Information We Collect
We collect information that is necessary to provide and improve the GroupPostr service. We collect information in the following ways:
1.1 Information You Provide Directly
- Account information: When you register, we collect your email address and a password (stored as a secure hash).
- Social media credentials: To enable auto-posting, we store authentication tokens for the social media platforms you connect. We never store your social media passwords.
- Content you create: Post text, images, scheduling preferences, campaign settings, and RSS feed URLs that you submit through the platform.
- Payment information: Billing transactions are processed by our payment provider (Stripe). We do not store full card details on our servers.
1.2 Information Collected Automatically
- Log data: IP address, browser type, pages visited, referring URL, and timestamps when you access the GroupPostr web app.
- Extension activity: The browser extension logs posting actions (success/failure) and sends these records to our servers so you can review them in your activity dashboard. No browsing history outside of GroupPostr-related pages is ever collected.
- Usage data: Feature usage patterns (e.g., number of posts scheduled, platforms used) to help us improve the service.
1.3 Information We Do NOT Collect
- We do not collect your browsing history on websites unrelated to GroupPostr.
- We do not read, store, or transmit private messages on any social platform.
- We do not collect precise geolocation data.
- We do not sell or rent your personal data to third parties.
How We Use Your Information
We use the information we collect to:
- Create and manage your account and authenticate your sessions.
- Execute automated social media posts to the groups and platforms you have configured, on your behalf.
- Display your posting history, analytics, and campaign performance in your dashboard.
- Send transactional emails (account confirmation, password reset, billing receipts). We do not send unsolicited marketing emails without your consent.
- Monitor service health, debug errors, and prevent fraudulent or abusive use of the platform.
- Comply with legal obligations and enforce our Terms of Service.
We process your data on the legal bases of contract performance (to deliver the service you signed up for), legitimate interests (to keep the service secure and improve it), and consent where required by applicable law.
Chrome Extension — Specific Disclosures
Chrome Web StoreThe GroupPostr Chrome extension requires certain browser permissions to function. Below is an explanation of each permission and why it is needed:
| Permission | Why It's Needed |
|---|---|
| activeTab | Allows the extension to interact with the currently active browser tab to perform posting actions on social media pages. |
| storage | Stores your session token and user preferences locally in the browser so you remain logged in between sessions. |
| scripting | Injects scripts into social media pages to automate the posting workflow on your behalf. |
| alarms | Schedules background tasks to trigger posts at the exact times you configured. |
| Host permissions (social media domains) | Required to read page content and interact with posting forms on the social media sites where you post. |
| Host permissions (grouppostr.ai) | Allows the extension to communicate with the GroupPostr API to retrieve your campaigns, log posting results, and sync settings. |
Data sent from the extension to our servers
The extension sends your authentication token (to verify your identity) and posting results (success/failure status, timestamp, target group) to the GroupPostr API. This data is used solely to populate your activity log and is never shared with third parties for advertising purposes.
The extension does not capture screenshots, record keystrokes, access your passwords, or monitor any website activity outside of the specific social media domains required for posting.
Data Sharing and Third Parties
We do not sell your personal data. We share data only in the following limited circumstances:
- Service providers: Trusted vendors who help us operate the platform (e.g., cloud hosting, payment processing via Stripe, email delivery). These providers are contractually required to protect your data and may only use it to provide services to us.
- Social media platforms: When you initiate a post, your content is submitted to the relevant social media platform using your authenticated session. That platform's own privacy policy governs how they handle that data.
- Legal requirements: We may disclose data if required by law, regulation, court order, or to protect the rights and safety of GroupPostr and its users.
- Business transfers: If GroupPostr is acquired or merges with another entity, your data may be transferred as part of that transaction. You will be notified in advance.
Data Retention
We retain your account and associated data for as long as your account is active. If you delete your account:
- Personal identifiers (email, name) are deleted within 30 days.
- Posting activity logs are anonymised and may be retained for up to 90 days for security and abuse-prevention auditing.
- Billing records are retained for the period required by applicable financial regulations (typically 7 years).
You may request deletion of your data at any time by contacting us at support@grouppostr.ai.
Security
We implement industry-standard security measures to protect your data:
- All data in transit is encrypted using TLS 1.2+.
- Passwords are hashed using a strong one-way algorithm and never stored in plain text.
- Access to production databases is restricted to authorised personnel only.
- Authentication tokens are short-lived and refreshed periodically.
- We regularly review our infrastructure and code for security vulnerabilities.
While we take security seriously, no system is completely immune to breaches. In the event of a data breach that affects your personal data, we will notify you as required by applicable law.
Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal data:
Access
Request a copy of the personal data we hold about you.
Correction
Ask us to correct inaccurate or incomplete data.
Deletion
Request that we delete your personal data.
Portability
Receive your data in a machine-readable format.
Objection
Object to processing based on our legitimate interests.
Restriction
Ask us to limit how we use your data in certain circumstances.
To exercise any of these rights, contact us at support@grouppostr.ai. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
Opt-out of marketing emails
You can unsubscribe from marketing communications at any time via the unsubscribe link in any email or by contacting us directly. Transactional emails (e.g., billing, security alerts) cannot be opted out of while your account is active.
Children's Privacy
GroupPostr is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal data from children. If you believe a child has provided us with their information, please contact us immediately at support@grouppostr.ai and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or via a prominent notice within the GroupPostr application at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the service after the effective date constitutes your acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: