PostFiber

Privacy policy

Last updated October 26, 2026

PostFiber is a tool to plan, publish and measure posts on social networks. This page says what personal data it handles, where it comes from, why, who else sees it and for how long, and what you can do about it.

Who is responsible

Pixany Distribution LLC, 515 E Las Olas Boulevard, Suite 1301, Fort Lauderdale, FL 33301, USA (tax ID 61-1806353) is responsible for the personal data of the people who use PostFiber (their account, their workspace and their bills).

A workspace also keeps data about other people: the contacts of a link in bio page, the comments and messages of a channel, the posts that mention a brand. For those, the workspace's owner is responsible and PostFiber handles them on their behalf, only to provide the service.

For anything about your data, write to hello@postfiber.com.

Your account

Your name, your email address, your password (stored only as a hash), your language and time zone, and, if you turn it on, your two-factor authentication. PostFiber uses them to let you in, to tell you what happens in your workspace and to answer you when you write.

Payments

Plans are paid through Stripe: your card details go to Stripe and never reach PostFiber, which keeps the subscription, the orders and the invoices, as tax law requires.

What you create

Your posts, their texts and files, your notes, labels, saved captions, reports and settings. They are stored to publish them when and where you ask, and to show them to the people of your workspace.

Technical data

The servers keep a log of requests (address, browser, time, page) for security for up to two months, and the errors PostFiber runs into for as long as it takes to fix them. If you turn on browser notifications, the address your browser gives for them is kept to send them.

Data from the networks you connect

When you connect a channel, you sign in on the network itself and choose what PostFiber may do: PostFiber never sees your password there. It keeps the access the network gives (encrypted), your account's name, handle and picture, and what each network needs for the features you use. It publishes only what you schedule or publish, reads the numbers of your own posts to show them back to you, and never sells, rents or uses this data for advertising.

Facebook and Instagram (Meta)

The Pages and Instagram professional accounts you choose; publishing posts, reels and stories; the comments on your posts; the numbers of your posts and accounts (insights). Permissions: pages_show_list, pages_read_engagement, pages_manage_posts, pages_manage_metadata, pages_read_user_content, pages_manage_engagement, read_insights, business_management, instagram_basic, instagram_content_publish, instagram_manage_comments, instagram_manage_insights.

Instagram (Standalone)

Your professional account's name, handle and picture; publishing posts, reels and stories; the first comment you ask for; the numbers of your posts and account (insights). Permissions: instagram_business_basic, instagram_business_content_publish, instagram_business_manage_comments, instagram_business_manage_insights.

Threads (Meta)

Your profile and picture, publishing, the replies to your posts and their numbers.

TikTok

Your basic profile and its counts, your list of videos with their numbers, and uploading or publishing the videos you choose (user.info.basic, user.info.profile, user.info.stats, video.list, video.upload, video.publish).

TikTok Business

Your TikTok business or creator account's name, username and picture, its counts, your list of posts with their numbers, the trending music library and places to tag, and publishing the videos and photos you choose (user.info.basic, user.info.username, user.info.stats, video.list, video.upload, video.publish).

YouTube (Google)

Your channel, uploading the videos you choose, and reading your videos and their numbers (youtube.upload, youtube.readonly). By connecting it you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms); Google's privacy policy is at https://policies.google.com/privacy, and you can withdraw the access at any time at https://myaccount.google.com/permissions. Comments read from YouTube are deleted 30 days after they were last read.

Google Business Profile

The locations you manage, to publish their updates and read their numbers (business.manage).

Google user data

PostFiber's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

X

Your profile, publishing posts and their media, and reading your posts and their numbers (users.read, tweet.read, tweet.write, media.write, offline.access).

LinkedIn

Your name and picture and publishing on your profile (openid, profile, w_member_social), or on the company pages you administer.

Pinterest

Your account, your boards and publishing pins (user_accounts:read, boards:read, boards:write, pins:read, pins:write).

