Privacy Policy
Your privacy matters. This policy explains how Join Postly collects, uses and protects your information, including data we receive from Facebook and Instagram.
1. Who we are
Join Postly (joinpostly.com) is a social media scheduling and management tool. This policy explains what we collect, why, and how you control it. Questions: info@joinpostly.com.
2. Information you give us
Your name, email address and password when you sign up (the password is stored only as a secure hash), your plan, and the content you create in Join Postly: posts, captions, drafts, schedules, your link-in-bio page, the notes and statuses you add to leads, and the lead sources, forms and automations you set up.
3. Data we receive from Facebook and Instagram
When you connect a Facebook Page or an Instagram professional account, we receive and store: the Page / Instagram account ID, name, username and profile picture; a Page access token (encrypted with AES-256 before it is saved); and the app-scoped ID of the Facebook user who connected it, so we can honour removal and deletion requests from Meta. Comments, messages, insights and Lead Ads submissions are read live from Meta when you open the Inbox, Analytics or Leads pages and are shown only to you. We don't keep copies of them on our servers. For leads we store only the lead ID together with the status and notes you add.
4. How we use Meta data
Only to provide the features you ask for: publishing and scheduling your posts, showing and replying to your comments and messages, showing your Page and post insights, and showing your leads. We do not sell Meta data, use it for advertising, share it with data brokers, or use it to train AI models. Each permission is used only for its feature: for example pages_manage_posts and instagram_content_publish to publish what you schedule, pages_messaging and instagram_manage_messages to show and send replies, read_insights and instagram_manage_insights for analytics, and leads_retrieval for the Leads page.
5. Data we receive from Google and YouTube
When you connect a YouTube channel, Google asks you to allow three permissions. We use each one only for its feature. youtube.upload uploads the videos you schedule. youtube.readonly reads your channel's ID, name and profile picture so you can pick the channel. youtube.force-ssl posts the optional first comment you write. We store the channel ID, name and picture and an access and refresh token encrypted with AES-256. We don't download or keep your existing videos, comments, subscribers or analytics. Research uses only public YouTube data through our own API key, not your account. Disconnecting YouTube in Join Postly deletes the tokens at once. You can also remove access at any time at myaccount.google.com/permissions.
6. Google API Services: Limited Use
Join Postly's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the features you use in Join Postly. We do not sell it, use it for advertising, or let people read it except with your consent, for security reasons, or where the law requires. We do not use it to train general AI or machine-learning models. YouTube features also follow the YouTube API Services Terms of Service and Google's Privacy Policy (policies.google.com/privacy).
7. Other networks you connect
For every other network you connect, such as Threads, LinkedIn, Pinterest, TikTok, Bluesky, Mastodon, Telegram, Discord, Reddit, Tumblr, WordPress, Lemmy, Nostr or Slack, we store only what's needed to post for you: the account ID, name, picture and the login token or key, encrypted at rest. Each network's data is used only to publish and show your own posts and is never sold or used for advertising. Disconnecting an account deletes its token immediately.
8. Postly Rank (SEO tools)
When you run a Site Audit or a page or backlink check, our crawler JoinPostlyBot reads the public pages of the website you enter, following its robots.txt. Public page data (titles, headings, text and links) goes into the Join Postly Index, which other Postly Rank users can search; we never record which workspace audited a website. Your audit reports, keyword lists, articles and drafts stay private to your workspace. Files you upload, such as Google Search Console or Bing Webmaster exports, stay private to your workspace and are never shared or added to the public index. Keywords typed into Questions Explorer may be sent to DuckDuckGo's autocomplete service (and to the public Stack Exchange and Wikipedia APIs) to fetch suggestions, without any account or personal data.
9. Join Postly Analytics (on our customers' websites)
Join Postly Analytics is a website analytics tool our customers can add to their own websites. It uses no cookies and stores nothing on the visitor's device. Visitor IP addresses and browser details are used only for a moment to make a visitor code (a hash with a secret value that changes every day and is then deleted), and are never stored, so the same person on two days or two websites cannot be linked, not even by us. We record the page path (without query strings), the referring site, campaign tags, country and city, device, browser and operating system names, time on page and events the website owner defines. Data is never combined across websites, never sold and never used for ads. Bots are filtered out, and site owners can choose to honour Do Not Track and Global Privacy Control. Raw events are kept by Cloudflare for at most 3 months; daily totals for 6 months (Free) or 2 years (paid plans), or until the site or account is deleted. For this tool the website owner is the controller and Join Postly is the processor.
10. Backlink Monitor
Links you track in Backlink Monitor are public facts: a public web page that links to a website. When our crawler JoinPostlyBot checks one, it reads only that public page (following its robots.txt), and the link it finds (the linking page, the page it points to, the link text, whether it is follow or nofollow, and the date we checked) is added to the shared Join Postly link index that powers backlink reports for all Postly Rank users. We never store which workspace or person added, imported or tracks a link in that shared index. Your list of tracked links, its history, your alert settings, the files you import and your IndexNow key stay private to your workspace and are deleted with it. When you connect social accounts, we only read the website field they already show publicly to suggest links; we don't post anything.
