Legal

Privacy Policy

Effective Date: April 11, 2026
Last Updated: October 8, 2026

PostShop ("we," "us," or "our") is a managed social media content creation and publishing service. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services or visit our website at postshop.live.

By using our services or submitting information through our website or forms, you agree to the practices described in this policy.

SMS & Mobile Information Disclosure. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories of personal information described in this policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties or affiliates. Phone numbers, opt-in data, and consent records collected for SMS communications are used solely to deliver the PostShop service and are not sold, rented, or shared for marketing purposes.

Section 1Information We Collect

We collect the following categories of information as part of providing our services:

Category	Details
Contact information	Your name, email address, phone number, business name, and location
Social media accounts	Social media handles, profile URLs, delegated access, role-based permissions, and any access tokens required for platforms where we publish on your behalf
Content you submit	Photos, videos, and text messages sent to your dedicated PostShop phone number
Audio from your videos	When you request on-screen captions for a video, the spoken audio in that video is transcribed to text so the words can be placed on screen
Voiceover recordings	Audio you choose to record on the upload page to accompany a post, including anything audible in the background of that recording
Collaborator handles	Public social media usernames you ask us to invite as collaborators on a post
Voice and tone profile	Information about your communication style, personality, and content preferences: what you tell us at signup (such as the genres you write in, in your own words) and on your dashboard, and, unless you switch it off on your dashboard, the captions already published on the accounts you connect
Payment information	Payment details processed by Stripe, which sells PostShop subscriptions through Link as seller of record and may contact you about your order and receipts; we do not store full card numbers
Dashboard sign-in	The email address you enter to request a sign-in link, and a record of when sign-in links are issued and used. We do not store a password, because the dashboard does not use one
Your signed-in session	A cookie set in your browser once you sign in, which identifies your account and when the session was created. It is strictly necessary to keep you signed in and is not used for advertising, analytics, or tracking you across other websites
Notification preference	Whether your account receives service notifications by text message, by email, or both, and whether a PostShop phone number has been issued to your account
Consent records	Your name, email, phone number, and timestamp at the time you agree to our service agreement
Your books	For each book you add on your dashboard: its title, author name as you want it shown, ISBN, cover image, and links to the book on Amazon, Goodreads, Barnes & Noble and Bookshop.org. When you enter an ISBN we look the book up on public book-listing pages to fill in the title, author, cover and listing; the cover is copied to our media host so your book page does not depend on another site
Activity on your book pages	Counts of how often your book’s reader page and share page are opened, which store buttons are tapped, how many reminders are set, and how often readers pass the page on. When a reader asks a library or bookstore to carry your book, we record which library or bookstore it was, so you can see which places are being asked. We do not record who the reader is, where they are, their IP address, or their device, and the pages set no cookies
How you found us	If you arrive at PostShop through a link in one of our own advertisements, the campaign and advertisement that link identifies, recorded with your account when you sign up. It is read from the link itself; we do not use cookies or tracking pixels to collect it
Visits to our pages	Counts of how often our public pages and our sign-up page are opened and read, how often a sign-up button comes into view and how often one is pressed, how far a sign-up gets, how long a page took to load, and, when the visit came through one of our own advertisements, which advertisement. We keep these as totals. We do not record who you are, your IP address, or your device, we set no cookie to do it, and nothing is sent to an advertising or analytics company

Section 2How We Use Your Information

We use the information we collect solely for the purpose of delivering and improving our services. Specifically, we use your information to:

