1. Introduction
Welcome to PostLoop, a social media content approval and publishing platform operated by Devbay Technologies("we," "us," or "our").
This Privacy Policy explains how we collect, use, store, and protect information when you use our mobile application, web application, and related services (collectively, the "Service").
The Service is designed to help organizations and teams create, review, approve, and publish social media posts through a controlled approval workflow.
By using the Service, you agree to the practices described in this Privacy Policy.
2. Information We Collect
We collect only the information reasonably necessary to provide and operate the Service.
2.1 Account Information
When an account is created, we may collect:
- Full name
- Email address
- Phone number, if provided
- Password or authentication credentials
- Profile information
- Organization or team information
- User role and permissions
2.2 Team Information
The Service allows authorized administrators to create teams and manage team members.
We may process:
- Team name
- Team member information
- User roles
- Team permissions
- Organization information
- Team membership and access status
The Service may support roles such as:
- Administrator
- Content Creator
- Manager
- Client Manager
- Owner
- Social Media Manager
Access to information depends on the permissions assigned to each user.
2.3 Social Media Post Information
Users may create, upload, review, approve, reject, and manage social media posts through the Service.
This information may include:
- Post text
- Captions
- Images
- Videos
- Hashtags
- Mentions
- Links
- Other media or materials included in a social media post
- Approval comments and feedback
- Post status
- Approval history
This information is processed to provide the social media content approval workflow.
2.4 Social Media Account Information
The Service may allow authorized users to connect supported social media accounts for publishing approved posts.
Depending on the social media platform and permissions granted, we may process:
- Social media account or page name
- Account or page identifiers
- Access tokens or authorization credentials
- Platform-specific account information
- Content required to publish posts
- Publishing status and related information
We only request permissions that are necessary to provide the relevant social media functionality.
We do not sell social media account information or access tokens.
2.5 Approval and Activity Information
The Service may record actions performed during the approval workflow, including:
- Post submission
- Post review
- Post approval
- Post rejection
- Approval comments
- User who performed an action
- Date and time of an action
- Publishing status
This information helps organizations maintain a record of the social media approval process.
2.6 Device and Technical Information
We may automatically collect limited technical information when you use the Service, including:
- Device type
- Operating system
- App version
- IP address
- Browser information
- Device identifiers
- Crash information
- Log information
This information is primarily used for security, troubleshooting, analytics, and improving the Service.
2.7 Push Notifications
If you enable notifications, we may collect and use a push notification token to send Service-related notifications, such as:
- New post submitted
- Post approved
- Post rejected
- Post requires review
- Post published
- Other workflow notifications
You can control notification permissions through your device settings.
3. How We Use Information
We may use information to:
- Create and manage user accounts
- Manage teams and user roles
- Allow users to create social media posts
- Allow Content Creators to submit posts
- Allow Managers to review posts
- Allow Client Managers to review posts
- Allow Owners to provide final approval
- Allow Social Media Managers to publish approved posts
- Connect supported social media accounts
- Publish approved content to connected social media platforms
- Send workflow notifications
- Maintain approval history
- Provide customer support
- Maintain and improve the Service
- Detect unauthorized access or misuse
- Protect the security of the Service
- Comply with applicable legal obligations
4. Organization-Controlled Information
The Service may be provided to organizations that create teams and manage their users.
If you use the Service as part of an organization, the organization's administrator may control access to information associated with your account.
This may include:
- Your team membership
- Your role
- Social media posts you create or review
- Approval activity
- Comments and feedback
- Publishing activity
Your organization's administrator may have access to information created or stored within the organization's account.
If you have questions about information controlled by your organization, you should contact your organization's administrator.
7. Data Security
We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.
However, no online service can guarantee absolute security.
You are responsible for maintaining the confidentiality of your account credentials and notifying us or your organization if you believe your account has been compromised.
8. Data Retention
We retain information for as long as reasonably necessary to:
- Provide the Service
- Maintain user and organization accounts
- Maintain social media approval records
- Provide publishing functionality
- Resolve disputes
- Maintain security
- Comply with legal obligations
Organizations may have their own data retention requirements.
When information is no longer required, we may delete or anonymize it in accordance with applicable laws and our retention practices.
9. Account and Data Deletion
You may request deletion of your account and associated personal information by contacting us at:
If your account is managed by an organization, you may need to contact your organization's administrator to request removal of your access or organization-controlled information.
Some information may be retained when required by law or reasonably necessary for legitimate business or security purposes.
10. Children's Privacy
The Service is intended for organizations, businesses, and professional users.
The Service is not directed toward children.
We do not knowingly collect personal information from children in violation of applicable law.
If you believe that a child has provided personal information to us, please contact us at team@devbay.ai.
11. Your Privacy Rights
Depending on your location and applicable law, you may have rights to:
- Access your personal information
- Correct inaccurate information
- Request deletion of personal information
- Request restriction of certain processing
- Object to certain processing
- Request a copy of certain information
- Withdraw consent where applicable
To exercise applicable rights, contact:
We may request information necessary to verify your identity before processing a request.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
When changes are made, we will update the "Last Updated" date at the top of this Privacy Policy.
Where required by applicable law, we may provide additional notice.
13. Contact Us
If you have questions about this Privacy Policy or our privacy practices, contact us:
Devbay Technologies Platform: PostLoop Email: team@devbay.ai
5. Social Media Integrations
The Service may integrate with third-party social media platforms to allow authorized users to publish approved content.
When you connect a social media account, the Service may receive information from that platform according to the permissions you authorize.
We use this information only for purposes related to the functionality you have authorized, such as:
We do not use social media credentials or access tokens for unrelated purposes.
Your use of third-party social media platforms is also subject to their respective privacy policies and terms.