Privacy

Last updated 31 October 2026

We hold what you give us, what the product makes out of it, and the results that come back from the social networks. A few other companies see parts of it, and all of them are named below. You can download the lot or have it erased from the settings screen, and this page says what we are obliged to keep when you do.

Who holds it

Vadstor Management Solutions LLC, doing business as Vadstor Solutions, at 47 Shady Drive, Indiana, PA 15701, United States. If you want to ask about any of this, write to vadposts@vadstor.com.

What we hold

• Your account. Your name, your email address, and a scrambled version of your password that cannot be turned back into the password. If you sign in with Google we get your name, your email address and Google's id for you instead.
• What you give the product. Your website address and the text we read from its pages, your answers about how your business sounds, pictures you upload, and anything you type into a post.
• What the product makes. The posts, the picture cards, and the schedule they go out on.
• Your connections. The keys that let us post to your social accounts on your behalf, for as long as you leave them connected.
• What comes back. Whether each post went out, when, the link to it, and the follower and engagement numbers we fetch once a day.
• Billing. Which plan you are on, what you have been charged, and Stripe's id for you. We do not hold card numbers.
• The ordinary technical bits. Your IP address when you sign in, and a count of tries at signing in and signing up, so that somebody guessing at your password gets slowed down and nobody can open accounts in bulk. There are two of these counts: one against the email address somebody typed, and one against the network the tries came from. The second is not attached to any account, and we cannot tell whose it is. Either kind is thrown away after a day.

Who else sees it

• Anthropic. The text we read from your website and your answers about your business go to their Claude service, which writes the drafts. Their terms say they do not train models on what goes through it.
• Post For Me. When you book a post, its words, its picture and its time go to them. They are the service that hands it to the social network, and they hold a copy until it has gone out.
• Stripe. Your card details go straight from the payment page to Stripe and never touch our server. We get back an id for you and whether the payment worked.
• Google. Only if you choose to sign in with Google, or connect a YouTube or Google Business account.
• Hostinger. Our web host. Everything above sits on their servers, and the ones this site runs on are in the United States.

Nobody else, and we do not sell any of it to anybody.

Pictures have a public web address

This one is worth knowing before you upload anything. When you add a picture it gets a web address on our server, and that address works for anyone who has it, without signing in. It has to, because the service that publishes your post fetches the picture from it.

The addresses are long and random, there is no list of them anywhere, and nothing links to them, so somebody would have to be given the address to find it. Even so, treat anything you upload as something that could be seen. A photo of a client, or anything you would not be willing to have posted, does not belong here.

When you delete a picture it stops being served straight away.

Cookies

One cookie, which keeps you signed in. No tracking cookies, no advertising cookies, and no analytics of any kind.

How long we keep it

Until you get rid of it. Delete a post and it goes. Delete a workspace and everything inside it goes with it. Close the account and all of it goes, apart from the short list further down.

One thing goes on its own, whatever you do. The sign-in counts above are thrown away after a day. An hour after somebody mistyped a password the count has stopped slowing anyone down, so there is no reason left to be holding it.

Getting it all, or getting rid of it

Both are on the settings screen, under "Your data", and neither of them needs you to email anybody.

Export gives you a zip file. Inside is a JSON file holding every row we have about that workspace, table by table, and every picture, with a checksum for each one so you can tell nothing was mangled on the way.

Delete asks you to type the name back before it will do anything, and then it is gone and cannot be undone.

What an erasure does not remove

A few things survive it, and we would rather say so here than surprise you afterwards.

• Stripe keeps the invoices for anything you were charged, because tax law requires those to be keepable. We keep Stripe's id for you, which is the key to them, and nothing else.
• Our record of what you were charged and when, for the same reason.
• A line in our own log saying an erasure happened, what it removed and when. It records an internal id, not your name or your email address.
• The record of the deletion request itself, so we can show we did it.
• A record that an export was made, with its size and a checksum. Not what was in it, and not the file, which is built when you ask for it and not kept.
• A sign-in count kept against a network rather than an email address. We find these by email when you close your account, and one that was never attached to an email cannot be found by yours. It goes by itself after a day, which is sooner than closing the account would have reached it.
• How much the writing cost us, added into one monthly total for the whole product. There is no name, no account and no post in it, just an amount and how many runs it covered. We keep it because it is our own bill to account for.

Anything already published stays published. Deleting a post here does not take it off Facebook, and you would need to do that on Facebook.

Keeping it safe

Everything travels over HTTPS. Passwords are stored scrambled in a way that cannot be reversed. The keys to your social accounts sit on our server and are only used to post what you booked. We have done the ordinary things properly, and where there is an edge, like the picture addresses above, this page says so rather than pretending there is not one.

Your rights

Depending on where you live you may have the right to see what we hold, have it corrected, have it erased, or object to what we do with it. The export and delete buttons cover most of that without you having to ask anybody. For anything else, write to vadposts@vadstor.com.

If you are in the UK or the EU and you think we have handled your data badly, you can complain to your data protection regulator.

Children

This is a product for businesses and it is not for under-18s. We do not knowingly hold data about children.

Changes to this page

The date at the top says when we last changed it. If a change affects what we do with your data, we will email you before it takes effect.