PostAway

Privacy Policy

Last updated: July 29, 2026

PostAway ("we," "our," or "us") is a social media scheduling and automation platform operated by Messina Enterprises LLC. This Privacy Policy explains how we collect, use, and protect your information when you use PostAway at getpostaway.com.

1. Information We Collect

We collect the following types of information:

• Account information: Email address and password (stored securely via Supabase Auth) when you create an account.
• Social media tokens: OAuth access tokens for connected Instagram, TikTok, and Facebook accounts. These are stored encrypted in our database and used solely to publish content on your behalf.
• Content you upload: Photos, videos, and captions you submit for scheduling. These are stored in Supabase Storage and deleted when you remove them.
• Brand settings: Brand name, niche, and voice preferences you configure, stored locally in your browser.
• Usage data: Basic analytics such as posts scheduled, published, and failed - used to display your dashboard statistics.

2. How We Use Your Information

• To authenticate you and manage your account
• To publish posts to your connected social media accounts at your scheduled times
• To generate AI-powered captions using Anthropic's Claude API (images are processed but not stored by Anthropic beyond the request)
• To send email notifications about published or failed posts
• To process subscription payments via Stripe
• To improve and maintain the PostAway service

3. Instagram and Facebook Data

When you connect your Instagram or Facebook account, we request the following permissions:

• instagram_basic: To read your Instagram account profile and verify the connection.
• instagram_content_publish: To publish photos, videos, and reels to your Instagram feed on your behalf.
• pages_show_list: To list the Facebook Pages you manage, required by Meta to link your Instagram Business account.
• pages_read_engagement: To verify Page connection status.
• pages_manage_posts: To publish content to connected Facebook Pages.

We do not sell, share, or use your Instagram or Facebook data for advertising. Access tokens are used exclusively to publish content you explicitly schedule through PostAway. You can revoke access at any time by disconnecting your account in PostAway's Profile settings or directly in your Instagram/Facebook settings.

4. TikTok Data

When you connect your TikTok account, we request permissions to upload and publish videos on your behalf. TikTok data is used only to fulfill your scheduled posts and is not shared with third parties.

5. Data Sharing

We do not sell your personal data. We share data only with the following service providers who help us operate PostAway:

• Supabase - database, authentication, and file storage
• Anthropic - AI caption generation (image data is sent per-request only)
• Stripe - payment processing for subscriptions
• Meta (Instagram/Facebook) - publishing content via their API
• TikTok - publishing content via their API
• Vercel - web hosting

6. Data Retention

We retain your account data and scheduled posts for as long as your account is active. You may delete your account at any time by contacting us, which will permanently remove your data within 30 days. OAuth tokens are removed immediately when you disconnect a social account.

7. Security

We use industry-standard security measures including encrypted connections (HTTPS), encrypted token storage, and row-level security on our database. No method of transmission over the internet is 100% secure, but we take all reasonable steps to protect your information.

8. Children's Privacy

PostAway is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately.

9. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data, or to object to or restrict certain processing. To exercise these rights, contact us at the address below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice in the app. Continued use of PostAway after changes take effect constitutes acceptance of the updated policy.