Privacy policy

PostPlan writes social media posts for small businesses. This page says what it stores, who else sees it, how long it is kept, and how to get rid of it. It is written to be read rather than to be thorough at your expense.

Who we are

PostPlan is a service provided by Slate Harbour Ltd, a company registered in England and Wales under company number 17435290, whose registered office is at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Slate Harbour Ltd is the data controller for everything described below: it is the company that decides what is collected and why, and the company to hold to it. Every right this page gives you is exercised against it, at privacy@postplan.uk.

What we store

• Your account. Your email address, and your password stored only as a scrypt hash — we cannot read your password, and a copy of our database would not reveal it.
• What you told us about your business. Its name, what it does, who its customers are, what you want from posting, your tone, the platforms you chose and how often you post.
• What the app generated. Your content pillars, your posts, captions, hashtags and alt text, and the days you put them on.
• Photographs you upload, and the versions we composite with your text and colours in order to post them.
• Your Instagram connection, if you make one: an access token, encrypted at rest with AES-256-GCM, along with the Instagram account id and username it belongs to.
• Counts of how often you used the parts that cost money, so we can apply daily limits.
• Your subscription’s status, if you subscribe in the iPhone app: when it runs until, whether it is a free trial, and whether it renews. Apple takes the payment; we never see your card.

Who else sees it

• Anthropic, which runs the AI that writes your posts. When you ask for a caption we send it the photograph and what you told us about your business; when you ask for a plan we send the business description. We send nothing else and we do not send your email address or your Instagram token. See Anthropic’s privacy policy. The phone app asks for your permission before it sends anything to Anthropic for the first time, and you can withdraw that permission at any time under Account in the app — it then asks again before anything else is sent — or by deleting your account.
• Meta, when you press Post. The photograph and the caption go to Instagram, because that is what posting is.
• RevenueCat, which handles App Store subscriptions for us, if you subscribe in the iPhone app. It receives your PostPlan account number, your App Store purchases and basic device details such as language and currency — never your photographs, your posts or what you told us about your business.
• Vercel, which hosts the app and stores the photographs, and Neon, which runs the database.

Anthropic, Vercel and Neon each act as our processor under a data processing agreement that forms part of their terms of service, and those agreements cover transfers out of the UK with recognised safeguards such as the Standard Contractual Clauses. Anthropic’s and Vercel’s agreements also require them to process personal data only on our documented instructions, to keep it confidential, and to protect it with appropriate technical and organisational security measures. Anthropic does not train its models on what we send it, and deletes it within 30 days unless it is flagged for breaking its usage policy.

We do not sell anything to anyone, and there is no advertising or analytics tracking in this app.

Your photographs

Photographs are held on a private store. They are not reachable by a public link: every read uses a signed URL that stops working after 24 hours. The one exception is deliberate and unavoidable — when you publish to Instagram, Meta fetches the image itself, so a link has to work for long enough for it to do that.

How long we keep it

• Photographs you never used — not published, not on your calendar, untouched for 30 days — are deleted automatically.
• Signed-in sessions expire after 30 days.
• Everything else in your account is kept until you delete it, which you can do at any time.
• A waitlist email address is kept until you ask us to remove it. If you gave us your address on the front page before you had an account, that address is stored separately and is not linked to any account — so deleting your account does not remove it, because we have no way to tell that the two are the same person. Email privacy@postplan.uk and we will delete it.

Deleting your data

You can delete your account and everything in it from inside the app, at any time, without asking us. Here is how, and exactly what it does and does not reach.

The one thing account deletion does not reach is a waitlist address, for the reason above: it is stored with no link to any account, so nothing connects the two. Email privacy@postplan.uk and we will remove it by hand.

Disconnecting Instagram

Disconnecting deletes our copy of your access token, and after it the app genuinely cannot post as you. It does not revoke anything at Meta. Until you remove PostPlan yourself under Instagram’s Apps and websites settings, the authorisation still exists on their side. We would rather say so than let “disconnect” sound more final than it is. Instagram provides no way for an app to withdraw its own permission on this login method, so this is a limit of the platform rather than something we have chosen not to build.

It works in the other direction. If you remove PostPlan under Instagram’s Apps and websites settings, Instagram tells us and we delete the connection and the access token straight away.

Removing it there also counts as asking us to delete your data, which is how Instagram treats it, so we additionally remove the Instagram identifiers and post links we stored while publishing on your behalf. That cannot be undone, and it is more than pressing Disconnect inside PostPlan does. Your photographs, captions, alt text and content plan are not affected, and neither are the posts themselves — they stay on your Instagram account.

A deletion request does not delete your PostPlan account, your content plan or your photographs, and that is deliberate: people disconnect Instagram for all sorts of ordinary reasons, and you may want to come back. If you want everything gone, see how to delete your data — that is the route that deletes the account itself, and it asks for your password first.

We keep a record that a deletion request happened — a confirmation code and the dates — because Meta requires us to be able to tell you what became of it. That record stops naming you the moment the work is done.

Complaining

If you think we have handled your data badly, tell us first and we will try to put it right. You do not have to go through us, though: you can complain directly to the Information Commissioner’s Office, the UK regulator, at ico.org.uk or on 0303 123 1113. Telling us first does not cost you that right.

Contact

Questions about any of this: privacy@postplan.uk.