Privacy Notice

PAost is the data controller for personal data processed through PAost. This notice explains what we collect, why, who we share it with, and your rights. You can reach us through our contact form.

What we collect and why

• Account data — name, email address and login credentials, to create and secure your account (performance of our contract with you).
• Content you create — planned posts, notes, channel names, tags, uploaded images and video, and any logo you add, to provide the planning service (performance of contract).
• Support messages — your name, reply email, subject, question and submission date, to answer you (legitimate interests). Messages are stored securely and are visible only to PAost admins. The owner replies using their own email service, which will process your reply address and correspondence. Submitting a question does not sign you up for marketing.
• Planner downloads and AI Business interest — your email, optional first name, the form you submitted, submission dates and repeat-submission count. We record planner requests to provide the download and AI Business interest to manage the interest list (legitimate interests). The PDF is available on screen; we do not email it. Optional marketing consent is stored separately with its date. Declining consent does not prevent a download or registration of interest. Any future optional news and tips rely on your consent, which you can withdraw through the contact form.
• Usage and device data — IP address, browser and device identifiers, error logs and basic usage events, for security, fraud prevention and improving the product (legitimate interests).
• Subscription status — plan, status and renewal dates received from Paddle, so we know what to unlock (performance of contract, legal obligation for records).

We do not sell your personal data and we do not use your content to train AI models. Card and billing details are collected and processed by Paddle, not by us — we never see your full card number.

Lead and enquiry records are separate from account data. We keep them only while needed for your request, the interest list or consented updates, and delete or anonymise them when no longer needed, unless a legal obligation requires retention. You may request deletion or withdraw marketing consent through the contact form.

Who we share it with

• Service providers / subprocessors — hosting, database, storage, email delivery and error monitoring providers, acting on our instructions.
• Paddle, our Merchant of Record, for the sale of subscriptions, payments, subscription management, invoicing and tax compliance.
• Professional advisers — legal and accounting, where needed.
• Authorities, where we are required to disclose by law.

International transfers

Some of our providers process data outside the UK/EEA. Where that happens we rely on appropriate safeguards, such as UK/EU Standard Contractual Clauses or an adequacy decision.

How long we keep it

We keep your account and content for as long as your account is active. If you delete your account, we delete or anonymise your content and account data within 30 days, except records we must keep for legal, tax or accounting purposes (typically up to 7 years) and backups which expire on their normal cycle.

Security

We use appropriate technical and organisational measures, including encryption in transit, encryption at rest, access controls, per-user database access rules so your content is only readable by you, and private storage for uploaded media.

Your rights

You have the right to access your data, correct it, have it erased, restrict or object to processing, receive a portable copy, and withdraw consent where we rely on it. Use our contact form and we will respond within one month. If you are in the UK or EEA and you are unhappy with our response, you can complain to your supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk).

Cookies and local storage

We use essential cookies and browser local storage only — to keep you signed in and to remember basic preferences. We do not use advertising or third-party tracking cookies. Our website records cookieless page views, button clicks and completed lead forms separately, using the event name, page path, button label and timestamp; these events do not include your email address or a cross-site visitor identifier. Paddle sets its own cookies during checkout in order to process your order; you can manage cookies in your browser settings, though disabling essential ones will stop sign-in from working.