Privacy Policy

Last updated 29 September 2026

1. Who we are
2. What we collect
3. What stays on your Mac
4. How we use it
5. AI processing
6. Posting to social networks
7. Who we share it with
8. Where it's stored
9. How long we keep it
10. Your rights
11. Security
12. Age limits
13. The website
14. Changes
15. Contact and grievances

1. Who we are

PostBuzz is made by Codeaamy Private Limited ("Codeaamy", "we", "us"), Pune, Maharashtra, India. This policy covers the PostBuzz Mac app, the website at postbuzz.in, and the services behind them (together, "PostBuzz").

Codeaamy decides how and why your personal data is used. Under India's Digital Personal Data Protection Act, 2023 that makes us the Data Fiduciary. Under the EU and UK GDPR it makes us the controller. For posts you publish through PostBuzz, the services listed in section 7 act on our instructions.

2. What we collect

You give us

• Account details: your name, email address, and password. The password is handled by our sign-in provider and stored only as a secure hash. If you sign in with Apple or Google, we receive your name and email from them. You may also add a company name and time zone.
• Projects and brand information: project names and descriptions, website and app-store links, colours, logos and other brand images, the voice and tone you choose, instructions, and "memories" about your brand, whether you add them or PostBuzz suggests them and you keep them.
• Your content: drafts, captions, hashtags, banners, photos and videos you upload, schedules, and the edits you make to drafts. We keep your edits so PostBuzz learns how you write.
• Connected social accounts: which networks you've connected and the account name and display name shown there. You sign in to each network on its own page. We never see or store your social media passwords.
• Your own AI keys (optional): stored encrypted and never shown again. We keep only a masked version (the first characters and the last four) so you can tell them apart.
• Billing: your plan, subscription status, invoices, and your card's brand, last four digits and expiry date. Payments are processed by Stripe. We never see your full card number. If you cancel, we ask for an optional reason.
• Support: what you tell us when you email us.

Collected as you use PostBuzz

• Publishing results: whether each post went out, the link to the live post, and the network's reason if it refused one. Where a network provides them, we also collect engagement numbers (likes, comments, shares, saves, reach, followers) and top comments on your posts.
• Usage and credits: how many captions, banners and posts you've used this month.
• Diagnostics: crash reports, error reports, and app log lines. These include your account ID, the name of the project that was open, the app version, and technical details (such as which feature failed and how long it took). They are designed not to include your email address, captions, images, or keys.
• Notifications: a device token, so we can send notifications to your Mac.

From public sources, when you ask

When you add a website, an App Store or Google Play listing, a GitHub profile, or a public social profile, PostBuzz reads the public pages and listings you point it to, to learn about your brand. When you paste a link into a post, we fetch that page's title and description.

3. What stays on your Mac

Some things stay on your Mac and are only uploaded if a post uses them:

• brand images, product assets and mockup screens
• AI-generated backgrounds
• attachments you're still working on
• documents you add for facts, and what PostBuzz read from your website
• the folders you choose

Image analysis for choosing pictures runs on your Mac using Apple's frameworks. If you link a code repository, PostBuzz reads it locally to draft release posts. Only the resulting draft leaves your Mac. Settings › Danger zone › Clear this Mac removes PostBuzz's local data.

4. How we use your information

• To provide PostBuzz: studying your brand, writing and designing drafts, showing previews, publishing the posts you approve at the times you choose, reporting how they went, and syncing your projects across your devices. Basis: to perform our contract with you.
• Billing and credits: charging for your plan and tracking your allowance. Basis: contract, and legal obligations for tax and accounting.
• Fixing problems and keeping PostBuzz secure: diagnostics, preventing abuse, and enforcing our Terms. Basis: our legitimate interest in a working, safe service.
• Talking to you: service messages (for example, a failed payment or a post that didn't go out), support replies, and beta invitations you asked for. Basis: contract, or your consent.

We do not sell your personal data, share it for advertising, or use it to build advertising profiles. Where we rely on your consent, you can withdraw it at any time.

5. AI processing

When you ask PostBuzz to do something that needs AI, we send the material that task needs to an AI provider. That includes studying your brand, writing or polishing a caption, suggesting product shots, and drawing a background or banner. The material can include your project details, brand profile, memories, relevant passages from your documents, the draft, and the images involved.

• On PostBuzz credits: writing is done by Anthropic, and pictures by OpenAI. If you use your own keys, the work goes to the provider of the key you chose: OpenAI, Anthropic, or Google (Gemini).
• Choosing a banner's layout may use TypeSafe, which receives the post's text and a description of your brand's style, but not your images.
• Providers receive this material only to do the task you asked for, under their business or API terms. We don't let them use it for advertising.