Create and publish social media posts on your behalf across the platforms you choose to connect during onboarding
Build and maintain your custom voice profile so your posts sound like you
Generate captions, hashtags, and evergreen content tailored to your business or personal brand
Process your subscription payments and manage your account
Provide, secure, and keep you signed in to your PostShop dashboard, and show you your own drafts, comments, schedule, published posts, connections, and billing there
Communicate with you about your service, including submission receipt confirmations, post-approval requests, and account notifications, by text message or email according to how your account is set up
Send you service summaries, updates, and support communications related to your published content
Publish a page for each book you add, from which readers you send there can leave a review on Amazon, Goodreads or Barnes & Noble or buy the book, and, when you tick the box at approval, add a link to that page or to the store you chose at the end of a post
Comply with legal obligations, including California consumer protection laws
Understand which of our own advertisements lead to subscriptions, so we can decide where to advertise. This uses only the “How you found us” record and the “Visits to our pages” counts described in Section 1, and none of your information is sent to the advertising platform

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories of personal information described in this policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties or affiliates. We do not sell, rent, or share your personal information for marketing or promotional purposes. The information you provide to PostShop is used solely for the purposes described in this policy.

Section 2aAutomated and AI-Assisted Processing

PostShop is an automated service. To create and deliver your content, we use automated systems, including artificial intelligence (AI) and machine-learning models provided by trusted third-party AI providers. We want you to understand clearly how these systems use your information.

What the automated systems do. We use AI and automated processing to generate captions, hashtags, and evergreen content; to adapt that content to the voice and tone profile you provide during onboarding; to translate captions into additional languages where your plan includes that feature; to apply automatic formatting and light image enhancement so your media meets each platform's requirements; to generate a new image built around the subject of a photo you submit, when you request one, so it appears in a setting you describe; to transcribe the spoken audio in a video you submit or in a voiceover you record, when you request on-screen captions, so those words can be rendered onto the video; and to render a still photograph you submit into a short video with motion applied, when you request one. The text and content produced for your account is generated by these automated systems rather than written manually.

What information is processed. To perform these functions, the photos, videos, and text you submit, together with your voice and tone profile and business information, are processed by our automated systems and by our third-party AI providers solely to produce content for your account.

Generated images and transcribed audio. Two of these functions send additional material to our third-party AI providers, and only when you ask for them. If you request a generated scene, the photograph you submitted is sent so a new image can be built around its subject; the result comes back to you and nothing publishes until you approve it. If you request on-screen captions for a video, the audio from that video is sent so the speech can be converted to text; the resulting transcript is sent to you to approve before the words are placed on the video. In both cases the material is processed solely to produce content for your account and is subject to the same restrictions described below.

Field notes. The note we email you in the middle of each month is written by our third-party AI provider from a summary we send it: the counts described above for your books, the libraries and bookstores readers asked, how many reminders are coming due, your book titles, the town you gave at signup, the kind of writer you told us you are, the verified libraries and bookstores near that town, and the notes we have already sent you. Nothing about any reader is sent. The notes we send are stored on your account so that we do not repeat them.

Capture suggestions. When you ask PostShop what to capture, we send our third-party AI provider a summary of your business, the subjects of your recent posts, the suggestions we have already given you, and — on plans that include performance or strategy reporting — the text of your recent reports. This is done to produce three suggestions specific to your account rather than generic advice. No photos or videos are sent for this purpose. The suggestions we give you are stored on your account so that we do not repeat them.

How your data is protected with AI providers. Our third-party AI providers act only as our service providers. They process your content solely to deliver the PostShop service and are contractually restricted from using your content to train their own models or for any purpose other than providing services to PostShop. We do not sell your content, and we do not use your content to train AI models for third parties.

No automated decisions with legal effect. PostShop does not use AI or automated processing to make decisions that produce legal or similarly significant effects about you, such as decisions about credit, employment, insurance, or eligibility for the service. Our automated systems are used to create and publish content, not to evaluate you. You may contact us at any time using the information in Section 11 with questions about how automated processing affects your information.

Section 2bReaders Who Visit Your Book Pages

Your book’s review page and book page are public web pages at postshop.live. Anyone with the link can open them. The people who do are usually your readers, not our clients, and this section describes the little we collect from them.

