Privacy policy
Last updated November 2026
The Post Machine writes, designs and schedules social media posts for businesses. This page explains what personal information we collect to do that, what we do with it, and the choices you have. We handle personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
What we collect
- Your account: your email address and the people you add to your business, with their roles.
- Your business: its name, website, time zone, brand colours, logo, writing preferences and the services you describe.
- What you give us to write from: notes, past posts, documents and photos you upload, and text we read from your website when you run Easy Fill.
- Your posts: the captions, graphics and schedules we make, your approvals and edits, and how each post performs.
- Your social accounts: when you connect Facebook, Instagram or LinkedIn we receive permission to publish for you and to read basic results such as follower counts and post performance. We never see your passwords.
- Billing: your plan, subscription status and payment history. Card details go straight to Stripe and are not stored by us.
- Activity: sign-in and change history for your business, and a record of the AI work done for you.
We do not use advertising cookies or third-party analytics. We use only the cookies needed to keep you signed in.
How we use it
- To plan, write, design, schedule and publish your posts, and show you the results.
- To send sign-in links, weekly previews and account and billing emails.
- To take payment, prevent misuse and keep the service secure.
- To answer questions and improve how The Post Machine works.
We do not sell your personal information.
Who handles it for us
We use these providers to run the service. Each receives only what it needs for its job.
- Supabase: our database, sign-in and file storage.
- Anthropic and Google: AI models that write your captions and make your pictures. Your brand details, the material you provide and the post being worked on are sent to them with each request.
- Zernio: connects your social accounts and publishes your posts.
- Stripe: payments and invoices.
- An email delivery service: sends our emails to you.
- Our hosting provider: runs the website and app.
These providers may process information in Canada, the United States or other countries, where it can be subject to those countries’ laws. Posts you publish are, of course, visible on the networks you published them to, under those networks’ own privacy policies.
How long we keep it
We keep your information while your business has an account. When a business is deleted, we delete its brand details, posts, graphics, uploaded material, results and files, and its connection to Zernio. We may keep limited records, such as invoices and security logs, for as long as the law or our legitimate business needs require.
Your choices
- Ask to see the personal information we hold about you, or to correct it.
- Ask us to delete your business and its data, or withdraw your consent to our use of it. Some features will stop working if we no longer have what they need.
- Disconnect any social account at any time from your preferences, or from the network itself.
- Ask us to stop non-essential emails such as weekly previews. Sign-in and billing emails are part of the service.
Reply to any email we send you, or contact us through the account you signed up with.
If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.
Other things to know
The Post Machine is for businesses and is not directed at children. We protect information with access controls between businesses, encrypted connections and limited staff access, but no system is perfectly secure. If a breach puts you at real risk of harm, we will tell you.
We may update this policy. The date at the top shows the latest version, and we will tell you about important changes by email. Our terms of service explain the rest of how The Post Machine works.