PosttyPostty← Back to home

Privacy Policy

This English translation is provided for convenience only. In case of any discrepancy, the Spanish version prevails. Read the Spanish version

Last updated: July 21, 2026

Data controller

Postty is a registered trademark owned by Darío Soria, domiciled at Manuel Basavilbaso 4103, Olivos (ZIP 1636), Vicente López, Province of Buenos Aires, Argentina. The controller of your personal data is Darío Soria (Postty), whom you can contact with any question at the email address below.

Contact email: soporte@posttyai.com

Data we collect

  • Authentication: Firebase UID, email, name, photo (via Google Sign-In)
  • Store: URL, products, prices, images (automated scraping)
  • Brand: Colors, typefaces, tone, logo (analysis of your website)
  • Campaigns: Drafts, conversations with the AI, generated assets
  • Payments: Subscription ID, plan, status (MercadoPago)
  • Usage: Counters, feedback, ratings
  • WhatsApp contact (optional): if you message us on WhatsApp, we receive your phone number and profile name in our WhatsApp Business inbox. We do not export this data to any CRM or keep it beyond the conversation.
  • Connected ad accounts (optional): when you connect your Meta Ads or Google Ads account, we store the access tokens (encrypted with AES-256), the IDs of the authorized ad accounts, and metadata about the campaigns you manage from Postty (structure, budget, performance metrics). This data is processed only for operations you start from the platform.
  • Connected Instagram and Meta profiles (optional): if you connect your Instagram and Meta accounts to personalize content and ads, we access the profile information needed for that purpose (account data and posts). If you prefer not to connect them, Postty generates from your website URL, with a lower degree of personalization.

Purposes of processing

  • Providing the campaign generation service
  • Managing your account and subscription
  • Applying limits according to your plan
  • Improving the service and fixing errors
  • Communicating updates and support

Legal basis

  • Performance of a contract: to provide you the service
  • Consent: when you sign up and accept the Terms and Conditions
  • Legitimate interest: to improve the service and prevent fraud

Third-party services

  • Firebase (Google): User authentication
  • Gemini (Google): Conversational AI, multimodal analysis and script generation
  • Nano Banana (Google): Ad image generation
  • ElevenLabs: Voice generation for videos
  • MercadoPago: Payment and subscription processing
  • Meta (Facebook and Instagram): Publishing ad campaigns (optional, only if you connect your account)
  • Google Ads: Publishing ad campaigns (optional, only if you connect your account)
  • Amazon Web Services (AWS): Hosting and infrastructure for the service
  • Google Analytics (Google): Website usage analytics (cookies)
  • Meta Pixel (Meta): Ad conversion measurement (cookies)
  • WhatsApp Business (Meta): Contact and support channel (optional, only if you message us)

Google Ads API integration

When you connect your Google Ads account to Postty through OAuth 2.0, we access only the data needed to run ad campaigns on your behalf. The data we access, write and store is:

  • Data we access (read): information about the Google Ads accounts you authorize (customer identifiers, currency, time zone), the structure of existing campaigns (names, status, budget, high-level targeting), performance metrics (impressions, clicks, conversions, cost, click-through rate), and creative assets previously uploaded to your account.
  • Data we write: we create ad campaigns, upload as creative assets the AI-generated images and videos you explicitly approve in the Postty interface, create ads within those campaigns, and pause or resume campaigns when you tell us to.
  • Data we store: the OAuth tokens (encrypted with AES-256 before being written to the database), the IDs of the authorized accounts, and a copy of the metadata of the campaigns you created from Postty so we can show you your history and metrics in our interface.

Sole purpose: data accessed through the Google Ads API is used only to carry out the actions you authorize from the Postty interface. We do not read data from other accounts, we do not combine data between different users, and we do not share or sell this information to third parties.

Revoking access: you can revoke the authorization at any time from (a) your account settings in Postty, or (b) directly from your Google account at myaccount.google.com/permissions. Revocation takes effect immediately: we can no longer call the API on your behalf and the stored tokens are invalidated.

Postty's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies and tracking technologies

Our website uses cookies and similar technologies for analytics and ad measurement:

  • Google Analytics: measures site usage (pages visited, traffic source, device) through cookies.
  • Meta Pixel: measures conversions from our ad campaigns. It may store a click identifier (fbclid) in your browser for up to 90 days.

You can block or delete cookies from your browser settings; if you do, some measurement features will stop being available. These tools do not affect how the application works or content generation.

Storage and security

  • PostgreSQL database with encryption in transit
  • Role-based access restrictions
  • We do not store card data (MercadoPago handles it)

Retention

  • For as long as your account is active
  • 30 days after you request deletion (for backup)
  • Anonymized data may be kept indefinitely for aggregate analysis

International transfer

Your data may be processed on servers of our providers located in the United States, the European Union and other jurisdictions where Google (Firebase, Gemini, Nano Banana, Google Ads), Meta (Facebook, Instagram), ElevenLabs, MercadoPago and AWS operate. All of these providers comply with recognized data-protection standards, and we have the appropriate legal bases for international transfer under Argentina's Law 25,326.

Your rights (ARCO)

You have the right to access, rectify, delete and object to the processing of your data.

Access

You can ask which personal data we hold about you.

Rectification

You can ask us to correct inaccurate or incomplete data.

Deletion (Cancellation)

You can ask us to delete your personal data. This involves:

  • Deleting your account
  • Deleting campaigns, drafts and generated assets
  • Cancelling any active subscription (with no refund for the current period)

Exceptions: We may retain data where there is a legal obligation or for the defense of claims.

Objection

You can object to the processing of your data for specific purposes (e.g. marketing communications).

How to exercise your rights

  1. Send an email to soporte@posttyai.com with the subject "Solicitud ARCO" (ARCO request)
  2. Include: your name, your account email, and which right you want to exercise
  3. We will reply within a maximum of 10 business days
  4. We may ask you to verify your identity

Changes

We will notify changes by email or on the platform. Continued use implies acceptance.

Contact

Email: soporte@posttyai.com

Website: https://posttyai.com

Supervisory authority: If you believe your rights were not respected, you can file a complaint with Argentina's Agency for Access to Public Information (AAIP) — https://www.argentina.gob.ar/aaip