Nothing, unless they ask for a reminder. Opening a page, tapping a store button, or adding a reminder to their own calendar gives us no personal information. The calendar reminder is created on the reader’s own device; we do not see or keep it.

Finding a library or bookstore nearby. A reader may share their location or type a ZIP code to see the libraries and bookstores near them. We use it to answer that one request and do not keep it. So that we check the places readers are near first, we note which libraries and bookstores near a lookup we have not yet checked. That note names the library or bookstore only; it is not connected to the reader, the book or the request.

An emailed reminder. A reader may ask us to email them once, on a date they choose, to remind them to review the book. To do that we collect their email address and the date, and record that they ticked a box consenting to that one email. The request is checked by an automated bot-protection service, which confirms it was made by a person rather than an automated script. We send the one email on that date, on the author’s behalf, and then remove the address from our records. If the email cannot be delivered after three attempts, the address is removed then. The address is never added to a mailing list, never shared with the author, and never used for anything else.

Where the stores take over. The review and buy buttons take the reader to Amazon, Goodreads, Barnes & Noble or Bookshop.org. What happens there is governed by that store’s own privacy policy. We receive nothing back from them.

Section 2cPaige, the Helper on Our Website and Dashboard

Paige is the automated helper on our public pages and, for members, on the dashboard. She answers questions about PostShop and PostShop Relay from what is written on this website. She is software, not a person, and she cannot change anything in an account. On our public pages she cannot see any account. If one of her answers differs from our Terms of Service or from this policy, the Terms and this policy apply.

What is processed. When you ask Paige a question, your question, the earlier turns of that conversation and the address of the page you are on are sent to our third-party AI provider, together with passages from this website, so that an answer can be written. The provider is bound by the restrictions described in Section 2a. Paige does not need personal information to answer, so please leave it out of your questions.

On the dashboard. When the account holder is signed in, Paige is also given a short, fixed list of details about the account, so that her answer fits it: the plan; whether you are the account holder or someone the account holder gave access to; whether the account uses text messages and how notices are sent; the country and time zone on the account; the default post time, the check-in setting and any extra languages; which social platforms are connected and, when your question is about one of them, the name of the account, Page or board it is connected to and any notice its connection page is showing you; how many books have been added and their titles; and the date a free trial ends. These details are sent to our third-party AI provider with your question, under the restrictions described in Section 2a. Your own name, email addresses, phone numbers, payment details, posts, drafts and messages are not sent. Paige cannot change anything in the account. When someone the account holder gave access to is signed in, Paige is given only the plan and whether the account uses text messages. The account’s other details are for the account holder, and she does not give them to anyone else.

What is kept. We do not store a question Paige answers. If she cannot answer a question asked on our public pages, we save the question and the page it was asked on, with nothing that identifies you, so that we can read it and make the website answer it. If she cannot answer a question asked on the dashboard, we save the question, the page it was asked on, and the name and plan of the account it was asked from, and she asks whether you would like a reply. If you say yes, we also save the email address you signed in with, so that someone at PostShop can write to you. The conversation itself is held in your browser tab and is cleared when you close the tab or sign out.

Bot protection and limits. On our public pages, the first time you open Paige, an automated bot-protection service checks that the visit comes from a person rather than an automated script. To limit how many questions one connection can ask in a day, we keep that day’s count under a one-way code made from your internet address. The address itself is never stored. On the dashboard, signing in takes the place of that check, and the day’s count is kept for the account.