11. Join Postly Trends
To show which topics are rising, Join Postly counts the short keywords people research in Postly Rank (for example in Keyword Research, content briefs, keyword clustering and topical maps) and the hashtags and topic tags of posts they schedule. We never store the text of your posts, and we never store which account or workspace used a keyword: each workspace is turned into a random code that changes every week and cannot be traced back to you, and only daily totals are kept. A keyword is shown in Trends only when at least five different workspaces used it in the same week, so nothing can point to a single business. Terms that look like personal details (such as email addresses, phone numbers or web links) are never counted. Daily totals are kept for 90 days and weekly summaries for 13 weeks, then deleted.
12. Media files
Photos and videos you upload are kept in private storage and are deleted automatically once the post is published. Media in drafts, failed posts and upcoming posts is kept until it is published or you delete the post.
13. Leads you collect with Join Postly
When you use Lead sources (Join Postly Lead Forms, the website script, the WordPress plugin, webhooks from tools such as Zapier or Google Ads, AI email parsing or a CSV/Excel import), the details your leads send, such as name, email address, phone number, message, form answers, the page they came from and campaign tags, are stored in your workspace so you can follow up. For these leads you are the controller and Join Postly is your processor (see our DPA). We use them only to show them to you and your team and to run the automations you switch on: rules, duplicate merging, follow-up reminders, lead copies and daily digests to the addresses you choose, and your own outgoing webhooks. We never sell them or use them for advertising. Password, payment card and file-upload fields are never stored. Hosted forms use a hidden spam check and, only when a submission looks automated, a Cloudflare Turnstile check. You can delete any lead, undo an import or export your leads at any time, and all of them are deleted with your account. Facebook, Instagram and LinkedIn leads are not copied: they are still read live from the platform.
14. AI lead parsing and lead scores
If you forward lead alert emails to your private leads+…@joinpostly.com address, Cloudflare Email Routing delivers them to us. We drop attachments, never open links, and send only the email's text to Cloudflare Workers AI to find the customer's name, email, phone number and message. The email itself is not stored, only the lead found in it. If AI lead score is on, a new lead's name, message and form answers (not its email address or phone number) are sent to Workers AI to make a 0–100 score and a one-line summary. These AI requests are not stored by us and are not used to train AI models.
15. Automatic replies to your leads
If you turn on the New Lead Auto-Responder, each new lead with an email address gets at most one email with the text you wrote, sent from “your business name via Join Postly” <info@joinpostly.com>, with replies going to your login email or to another address you confirmed with one click. Every reply includes your business name and address (when set in Brand Kit) and a one-click unsubscribe link. When someone unsubscribes, we keep only a keyed hash of their email address, never the address itself, so that workspace never emails them automatically again.
16. Conversions API (optional, Pro)
If you turn on “Send lead quality to Meta”, each time you mark a lead Contacted, Won or Lost we send that stage and the lead ID to your own Meta dataset. No names, phone numbers or emails are sent. The access token you provide is stored encrypted, and you can pause or remove it at any time.
17. AI and GIF features
AI features are on paid plans. When you use AI caption or hashtag suggestions or AI Studio, the text you have written is sent to Cloudflare Workers AI (Meta Llama models) to create suggestions. We don't store these requests. AI images are made with Cloudflare Workers AI (FLUX) and aren't stored by us; free photos come from Openverse and Pixabay. GIF search terms are sent to GIPHY, and the GIF you pick is copied into your post's media.
18. Service providers
We use Cloudflare (hosting, security and AI), Neon (database), Backblaze B2 (private media storage), Meta (Facebook and Instagram), Google (YouTube) and GIPHY to run the service. They process data only on our behalf, to provide the service. Payments for paid plans are handled by Paddle, our reseller and Merchant of Record; we never see or store your full card number. To stop free trials being reused, we keep a record that a workspace and account started a trial, plus a keyed hash of the network it came from (never the IP address itself).
19. Security
All traffic is encrypted with HTTPS. Social account tokens are encrypted at rest and never sent to your browser. Access to data is limited to your own account, and sign-in attempts are rate-limited.
20. Retention and deletion
Your account data is kept while you have an account. Disconnecting an account in Join Postly deletes its token and details immediately. If you remove Join Postly in your Facebook settings, Meta tells us and we delete the stored tokens at once. A data deletion request sent through Facebook deletes the connected accounts we received from Meta and gives you a confirmation code. To delete your whole Join Postly account, use Settings → Delete account: your posts, media, connected accounts and other data are deleted at once. You can also email us (see the Data Deletion page); we complete those requests within 30 days.
21. Your rights
You can access, correct, export or delete your information, and withdraw consent by disconnecting accounts or removing Join Postly from Facebook. To exercise your rights, contact info@joinpostly.com.
22. Changes and contact
We will update this page if our practices change and show the new date here. Last updated: 11 October 2026. Contact: info@joinpostly.com.
23. Who is responsible for your data
Join Postly is a product of Seven Zones Services Limited, a company registered in England and Wales (company number 09784212). Registered office: 9 Station Road, West Drayton, England UB7 7BT, United Kingdom. Seven Zones Services Limited is the data controller for the personal data described in this policy (and the processor for data you manage on behalf of your own customers, as set out in our DPA). Contact: info@joinpostly.com, phone +44 7462 444377.
We take your privacy seriously.
Your data is yours. Always. We're committed to keeping it safe, secure, and in your control.