Privacy Policy
PostJunky helps you upload social media content, caption it with AI, and schedule it. This page explains what data is processed.
Controller
Tamim Ilyas
Account & Security
We store your name, email address, a password hash, and your verification status. Login sessions record data such as IP address, device identifier (user agent), and security events (e.g. new logins, 2FA).
Your Content
Uploaded images and videos are stored on Cloudflare R2, including filename, file size, file type, and technical metadata. This also applies to your avatar and automatically generated thumbnails.
AI Processing
To automatically transcribe and caption videos, uploaded videos are sent to OpenAI (including GPT-4o Vision and Whisper).
Social Media Connections
If you connect Instagram, Facebook, LinkedIn, TikTok, YouTube, X/Twitter, or Pinterest, we store the required access tokens encrypted in order to publish posts on your behalf.
Planning & Organization
Scheduled posts, saved drafts, in-app notifications, and - where provided by the respective platform - metrics for published posts are stored for your account.
Support Requests
Requests you submit via the contact form, feature request, or bug report are stored with your account so we can process them.
Technical Basis
Data is stored in a PostgreSQL database. Login uses an access token (JWT) stored in your browser. We do not use tracking cookies beyond what is technically necessary.
Retention Period
Your data remains stored for as long as your account exists. No fixed retention periods beyond account deletion are currently technically implemented.
Account Deletion
You can delete your account at any time in your profile settings. When your account is deleted, the stored content and files known to the account are removed.
Security
Access tokens for connected social media accounts are stored encrypted. Files on Cloudflare R2 are scoped per user account.
Your Rights
You have the right to access, rectification, erasure, restriction of processing, objection, and data portability. You may also lodge a complaint with a data protection supervisory authority.