This policy explains what Postcurl collects, why, and what control you have. Postcurl is a tool for publishing posts to your own social media accounts, reading and answering their comments and messages, and automating routine replies. Postcurl is operated by Purshotam Yadav, an individual ("we").
What we collect
- Your name, email address and profile picture from Google, to sign you in.
- For each social account you connect: its id, name, username, profile picture, follower count and the access token the network issues. Tokens are encrypted before they are stored.
- The posts, captions, photos and videos you create or upload in Postcurl, and your schedule.
- Numbers the networks report for your posts and accounts (views, likes, comments, shares, followers), and comments and messages on your accounts, so you can read and answer them in Postcurl.
- The automations you set up, and a log of what they did.
Google user data
Postcurl asks Google only for what each feature needs:
- Sign-in (openid, email, profile): your name, email address and profile picture, to create your account and show who is signed in.
- YouTube, only when you connect a channel:
- youtube.upload: upload the videos you publish or schedule in Postcurl to your channel.
- youtube.readonly: read your channel and its videos, to show your posts and their status.
- youtube.force-ssl: read comments on your videos and post the replies you write, or that an automation you set up sends; hide or delete comments when you ask.
- yt-analytics.readonly: read views, watch time and subscriber numbers for your Insights pages.
Postcurl's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the features above to you; it is not sold, not used for advertising, not shared with third parties except as needed to run the service, and not used to train AI or machine learning models. People don't read it except when you ask us for support, for security, or when the law requires it.
Postcurl uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can revoke Postcurl's access to your Google account at any time at Google security settings.
How we use it
Only to provide Postcurl: publishing what you ask us to, showing your posts, inbox and analytics, and running the automations you turn on. We don't sell your data, show ads, or use your content to train AI models.
Sharing
Your content is sent only to the networks you choose (Facebook, Instagram, Threads, WhatsApp, YouTube, LinkedIn, Pinterest, TikTok or X), under their own privacy policies. We use infrastructure providers (hosting and database) to run the service; they process data only on our behalf.
Security
Data is sent over HTTPS. Access tokens are encrypted at rest, and each workspace's data is only available to its members.
Retention and deletion
- Data stays while your workspace exists.
- Disconnecting an account deletes its token and the posts imported from it.
- Settings → Profile → Delete account deletes your account and every workspace you own, with all their data, right away. Files are removed from our servers at the same time; backups roll over within 30 days.
- You can also revoke Postcurl's access in each network's settings at any time.
- Or email us and we'll delete your data within 30 days.
Children
Postcurl is not meant for anyone under 16 and we don't knowingly collect their data.
Changes
If this policy changes in a way that matters, we'll update the date above and tell you in the app.
Contact
Questions or deletion requests: purshotamyadav110@gmail.com.