Privacy Policy

Account Information

When you create a PostWhim account, we may collect information including:

• Email address
• Display name
• First name
• Authentication information

Passwords are handled by our authentication provider and are not stored by PostWhim in readable form.

If you choose Google sign-in, we may receive information such as your name and email address from Google.

Brand Profile Information

To personalize PostWhim, you may provide information about your business or creator brand, including:

• Business or creator name
• Business description
• Products and services
• Target audience
• Social-media platforms
• Content goals
• Preferred tone
• Brand voice description
• Caption or writing examples
• Posting frequency
• Preferred posting days

Content and AI Information

PostWhim may process and store content you provide or create through the Service, including:

• Content topics
• Posts and captions
• Hooks
• Calls to action
• Hashtags
• Filming instructions
• Shot lists
• Saved or dismissed ideas
• Scheduled content
• Ask PostWhim conversations
• AI-generated recommendations and PostWhim Insights

Content Budget Information

If you use PostWhim’s Content Budget tools, we may store:

• Budget amounts
• Expense names
• Expense amounts
• Expense categories
• Dates
• Planned or spent status
• Notes
• Connections between expenses and content

Support Information

When you contact PostWhim Support, we may collect:

• Name
• Email address
• Support topic
• Subject
• Message
• Submission date and time
• Account identifier when you are signed in

AI Usage Information

PostWhim records certain metadata about AI usage so that we can operate the Service and administer plan limits.

This may include:

• Account identifier
• Type of AI action
• Billing or usage period
• Subscription plan
• AI model
• Success or failure status
• Processing duration

These usage records do not contain the complete AI prompt or generated response.

Technical Information

PostWhim itself does not currently operate a separate advertising or analytics tracking system.

However, infrastructure providers used to operate PostWhim may process technical information such as IP addresses, browser or device information, request logs, timestamps, and security information as necessary to provide, secure, maintain, and troubleshoot their services.

We use information to:

• Create and maintain PostWhim accounts
• Provide and personalize PostWhim
• Generate AI-assisted content
• Learn and apply a user's selected Brand Profile and voice
• Provide content planning and scheduling features
• Maintain saved posts, ideas, calendars, budgets, and conversations
• Provide PostWhim Insights
• Measure AI usage and administer subscription limits
• Provide customer support
• Maintain security and prevent misuse
• Diagnose technical problems
• Comply with applicable legal obligations
• Improve and maintain the Service

PostWhim uses artificial intelligence to provide content ideas, captions, planning assistance, recommendations, and related features.

Depending on the feature used, information sent for AI processing may include:

• Brand Profile information
• Brand voice and caption examples
• The content or question you submit
• Relevant recent content or scheduling information

PostWhim does not intentionally send your account password to the AI system.

PostWhim currently uses Lovable’s AI Gateway to access third-party AI technology, including OpenAI models.

PostWhim requests that AI generation calls not be stored when supported by the applicable service. However, infrastructure and AI providers may process or temporarily retain information in accordance with their own terms, security practices, legal obligations, and data-retention policies.

AI providers’ practices may change over time.

Users should avoid entering highly sensitive personal, financial, medical, confidential, or other information into AI prompts unless necessary and appropriate.

AI-generated content may contain errors, inaccuracies, or unsuitable suggestions. Users are responsible for reviewing content before publishing, relying on, or using it.

PostWhim relies on service providers to operate the platform.

These currently include:

• Lovable — application hosting, infrastructure and AI gateway services.
• Supabase / Lovable Cloud — database and authentication infrastructure.
• OpenAI — artificial-intelligence model processing through the AI gateway.
• Google — authentication when a user voluntarily selects Google sign-in.

These providers may process information as necessary to perform services for PostWhim and are governed by their respective agreements and privacy practices.

Future service providers, including a payment processor, may be added as PostWhim develops. This Privacy Policy should be updated when material data practices change.

PostWhim billing is not active as of the current effective date.

When paid billing is activated, payment information may be processed by a third-party payment processor.

PostWhim does not intend to directly store complete payment-card numbers.

This Privacy Policy will be updated as necessary when payment processing becomes active.

PostWhim currently uses browser storage necessary to maintain authenticated user sessions.

PostWhim does not currently use advertising cookies, advertising pixels, or third-party behavioral advertising trackers.

If these practices change, this Privacy Policy will be updated as appropriate.

PostWhim does not currently sell personal information.

PostWhim does not currently share personal information for cross-context behavioral advertising.

If these practices change, we will update our disclosures and provide legally required choices.

We retain account and user-created information for as long as reasonably necessary to provide PostWhim, maintain an active account, satisfy legitimate business purposes, resolve disputes, maintain security, and comply with applicable legal obligations.

Users may permanently delete their PostWhim account through Settings.

Account deletion removes user-owned PostWhim account data as described by the deletion process.

Certain records may be retained or anonymized when reasonably necessary for legal compliance, fraud prevention, security, dispute resolution, or other legitimate purposes.

For example, support records associated with a deleted account may be retained in anonymized form.

Users may permanently delete their PostWhim account through:

Settings → Danger Zone → Delete My Account

Account deletion is permanent and cannot be undone.

The deletion process removes associated user-owned data, including applicable Brand Profile information, posts, ideas, scheduled content, chats, insights, budgets, expenses, usage records, profile information, and authentication records.

Users may edit much of their information directly within PostWhim.

Users who would like a copy of their PostWhim data may submit a request through PostWhim Support.

We may need to verify your identity before fulfilling certain privacy requests.

California residents may have privacy rights under applicable California law, depending on the circumstances and whether the relevant law applies to PostWhim.

These rights may include rights to request information about personal information collected, request correction, request deletion, and receive information about how personal information is used or disclosed.

Where applicable, users may exercise privacy rights without unlawful discrimination.

PostWhim currently does not sell personal information or share personal information for cross-context behavioral advertising.

Privacy requests may be submitted through PostWhim Support.

PostWhim uses administrative and technical safeguards designed to protect user information.

Current safeguards include authenticated access, server-side verification for AI requests, database row-level security, HTTPS, server-side credential storage, and user-specific data-access controls.

No internet-based service can guarantee absolute security.

PostWhim is intended only for individuals who are at least 18 years old.

PostWhim is not intended for children or minors under 18, and we do not knowingly seek to collect personal information from children through the Service.

If we learn that a child has provided personal information through PostWhim, please contact us so we can take appropriate action.

We may update this Privacy Policy as PostWhim evolves.

If we make material changes, we may provide notice through the Service or another appropriate method.

The effective date at the top of the policy will indicate when the current version became effective.

PostWhim is operated by:

Support: support@postwhim.com

Users may also contact us through the PostWhim Support page.