Privacy Policy
Last updated: 2026-10-04
النسخة العربيةWho we are
Postaty is a social media management platform, a product owned and operated by Egypt Online for software, services and E-commerce ("we"), located at 73 Abou Dawoud Al Zaheri st., third floor, Makram Abeid, Nasr City, Cairo, Egypt. The company is responsible for the personal data processed through Postaty. This policy explains what data we collect, how we use it and how you can control it.
Data we collect
Account data: name, email, company name and password (stored as a bcrypt hash; we cannot read it).
Content you create: brands and brand voice, posts and schedules, generated images and uploaded brand logos.
Team data: emails and roles of members you invite.
Limited technical data: IP address and error logs for security and abuse prevention (e.g. rate limiting).
Facebook and Instagram (Meta) data
When you connect a Facebook Page or Instagram Business account via Facebook Login, we request only the permissions needed for the service, such as: listing the Pages you manage, publishing and scheduling posts, reading and replying to comments and messages, and reading performance insights.
We use this data only to show it to you inside Postaty and to carry out actions you request (publishing, replying, reports). We do not sell it, use it for advertising, or share it with third parties other than the service providers listed below.
Access tokens: stored encrypted on our servers, used only to act on your behalf, and deleted immediately when you disconnect the account or delete your workspace. You can also revoke the app at any time from your Facebook settings.
Artificial intelligence
When you ask for a post, reply or image, we send the relevant text and brand-voice settings to an AI provider (Google Gemini or OpenAI) to generate the result. We never send passwords or access tokens.
Service providers
We use the following service providers, all of which process data on our behalf and for the service only: DigitalOcean (server and database hosting — Frankfurt, Germany), Google Gemini and OpenAI (AI text and image generation), Resend (sending emails such as account confirmation and invitations), Backblaze B2 (encrypted backups — United States) and Fawaterak (payment gateway — Egypt; card details are entered on their payment page directly and never reach us).
This means some of your data is transferred to and stored outside Egypt, only as far as needed to provide the service.
Cookies
We use a single essential login cookie (mb_session). No advertising or tracking cookies.
Retention and deletion
We keep your data while your account is active. When you delete your account or workspace in Settings, data is deleted immediately from the database, images and logos from storage, and from backups within 30 days at most. See the Data Deletion page.
Your rights
You may request access to, correction or deletion of your data, or object to its processing, in line with Egypt’s Personal Data Protection Law No. 151 of 2020. Contact us at the email below.
Security
Encrypted connections (HTTPS), hashed passwords, strict separation between workspaces and rate limiting. No system is 100% secure; we will notify you of any breach affecting you.
Children
The service is intended for businesses and not for anyone under 18.
Contact
For any privacy question or request about your data, contact us at support@postaty.app.
Company: Egypt Online for software, services and E-commerce
Address: 73 Abou Dawoud Al Zaheri st., third floor, Makram Abeid, Nasr City, Cairo, Egypt
Email: support@postaty.app