Section 3Third-Party Service Providers

We use trusted third-party services to deliver our service. These providers have access only to the minimum information necessary to perform their functions and are governed by their own privacy policies. The categories of providers we use include:

Payment processing — to securely handle subscription billing and transactions
Messaging and phone services — to provide your dedicated PostShop number and deliver SMS/MMS communications
Database and content management — to store your account information, submitted content, and post history
Media hosting — to host and deliver photos and videos for publishing to your social media accounts, and the cover images on your book pages
Media archive — cloud file storage that holds the archived copies of your published photographs and videos described in Section 6
Bot protection — to check that a reader asking for an emailed reminder on your book page is a person (see Section 2b), and that a visitor asking Paige a question is a person (see Section 2c)
Content generation (AI and automated systems) — to generate captions in your voice, to generate an image built around a photo you submit when you request one, and to create content tailored to your brand using artificial intelligence and automated content systems (see Section 2a); and to write Paige’s answers to questions asked on our website and on the dashboard (see Section 2c)
Speech transcription — to convert the spoken audio in a video into text when you request on-screen captions (see Section 2a)
Social media publishing — to schedule and publish posts to the platforms you connect
Website hosting — to serve our website and client-facing pages
Email delivery — to send account emails, reports, dashboard sign-in links, the one reminder email a reader asks for on your book page, and, on accounts that do not receive text messages, your service notifications

We do not share your information with any parties beyond what is necessary to operate the service.

Section 4Social Media Account Access

To publish posts on your behalf, we require access to your social media accounts. After you subscribe, you connect each platform you want from its own page in the Connections area of your dashboard. You tap Connect, sign in to that platform directly, and approve access there. You do not share your password with PostShop, and we never see it. You may revoke our access at any time from within your own account settings, without contacting us. What each platform needs is set out on its page in your dashboard and on our help page.

We will not modify your account settings, profile information, bio, or any other account details without your explicit permission. Our access is limited to creating and publishing posts.

You are responsible for maintaining the access you grant us. If you change your password, revoke our access, or delete your account on any platform, publishing to that platform will be interrupted until access is restored.

Upon cancellation of your subscription, we will remove ourselves from your social media accounts within 30 days.

Section 4aYour Dashboard, Sign-In, and Cookies

PostShop provides a web-based dashboard at postshop.live/login where you can submit content, approve drafts, manage your schedule and connections, view what has published, and manage your plan.

How signing in works

The dashboard does not use a password, so we never ask you to create one and we never store one. You enter the email address on your account and we email you a single-use sign-in link that expires fifteen minutes after it is issued. Following that link creates a signed-in session on that browser which lasts thirty days unless you sign out or we end it.

Because the sign-in link arrives by email, anyone who can read that inbox can sign in to your dashboard. Please treat that address as you would a password. If you believe your email account has been compromised, contact us and we will immediately invalidate every signed-in session on your account.

To protect the confidentiality of our client list, the sign-in page returns the same confirmation whether or not the address you entered belongs to an account. An address we do not recognise is simply not sent a link.

Cookies

PostShop sets one cookie, and only after you sign in. It holds your signed-in session and nothing else. It is marked HttpOnly so it cannot be read by scripts running in the page, Secure so it is only ever sent over an encrypted connection, and SameSite=Lax so it is not sent when another website links to us.

We do not use advertising cookies, analytics cookies, tracking pixels, or third-party trackers on the dashboard, and we do not track you across other websites. When you follow a link from one of our advertisements, the campaign it belongs to is written into the link's address; we read it from there, to count visits to our pages and again when you sign up, and do not set a cookie to do it. Clearing your browser's cookies signs you out; it has no other effect on your account or your posts.

What the dashboard shows

The dashboard displays only your own account: your drafts, your comments, your schedule, your published posts, your connections, and your billing. It reads the same records described elsewhere in this policy and does not collect anything additional about you as you use it. Opening your billing area creates a short-lived, single-use session with our payment processor; your card details are handled there and never pass through or reside in PostShop's systems.

Section 5SMS/Text Messaging

This Section applies to accounts that receive text messages from PostShop. Accounts located outside the United States are not issued a PostShop phone number and receive no text messages from us, because United States carrier and messaging regulations do not support reliable two-way text messaging with handsets registered abroad. For those accounts, the service notifications described below are delivered by email to the address on the account instead, and this Section has no application.

