Privacy Policy

At PostFlow ("Amana Flow," "we," "us," or "our"), accessible via https://post.amanaflow.com, we are committed to upholding the highest standards of user privacy, digital transparency, and data security. This comprehensive Privacy Policy describes how our self-hosted social media management platform collects, uses, encrypts, and deletes information when you interact with our services, connected social channels, and APIs.

1. Overview & Self-Hosted Architecture

PostFlow is deployed as an enterprise, self-hosted social orchestration service on our private Virtual Private Server (VPS) infrastructure. Unlike multi-tenant third-party SaaS tools that aggregate and monetize user metrics, your authentication credentials, media assets, and scheduling histories are stored in our private, isolated PostgreSQL 17 database and local volumes.

We do not sell, rent, lease, trade, or monetize your personal data or social media tokens with third-party data brokers, ad networks, or external commercial entities under any circumstances.

2. Categories of Information We Collect

Depending on your interaction with the Platform, we collect and process the following categories of information:

• Account Credentials: Name, administrative email address, encrypted password hash, and team role permissions used to authenticate your login sessions.
• OAuth Access & Refresh Tokens: Standard authorization tokens issued by third-party social media networks (e.g., TikTok, Meta, YouTube, LinkedIn) upon your explicit authorization to enable automated scheduling.
• Social Channel Identifiers: Public channel IDs, usernames, profile handles, and channel avatar URLs necessary to display your connected accounts in the visual calendar interface.
• Post Content & Media Files: Post captions, copy text, hashtags, scheduled publish timestamps, images, graphics, and video files uploaded to our private storage to fulfill publishing requests.
• Analytics & Metric Logs: Aggregated post engagement data (impressions, video views, likes, shares, comments) retrieved via official APIs to display performance reports in your dashboard.
• Technical Diagnostic Logs: IP address, user agent, browser type, and Temporal workflow transaction IDs collected to maintain server stability, prevent cyber threats, and verify webhook delivery.

3. Specific Platform API Compliance Disclosures

Our platform interfaces directly with major social media APIs. We strictly comply with the specific developer policies, user data guidelines, and limited use principles set forth by each respective provider:

4. How We Use and Process Information

All collected data is processed strictly for legitimate operational purposes:

• Facilitating scheduled multi-platform social media publishing via official partner APIs.
• Visual calendar rendering and drag-and-drop campaign reorganization.
• Generating engagement analytics and performance reports for your team.
• Enabling AI copilot capabilities (drafting captions, generating suggested hashtags, optimizing hooks) when prompted by you.
• Monitoring server health, preventing rate-limit violations, and ensuring 99.9% uptime.

5. Data Security, Storage & Encryption

We implement enterprise-grade technical and organizational safeguards to protect your information:

• Encryption in Transit: All communications between your browser, our servers, and third-party APIs are encrypted with TLS 1.3 / HTTPS.
• Encryption at Rest: OAuth tokens and sensitive configuration parameters are stored encrypted in our PostgreSQL database.
• Isolated Architecture: Services run inside containerized Docker environments with strict network segregation.
• Access Control: Administrative access is restricted via SSH key authentication and multi-factor security policies.

6. Data Retention and Erasure (Data Subject Rights)

We retain your personal data and social tokens only for the duration necessary to deliver the scheduling service or until you request its deletion:

• Instant Self-Service Disconnection: You can disconnect any social media channel at any time from your dashboard under Settings → Integrations. Disconnecting a channel immediately wipes the associated tokens from our active database.
• Complete Data Erasure: To request complete account termination and permanent purging of all associated media, logs, and user records, visit our User Data Deletion Instructions or submit a written request to privacy@amanaflow.com. All records are purged within 48 hours of confirmation.

7. Global Privacy Regulations (GDPR & CCPA/CPRA)

Regardless of your geographic location, we extend full data subject rights in alignment with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA):

• Right to Access: You may request an export of all personal data held about you.
• Right to Rectification: You may update inaccurate personal information directly within your profile.
• Right to Erasure ("Right to be Forgotten"): You may request complete deletion of your account and tokens.
• Right to Restriction & Object: You can disconnect any individual social integration without closing your account.

8. Contact Information & Data Protection Officer