Privacy Policy

Effective date: February 28, 2026

PostLink (“we”, “us”, “our”) operates the service at postlink.to. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

Account information: When you sign up, we collect your name, email address, and profile photo via Google OAuth or email/password registration.

Social platform data: When you connect Instagram or TikTok, we access your public profile and post data as permitted by each platform's API. This data is used to power post syncing, auto-replies, and analytics.

Analytics data: We collect page views, link clicks, and referral sources for your bio-link pages to provide you with performance insights.

Cookies: We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

2. How We Use Your Information

We use the information we collect to provide and improve PostLink, including: delivering your bio-link pages, syncing posts from connected platforms, powering auto-reply features, generating analytics dashboards, processing payments, and communicating with you about your account.

3. Third-Party Services

PostLink integrates with the following third-party services:

  • Supabase — Authentication and database hosting
  • Stripe — Payment processing and subscription billing
  • Instagram Graph API (Meta) — Post syncing, comments, and messaging
  • TikTok API — Post syncing

Each third-party service has its own privacy policy. We only share the minimum data necessary for each service to function.

4. Data Storage & Security

Your data is stored in a Supabase-hosted PostgreSQL database. Social platform access tokens are encrypted at rest. We use HTTPS for all data transmission and follow industry-standard security practices to protect your information.

5. Data Retention & Deletion

We retain your data for as long as your account is active. When you delete your account, all associated data — including connected account tokens, synced posts, analytics, and auto-reply configurations — is permanently deleted. You can request account deletion at any time from your account settings or by contacting us.

6. Cookies & Tracking

We use essential cookies to maintain your login session and preferences. We collect anonymous analytics on bio-link page visits (page views, clicks, referrers) to power your analytics dashboard. We do not use third-party tracking or advertising cookies.

7. Your Rights

You have the right to access, correct, or delete your personal data at any time. You can disconnect social accounts from your settings to revoke PostLink's access. You can export your data or request deletion by contacting us. If you are in the EU, you have additional rights under GDPR including the right to data portability and the right to object to processing.

8. Children's Privacy

PostLink is not intended for children under 13. We do not knowingly collect information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the service. We encourage you to review this policy periodically.

10. Contact

If you have questions about this Privacy Policy, contact us at support@postlink.to.