Draft — to be reviewed by counsel before launch. This text is a placeholder and is not yet a binding agreement.
Privacy policy
Last updated: Draft, not yet in effect
Who we are
Braidpost is operated by [legal entity name], [registered address]. We are the controller of the personal data described here. Contact: [privacy contact email].
What we collect
- Account data: name, email address, password hash or single sign-on identifier.
- Content you create: captions, media, schedules and drafts.
- Connected accounts: tokens and profile details for the social channels you connect.
- Analytics returned by those channels for posts you publish through Braidpost.
- Billing data, handled by our payment provider [payment provider].
- Technical data: log files, device and browser information.
- Feedback you send from the app, with the page you sent it from.
- Product analytics and session recordings, only if you accept them (see Analytics and recordings).
The waiting list
When you join the waiting list for the private beta, or sign in before your spot opens, we store:
- Your email address and name.
- What you make, the channels you post to and your audience size range, if you tell us.
- The optional note you write.
- Where you came from: the campaign tags in the link you followed (utm source, medium and campaign) and the referring website, if any.
- Your status on the list (waiting, invited, joined or declined) and when it changed.
We use this to decide who to invite next and to email you about your spot: a confirmation when you join and an invitation when your spot opens. Nothing else. You can ask us to remove you from the list at any time. [Retention period for entries that never join.]
How we use it
- To publish and schedule your posts to the channels you choose.
- To show you analytics for your posts.
- To run, secure and support the service.
- To bill you and meet legal obligations.
Legal bases
We process data to perform our contract with you, for our legitimate interests in running a secure service, to meet legal obligations, and with your consent where required. [Counsel to confirm per purpose.]
Analytics and recordings
With your consent, we use PostHog to understand how Braidpost is used: which pages you visit, what you click, and recordings of sessions that show how pages behave. Form fields and the text of your posts are masked in recordings. We use this to fix problems and decide what to build.
Nothing is recorded or sent to PostHog until you choose Accept in the banner, and declining has no effect on the service. You can change your choice any time with “Cookie settings” at the bottom of our website. Your choice is remembered with a small cookie and in your browser's storage. [Counsel to confirm consent wording and retention for recordings.]
International transfers
Data is hosted in the EU. When a social platform you publish to is outside the EU, your content is transferred to it so it can be published. [Transfer mechanisms to be described by counsel.]
Retention
We keep your data while your account is open and for [period] afterwards, unless the law requires longer.
Your rights
You can access, correct, export or delete your personal data, object to or restrict some processing, and complain to a supervisory authority. Your Account page lets you change your name, export your data and delete your account yourself. For anything else, write to support@braidpost.com.
Security
Data is encrypted in transit and at rest. Access is limited to people who need it to run the service.
Changes to this policy
We will tell you about material changes by email or in the product before they take effect.