Privacy Policy
This explains what [operator name: set OPERATOR_NAME] collects when you use Postloop, why, and what you can do about it. There are two kinds of people here: publishers, who have an account, and followers, who receive emails.
What we collect
- Publishers: email address, name and settings you give us, the feeds and posts you create, and billing status (Stripe holds the payment details; we do not see card numbers). If you sign in with Google we receive your verified email address and nothing else.
- Followers: email address, which feed you followed and how, your delivery choices (single, daily or weekly), language and time zone, and the date you confirmed or left.
- Email activity: whether an email was delivered, opened or bounced, whether you marked it as spam, and which links in it were clicked. Opens are measured with a small image and clicks with our own links, and you can avoid both by not loading images or links.
- Technical data: the country derived from your network address, used to decide whether a confirmation email is required where the law asks for it, and your address and browser details in short-lived logs and rate limits to stop abuse.
Why we use it
- To run the service: sign you in, send the emails you asked for, and let publishers see their followers and results.
- To keep it safe: stop abuse, honor unsubscribes, and block addresses that bounce or complain.
- To bill paid plans and meet legal duties.
For followers, the publisher decides to send you their posts and is responsible for having your consent. We process your address on the publisher's behalf. A publisher can see the addresses and delivery choices of their own followers once they have proved they own the site behind the feed. Publishers cannot see other publishers' followers.
Who else handles data
- An email delivery provider (Emailit) sends our emails.
- Stripe processes payments for paid plans.
- Google, only if you choose to sign in with it.
- Our hosting and database providers.
We do not sell personal data and do not use it for advertising. We share it with authorities only when the law requires.
How long we keep it
Follower records stay while the feed exists and the person follows. When someone unsubscribes or deletes their data, their personal details are removed and only a one-way hash of the address is kept so a publisher cannot import them back. Deleting a feed deletes its followers and posts. Suppression entries (for bounces and complaints) are kept so we never mail those addresses again. Logs are kept for a short time. Deleted data can stay in backups for up to about 8 weeks, until the backups holding it are overwritten.
Your choices and rights
Followers can change delivery, unsubscribe or delete their data from the links in every email. Publishers can export their followers, delete feeds, or delete their whole account, from the dashboard. Depending on where you live you may also have the right to ask for a copy of your data, to correct it, or to object to how it is used. Write to [contact email: set OPERATOR_EMAIL] and we will answer within 30 days. If you are in the EU or UK you can also complain to your data protection authority.
Security
We limit who can read data, separate publishers from each other in the database, sign every tracking and unsubscribe link, and keep sign-in links short-lived and single-use. No system is perfectly secure, and if a breach affects you we will tell you as the law requires.
Children
Postloop is not meant for people under 16, and we do not knowingly collect their data.
Changes and contact
If this policy changes in a way that matters we will tell you before it applies. Contact: [contact email: set OPERATOR_EMAIL].