Privacy policy

1. Who we are

KeepsPosted is provided by [legal entity name], [registered address]. For anything about your data, write to hello@keepsposted.com.

2. What we collect

Account details: your name, email address and sign-in information, and the same for collaborators you invite.

Brand content you add or import: past posts, photos, captions, business facts (such as services, hours and offers), playbooks, drafts, comments and approvals.

Connected accounts: the information needed to publish to the Instagram and Facebook accounts you connect, and the results of each publishing attempt.

Client approvers: if you send an approval or photo-request link, we record the actions taken through it (such as approve or request changes), with the time and basic device information, so there is a record of who approved what.

Billing: plan and invoice details. Card details are handled by our payment provider; we do not store full card numbers.

This marketing website does not use analytics or advertising trackers. [Confirm before launch.]

3. How we use it

To provide the service: building playbooks, suggesting and drafting posts, running checks, sending approval links, scheduling and publishing, and keeping the publishing record.

To support you, keep the service secure, prevent abuse and meet legal obligations. We do not sell personal data.

4. AI processing

To create playbooks and drafts, we send the relevant brand’s content to AI model providers [currently OpenAI]. Each request contains one brand only. We ask providers not to use this content to train their models; providers may keep it for a limited period [up to 30 days] for abuse monitoring.

We do not train models on content pooled across customers, and we do not use one client’s content to write for another.

5. Who we share it with

Service providers that help us run KeepsPosted, under contracts that limit how they use the data: hosting and storage, AI model providers, publishing partners that deliver posts to Instagram and Facebook, email delivery, and our payment provider. [List of subprocessors to be published.]

Meta receives the posts you publish, as with any post on Instagram or Facebook.

6. Retention and deletion

We keep your data while your account is active. When you close your account or remove a brand, we stop its scheduled jobs and delete its data, including derived data such as playbooks, within [period]. Backups are overwritten on a rolling schedule of [period].

7. Your rights

Depending on where you live, you can ask to access, correct, export or delete your personal data, or object to how we use it. Write to hello@keepsposted.com. If a client of yours asks us about their data, we will work with you to answer.

8. International transfers and security

[Hosting regions and transfer safeguards to be confirmed.] We protect data with access controls, encryption in transit and audit logs of privileged actions.

9. Changes

We will update this policy as the product changes and tell account owners about material changes.