Privacy policy

[Company legal name], [Registered address], is the controller for personal data about our website visitors, customers and their team members. For data you process through Pozy about your own audience, you are the controller and we act as your processor under the data processing agreement.

Account data: your name, email address, password hash, two-factor settings and workspace membership.

Billing data: billing contact, invoices and payment status. Card details are handled by our payment processor and are not stored on our servers.

Usage data: API request logs (time, path, status, duration, IP address and user agent), webhook delivery logs and audit logs.

Connected account data: the profile details, posts, messages, comments, analytics and ad data of the accounts you connect, processed on your instructions.

Messages you send us, including forms on this website.

Website forms: the name, email address, company, website, message and other answers you type into a form on this website, and, with each submission, the IP address and browser user agent it came from. We use the IP address and user agent to limit spam and abuse of the forms.

Referral data: if you arrive through a referral link, the referral code from that link, stored in a cookie for 30 days and attached to your workspace if you sign up, so the person who referred you can be credited.

To provide and secure the service (performance of our contract with you), to bill you (contract and legal obligation), to answer your requests (legitimate interest), to improve Pozy using aggregate usage (legitimate interest), and to send product emails you can opt out of (consent or legitimate interest).

Account and billing data for as long as your workspace exists and then as long as the law requires. Request logs for a limited period. Data from connected accounts until you disconnect the account or delete it, subject to backups that expire on a schedule.

Website form submissions, including the IP address and user agent stored with them, for [retention period], or until you ask us to delete them.

Service providers that help us run Pozy, listed on our subprocessors page, under contracts that protect your data. The platforms you connect, when you instruct us to act on them. Authorities, when the law requires it. We do not sell personal data.

Where data leaves the European Economic Area, we rely on adequacy decisions or standard contractual clauses.

You can ask to access, correct, delete, restrict or port your personal data, and object to processing based on legitimate interest. Write to support@pozy.ai. You can also complain to your data protection authority.

We will post changes here and, if they are significant, tell you by email before they apply.