Privacy Policy

1. Introduction

PostUnivers (“we”, “our”, “us”) operates postunivers.com and is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR), the EU ePrivacy Directive, and other applicable data protection laws.

This Privacy Policy explains what personal data we collect, how we use it, and what rights you have regarding your data.

2. Data Controller

3. Data We Collect

3.1 Account Data

When you register, we collect:

• Full name and email address
• Encrypted password (we never store passwords in plain text)
• Plan type and subscription status

3.2 Social Media Account Data

When you connect social media accounts, we store OAuth access tokens and profile information (username, profile picture, platform ID) required to publish content on your behalf. We do not store your social media passwords.

3.3 Content Data

We store the content you create, upload, and schedule through PostUnivers, including text ideas, media files, AI-generated captions, and scheduling data.

3.4 Usage and Analytics Data

We collect technical data such as IP address, browser type, pages visited, and feature usage to improve the platform. This data is processed on the basis of our legitimate interest.

3.5 Payment Data

We do not collect or store your payment card information directly. All payment processing is handled by Paddle.com Market Limited as the Merchant of Record. Paddle collects and processes your billing name, address, and payment method in accordance with their Privacy Policy. We only receive a transaction reference and subscription status from Paddle.

4. Legal Basis for Processing

• Contract performance: Processing necessary to provide the PostUnivers service you subscribed to
• Legal obligation: Compliance with tax, accounting, and legal requirements
• Legitimate interests: Platform security, fraud prevention, and service improvement
• Consent: Marketing communications (you may withdraw consent at any time)

5. How We Use Your Data

• To provide and operate the PostUnivers platform
• To process your subscription and manage billing through Paddle
• To generate AI captions using the content ideas you provide
• To publish and schedule content to your connected social media accounts
• To send transactional emails (account confirmation, billing receipts)
• To send product updates and newsletters (with your consent)
• To detect and prevent fraud or abuse

6. Data Sharing and Third Parties

We share your data only with:

• Paddle — payment processing and subscription management (Merchant of Record)
• Anthropic — AI caption generation via the Claude API. Content ideas you submit are processed by Anthropic to generate captions. See Anthropic's Privacy Policy
• Social media platforms — content and media files shared when you publish posts through PostUnivers
• Hosting and infrastructure providers — cloud services used to run the platform, bound by data processing agreements

We never sell your personal data to third parties.

7. International Data Transfers

Some of our third-party providers may process data outside the EU/EEA. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses approved by the European Commission) to protect your personal data.

8. Data Retention

We retain your account data for as long as your account is active. After account deletion, we retain data for up to 30 days for backup and legal compliance purposes, after which it is permanently deleted. Billing records may be retained for up to 7 years as required by tax law.

9. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data (“right to be forgotten”)
• Restriction — request that we limit processing of your data
• Data portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests or for direct marketing
• Withdraw consent — at any time, for processing based on consent

To exercise your rights, email us at hello@postunivers.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

10. Cookies

PostUnivers uses essential cookies required for authentication and session management. We do not use third-party advertising cookies. You can manage cookies through your browser settings; disabling essential cookies may affect the functionality of the platform.

11. Security

We implement industry-standard security measures including encrypted data storage, HTTPS, JWT-based authentication, and regular security reviews. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security but we take all reasonable steps to protect your data.

12. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice on the platform. Continued use of PostUnivers after the effective date of any changes constitutes acceptance of the updated policy.

13. Contact