Privacy Policy

1. Summary

PostMelon is made by PSU Pro, LLC. We collect only what we need to run the app: your account, the content you create, the social accounts you connect, and anonymous purchase records. No personal data is sold. There are no ads and no tracking across other companies’ apps or websites, and PostMelon has no advertising or analytics SDK. Questions: support@psupro.com.

2. What we collect and why

Account data: your email address and, if you provide it, your name, stored with Firebase Authentication (Google Cloud) so you can sign in, including with Sign in with Apple or Google if you choose them.

Your content: posts, drafts, media (photos and videos you attach or generate), brand voice settings, saved ideas, schedules and post analytics, stored in Firebase (Cloud Firestore and Cloud Storage, Google Cloud, United States) so your phone, the web app and the API see the same data.

Connected social accounts: when you connect an account (X, LinkedIn, Facebook, Instagram, TikTok, YouTube, Threads, Pinterest, or Bluesky), we store the access tokens (or, for Bluesky, the app password you provide) encrypted at rest on our servers. They are used only to publish your posts and read post metrics on your behalf, and never for anything else. You can disconnect an account in the app at any time, which deletes its stored credentials; you can also revoke access from that network’s settings.

API keys: if you create API keys, we store only a hashed form that lets us recognize the key, plus the key’s name and last-used time.

Purchases: subscriptions are handled by Apple or Google and RevenueCat. RevenueCat keeps an anonymous purchase record (what you bought, when, and its status) tied to your PostMelon app user ID so it can confirm and restore your subscription, and tells our servers your plan so limits are enforced. We never see your payment card.

Usage counts: we keep counts of what you use (for example AI generations and API calls per day) to apply your plan’s limits. The app does not use an analytics or advertising SDK. Our servers keep ordinary technical logs for security and debugging.

3. AI processing

When you use AI features, the text you submit (topics, drafts, pasted text, the content of a link you ask us to remix, your brand voice description and image or video prompts) is sent to our AI providers to generate the result: Anthropic (Claude) for writing, Google (Gemini and Vertex AI) for images and video, and, if enabled, Higgsfield for images or video. Under their API terms, these providers do not use data sent through their APIs to train their models. We send only what is needed for the request. Do not put secrets or sensitive personal information in prompts.

4. Who we share data with

We share data only with the service providers that run PostMelon, and only as needed: Google Cloud / Firebase (hosting, authentication, database, storage, functions); Anthropic, Google and Higgsfield (AI processing, section 3); RevenueCat, Apple and Google (purchases); and the social networks you connect, which receive the posts you publish. We may also disclose information if the law requires it or to protect the safety and rights of our users and the service. No personal data is sold, and we do not share it for advertising.

5. Where data is stored and how it is protected

Your data is stored in Google Cloud in the United States. Data is encrypted in transit, social account credentials are encrypted at rest, and access to production systems is limited. No system is perfectly secure, so we cannot guarantee absolute security.

6. How long we keep data, and deleting it

We keep your data while your account is open. To delete everything, open Settings > Delete account in the app. This removes your account, posts, media, brand voice, ideas, analytics, connected social account credentials and API keys from our systems within 30 days. You can also email support@psupro.com from your account email and we will delete it for you. Deleting your account does not cancel a store subscription; cancel it in the App Store or Google Play first. RevenueCat purchase records are anonymous and can be deleted on request by email. Posts already published to social networks stay on those networks until you delete them there. Backups and legal or fraud-prevention records may persist for a short additional period.

7. Your choices and rights

You can view and edit your content in the app, disconnect social accounts, revoke API keys, and delete your account. Depending on where you live (for example California or the EU/UK), you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to complain to a regulator. To use these rights, email support@psupro.com. We will not discriminate against you for exercising them.

8. Children

PostMelon is not for children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has an account, email support@psupro.com and we will delete it.

9. Advertising and tracking

PostMelon shows no ads, uses no advertising identifiers, and does not track you across other companies’ apps and websites. No personal data is sold.

10. Changes to this policy

We may update this policy. If a change is material we will tell you in the app or by email before it takes effect. The “Last updated” date at the top shows the current version.

11. Contact

PSU Pro, LLC, support@psupro.com. Support and account deletion help: https://psupro.com/postmelon