Privacy Policy

Last updated: July 15, 2026

Postuva ("the app") is a mobile application that lets businesses generate social media content with AI and publish it to the social media accounts they connect themselves. This policy explains what data we process, why, and how.

1. Data We Collect

Account: email address and password (the password is stored only as a hash).
Brand profile: brand name, handle, industry, tone, audience, strategy, logo, colors, voice preference and images you upload.
Generated content: the text, images and videos you create in the app, plus your production history.
Social media connection (optional): if you connect your Instagram account, the access token is stored encrypted with AES-256-GCM; we also process profile info, account/post statistics (followers, reach, engagement) and the comments you choose to manage. This data is accessed only for the account you connected, and only through your actions.
Purchases: credit purchases are handled by Apple/RevenueCat; your card details NEVER reach us — we only store the purchase verification event.

2. How We Use Data

To generate the content you request and provide your personalized strategy and reports.
To publish content to your connected account with your approval, and to show and reply to comments and statistics.
To manage your account, track your credits and fix issues.

We do not sell your data and do not share it with third parties for advertising.

3. Third-Party Services

We use the following services for content generation and publishing; only the data required for the specific operation is transmitted:

Anthropic (Claude): text/strategy generation
fal.ai: image and video generation
ElevenLabs: voiceover
Meta / Instagram: account connection, publishing, statistics, comments
Apple / RevenueCat: in-app purchases

4. Storage and Security

Data is stored on our servers in Europe (Hetzner). Social media tokens are stored encrypted and all communication uses HTTPS. We keep your data for as long as your account exists; if you delete your account, all of your data is permanently deleted.

5. Your Rights and Data Deletion

In the app, Profile → Delete Account permanently deletes your account and all associated data (brand, content, connections, tokens). Details: Data Deletion.

6. Children's Privacy

Postuva is not directed at users under 18.

7. Changes

We may update this policy; significant changes will be announced in the app.

Postuva · Contact: ali.atakan@selcuk.edu.tr