Privacy Policy

1. Introduction

PostMimic.ai ("PostMimic," "we," "us," or "our") operates the postmimic.ai website and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Personal Information You Provide

When you register for an account, subscribe to a plan, or contact us, we may collect:

• Full name and email address
• Account credentials (password, stored in hashed form)
• Billing information (processed securely by Stripe; we do not store full card numbers)
• LinkedIn profile information you voluntarily provide for voice training
• Content you input for post generation (prompts, drafts, topics)

2.2 Automatically Collected Information

• Device type, browser type, operating system
• IP address and approximate geographic location
• Pages visited, time spent, and navigation patterns
• Referring URL and exit pages

2.3 Cookies and Tracking Technologies

We use essential cookies to maintain your session and preferences. We may use analytics cookies (such as Google Analytics) to understand how users interact with the Service. You can control cookie preferences through your browser settings.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and send billing confirmations
• Train your personalized voice profile based on content you provide
• Generate LinkedIn post content tailored to your writing style
• Send service-related communications (account updates, security alerts)
• Respond to customer support inquiries
• Analyze usage patterns to improve the Service
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share data with:

• Service providers: Third-party vendors who assist in operating the Service (e.g., Stripe for payments, Vercel for hosting, AI model providers for content generation)
• Legal requirements: When required by law, subpoena, or government request
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email or prominent notice on our website before your information becomes subject to a different privacy policy
• With your consent: For any other purpose with your explicit authorization

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS/SSL), hashed password storage, and access controls. Payment processing is handled entirely by Stripe, which is PCI-DSS Level 1 compliant. While we strive to protect your data, no method of electronic transmission or storage is 100% secure.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, accounting, or compliance purposes.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a structured, machine-readable format
• Opt-out: Unsubscribe from marketing emails at any time

To exercise any of these rights, contact us at privacy@postmimic.ai.

8. Third-Party Services

The Service may contain links to third-party websites or integrate with third-party services (e.g., LinkedIn). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

9. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside your country of residence. By using the Service, you consent to such transfers. We take appropriate safeguards to ensure your data is treated securely and in accordance with this Privacy Policy.