Consent to Receive Messages

By submitting your phone number through our signup form at postshop.live and checking the SMS consent checkbox, you expressly consent to receive recurring automated and manually-sent service-related text messages from PostShop at the phone number you provided. Consent is not a condition of any purchase. When you subscribe to PostShop, you are assigned a dedicated phone number for submitting content and receiving service communications.

Types of Messages You May Receive

Welcome confirmations
Submission receipt confirmations (confirming we received your photo or video)
Post-approval requests
Account notifications (payment reminders and plan changes)
Inactivity reminders

PostShop does not send marketing, promotional, third-party, or affiliate content via SMS.

Message Frequency

Message frequency varies with how often you send us content. Every account is on pre-publish approval, so you receive one message per draft awaiting your approval and one confirming when each approved post is scheduled to publish, plus occasional reminders. At typical posting volumes that is around 60 to 80 messages per month.

Opt-Out (STOP)

You may opt out of text messages at any time by replying STOP to any message from your PostShop number. After you send STOP, we will send one final confirmation message and then cease all non-essential SMS communication to that number. Opting out of text messages does not cancel your subscription or stop us from publishing posts on your behalf — it only stops outbound text notifications. To cancel your subscription, see our service agreement or contact us directly.

Help (HELP)

For help, reply HELP to any message from your PostShop number. You will receive a response with a support contact. You may also email us at hello@postshop.live for assistance at any time.

Message and Data Rates

Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. Consult your mobile carrier for details about your messaging plan.

Supported Carriers

SMS service is available on major U.S. carriers, including AT&T, Verizon, T-Mobile, Sprint, U.S. Cellular, and other participating carriers.

Mobile Information Sharing Restrictions

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories of personal information described in this Privacy Policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties or affiliates.

Mobile information, phone numbers, opt-in data, and consent records obtained through SMS enrollment are used solely to deliver the PostShop service, including routing submissions, sending confirmations, and managing your account. We may share this information with service providers who help us deliver SMS (such as our messaging platform provider), strictly for the purpose of operating the service. These providers are contractually bound to use this information only to deliver the PostShop service on our behalf and are not permitted to use it for their own marketing or promotional purposes, or to share it with any other third party.

Section 6Data Retention

We retain your information as follows:

Consent records (agreement to terms, timestamp): Retained for three (3) years or one (1) year after your subscription ends, whichever is longer, as required by California law.
Social media account access: Removed within 30 days of subscription cancellation. For a subscription started through the pilot offer and cancelled during its free trial, removed when the trial ends, normally within two days, at the same time as the PostShop phone number is released.
Post history and account records: Kept during your subscription and after it ends, so that we can answer questions about the work we did for you, including in the event of a dispute. We keep them for as long as they may be needed for that purpose, which may be indefinitely.
Photo and video files: Media for a published post is archived approximately 30 days after publication: a copy is moved to a cloud storage folder kept for your account, and the working copy is then deleted from our media host. The archive folder is shared by link, so that your published-content export can show each photograph, which means anyone who has the folder’s link can view its contents; we do not publish that link, and it appears only in exports and records we provide to you. Archived media is kept on the same basis as your post history, which may be indefinitely. Media for a draft you set aside, or allow to lapse without a decision, is deleted at that point and is not archived. PostShop is not a storage service, and you should keep your own copies of anything you send us.
Transcripts and captioned video: When you request on-screen captions, the transcript we generate and the captioned copy of your video are stored alongside that post's media and follow the same schedule described above. Audio is not retained separately once the transcript has been produced. A voiceover you record is stored alongside that post's media and follows the same schedule, as does any video rendered from a photograph you submitted.
Your books and book page activity: Kept while the book is on your account. Removing a book takes its pages down; the record of the book and its activity counts is kept with your other account records.
A reader’s reminder email address: Removed once the reminder is sent, or after three failed delivery attempts. See Section 2b.
How you found us: Kept with your account records, on the same basis.
Report copies: When we produce a weekly recap, monthly performance report, or strategy report for you, we keep a copy in our own storage in addition to sending it to you. These copies let PostShop use what a past report found when suggesting what to capture next, so the suggestions improve as we learn more about your account. Report copies are kept with your other account records, on the same basis. They contain the same information as the report we sent you: what was published, how it performed, and what we concluded. They do not contain your photos or videos.
Dashboard sign-in links: Each sign-in link expires fifteen minutes after it is issued and cannot be reused. We do not keep a table of issued links; the link itself carries its own expiry, which is checked when you follow it.
Signed-in sessions: Your session cookie expires thirty days after you sign in, and is invalidated sooner if you sign out or if we end your sessions at your request. All sessions on an account end when the account is closed.
Payment information: Managed and retained by Stripe and Link in accordance with their own privacy and data retention policies. We do not store full card numbers.