AI output can be wrong. You review every draft, and nothing is published without your approval.

6. Posting to social networks (Upload-Post)

PostBuzz publishes through Upload-Post (upload-post.com), a posting service operated by a separate company. Upload-Post is an intermediary. It is not affiliated with, endorsed by, or part of Meta (Instagram, Facebook), LinkedIn, X, or Pinterest.

• Connecting an account: you sign in on the network's own page through Upload-Post. Upload-Post then stores the access the network grants, along with the account's name and profile details. PostBuzz receives only the account name and whether it's connected.
• Publishing: for each post you approve, we send Upload-Post the caption, the network, and links to the images or video. Those links expire after one hour.
• Upload-Post's role: it handles this data on our behalf. It describes how it handles data in its own privacy policy. Some older projects publish through Ayrshare (ayrshare.com) in the same way.
• Once published, a post belongs to the network: it is public there and governed by that network's own terms and privacy policy. Deleting a post or project in PostBuzz does not remove posts already published; delete them on the network if you need to.
• Disconnecting: you can disconnect an account in PostBuzz at any time, and you can also revoke access in the network's own settings. When a project has no connected accounts left, or you delete it, we delete its Upload-Post profile and the access stored there.

7. Who we share it with

We share personal data only with the services that run PostBuzz, only as much as each one needs, and under contracts that require them to protect it:

We may also disclose data when the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business. In a merger or sale, this policy would continue to apply to your data. If you join a team, the people on it see the projects and posts they share with you.

8. Where your data is stored

PostBuzz's main database and files are hosted in South Korea, and other services process data in the countries shown above. When data leaves India, the EU, or the UK, we rely on the safeguards the law provides for such transfers, such as the European Commission's standard contractual clauses where they apply. We do not transfer data to any country the Government of India has restricted.

9. How long we keep it

• Account, projects and content: while your account is open. When you delete a project, its posts, brand profile, memories, media and connected accounts are deleted, and so is its Upload-Post profile. Monthly usage counts are kept for billing.
• Whole account: deleted within 30 days of your request, apart from what we must keep by law.
• Invoices and payment records: as long as tax and company law requires. In India that is generally 8 years.
• Diagnostics: up to 90 days.
• Backups: deleted data can remain in encrypted backups for a short period until they are overwritten.
• Upload-Post: keeps data under its own policy after an account is disconnected or deleted, for up to 30 days.

10. Your rights

Depending on where you live, you can ask to:

• see the data we hold about you and get a copy in a portable format
• correct anything that's wrong or incomplete (most of it you can edit yourself in Project Setup, Brand Profile and Settings)
• delete your data. You can delete a project in Settings › Danger zone; for your whole account, email us.
• withdraw consent, or object to or restrict some uses
• nominate someone to act for you if you die or become unable to (India)
• complain to us, and then to a regulator: the Data Protection Board of India, or your local data protection authority in the EU or UK.

Email support@codeaamy.com from the address on your account. We reply within 30 days. We don't sell or "share" personal information as California law defines those terms, and we won't treat you differently for using your rights.

11. Security

• In transit and at rest: data is encrypted in transit (HTTPS), and stored data is encrypted at rest.
• Separation: each account's projects and files are walled off from other accounts at the database level.
• Your AI keys: kept in an encrypted vault that the app itself can't read back.
• The app: the Mac app runs in Apple's sandbox, and its releases are signed and notarized by Apple.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.

12. Age limits

PostBuzz is for people aged 16 or over. If you are under 18, you may use PostBuzz only with the verifiable consent of a parent or legal guardian, who accepts these terms for you. We don't knowingly collect data from children under 16. If you believe a child has given us data, email us and we will delete it.

13. The website

postbuzz.in uses no advertising trackers and sets no cookies. To see which pages people visit, we use Vercel Web Analytics, which counts page views along with the referring site, country, browser, operating system, and device type. It doesn't use cookies, doesn't store IP addresses, and can't follow you across sites or from one day to the next. If you join the beta list, we store your email address, which form you used, and when you joined, only to send your invitation and product news about PostBuzz. You can ask us to remove it at any time. The site loads its fonts from Google Fonts, which receives your IP address when the page loads.

The Mac app checks postbuzz.in once a day for updates. That request includes the app version but no personal data.

14. Changes to this policy

We'll post any change here with a new date. If a change is significant, we'll tell you in the app or by email before it takes effect.

15. Contact and grievances

Codeaamy Private Limited
Pune, Maharashtra, India
Email: support@codeaamy.com

Grievance Officer, Codeaamy Private Limited
Email: support@codeaamy.com
We acknowledge complaints within 48 hours and resolve them within the time the law requires.