children.

PostPigeon does not currently make decisions producing legal or similarly significant effects about users solely by automated means. If this changes, we will update this notice and provide required information and safeguards.

We may update this policy as the Service, providers, or legal requirements change. We will post the current version here and take reasonable steps to notify users of material changes.

Gladiolus Limited
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, England
Privacy: [email protected]