Section 7Data Security

We take reasonable measures to protect your personal information from unauthorized access, use, or disclosure. These measures include encrypted connections (HTTPS) on our website, forms, and dashboard; cryptographically signed, short-lived sign-in links and session cookies marked HttpOnly, Secure, and SameSite=Lax; the ability to invalidate every signed-in session on an account at once; secure storage of service data; and limiting access to your information to only the systems and personnel necessary to deliver your service.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Section 8Your Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you.
Correction: Request that we correct inaccurate or incomplete information.
Deletion: Request that we delete your personal information, subject to legal retention requirements and to records we need to keep to establish, exercise or defend legal claims, which include the post history and archived media described in Section 6.
Opt-out of SMS: Reply STOP to any text message to opt out of notifications.
End your sessions: Ask us to sign out every device currently signed in to your dashboard. We do this immediately on request.
Cancellation: Cancel your subscription at any time from the billing area of your dashboard, via text message to your PostShop number, by email, or through any other online method we make available.

To exercise any of these rights, contact us using the information below. We will respond within 30 days.

California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), provides you with additional rights regarding your personal information. These include the right to know and access the personal information we have collected about you and how we use and disclose it; the right to request correction of inaccurate personal information; the right to request deletion of your personal information, subject to legal retention requirements; and the right not to receive discriminatory treatment for exercising any of these rights.

We do not sell or share your personal information. PostShop does not sell your personal information, and does not share it for cross-context behavioral advertising, as those terms are defined under the CCPA. We have not sold or shared personal information in the preceding 12 months. Because we do not sell or share personal information, no opt-out of sale or sharing is necessary; you may still exercise the other rights described above at any time.

We do not use sensitive personal information for purposes other than providing the PostShop service. To exercise any California privacy right, contact us using the information in Section 11. We will verify your request using the contact details associated with your account and respond within the timeframes required by law. You may also designate an authorized agent to make a request on your behalf, subject to reasonable verification.

Section 9Children's Privacy

PostShop services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it promptly.

PostShop subscriptions are available only to people aged 18 or older (Terms of Service, Eligibility).

A reader who asks for a review reminder on a book page gives us an email address for that one email only. The address is removed once the email is sent, as described in Section 2b.

Section 10Changes to This Policy

We may update this Privacy Policy from time to time. A change that describes a new feature, clarifies wording without reducing your protections, or is required by law takes effect when the updated policy is posted on this page. A change that reduces your privacy protections, or expands how we use or how long we keep information you have already given us, takes effect at least 30 days after we notify you by text message or email. Where a change is needed for security or legal reasons and cannot wait, we will tell you as soon as we reasonably can. Your continued use of the service after a change takes effect constitutes your acceptance of the updated policy.

Section 11Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at:

Email: hello@postshop.live
Text: Send a message to your dedicated PostShop number, where one has been issued to you
Dashboard: Sign in at postshop.live/login and use Get help
Website: postshop.live

Based in Los Angeles, California