VK

Your VK name and profile picture, and publishing on your wall the posts, photos, videos and comments you schedule (vkid.personal_info, wall, photos, video).

Whop

Your Whop name and picture, your communities and their forums, and publishing the forum posts, replies and files you schedule (openid, profile, forum:post:create, forum:read, company:basic:read).

MeWe

Your MeWe name and handle, the groups you belong to, and publishing the posts and photos you schedule on your timeline or in a group.

Moltbook

The API key of your Moltbook agent, its name there, and publishing the posts and comments you schedule. Moltbook asks a verification question before it shows a post; PostFiber has an AI model (OpenAI) read that question to answer it. Nothing you wrote is sent to the AI for this.

Farcaster

Your Farcaster fid, username, name and picture, and publishing and removing the casts you schedule. To post for you, PostFiber uses Neynar, a provider for Farcaster: you approve a key in the Farcaster app, Neynar keeps it, and Neynar receives that key, your fid and the text and images of each cast.

Nostr

Your public key (npub) and the bunker:// link of your remote signer, from which PostFiber keeps a key pair of its own, the signer's public key and its relays. Never your private key: it stays in your signer, which signs each note you schedule before PostFiber sends it to the relays.

Bluesky, Mastodon, Telegram, DEV, Hashnode, WordPress and Listmonk

The access you give (a sign-in or a key you paste), your name and handle there, and publishing what you schedule.

Reddit, Discord, Slack, Tumblr, Twitch, Kick and Dribbble

Your account, or the server, workspace or blogs you choose, your name and picture there, the subreddits, channels or teams you can post to, and publishing what you schedule.

You can disconnect a channel at any time from Channels, and also withdraw the access from the network's own settings. What came from a network's login is deleted when you ask for it (see "Deleting your data").

Features that handle other people's data

• Inbox: the comments and private messages people send to your channels, with their name and picture on the network, to read and answer them from PostFiber.
• Link in bio pages set no cookie and count views and clicks without keeping anybody's address or browser. An email written in their form becomes a contact of that project, with the consent text the person accepted.
• Collect: public posts that mention or tag your brand, found through the networks' official APIs, with their author as the network shows them, so that you can ask permission and reuse them.
• Trends: public videos and their public numbers and, for a video that is analysed, its top public comments (their text, likes and date: never who wrote them), to inspire your posts. They are about public creators and audiences, not about you.
• Share links and shared calendars: the people you send a link to see what it shows, and a comment they leave keeps the name they write.

Artificial intelligence

When you ask the AI to write, rewrite, suggest or read something, the text needed for it (your draft, your brand voice examples, the video's words) is sent to OpenAI, and the images and videos you ask for are made by Pixany. They process it to give the answer, under terms that do not let them use it to train their models. Nothing is sent to an AI without your asking.

Who else handles the data

PostFiber relies on these providers, each only for its part:

• OVHcloud (France): the servers and the database.
• Backblaze (United States): the files you upload.
• Cloudflare: domain names and the delivery of public files.
• Stripe: payments and invoices.
• Outbu: sending email.
• OpenAI: the AI's texts.
• Pixany: the AI's images and videos.

Some of them are outside the European Union. Where data leaves it, it travels under the safeguards the law requires, such as the European Commission's standard contractual clauses.

PostFiber gives data to an authority only when the law obliges it.

How long it is kept

• Your account and your workspace, while they exist.
• A workspace you delete stays frozen for 7 days, in case it was a mistake, and is then destroyed with its projects, channels and files. Its billing records stay for as long as tax law requires.
• If you delete your account, it goes at once; what you wrote in projects that remain stays in them, without your name.
• Inbox items: handled comments 180 days, handled messages 90 days, spam 30 days, everything from YouTube 30 days, and everything from a channel 7 days after it is disconnected.
• Encrypted backups of the database are made every night and kept for about two weeks before they are replaced. A file you delete can be recovered for 14 days, and is then gone for good.

Your rights

You can see and correct your data in your profile, ask for a copy of it, ask for it to be deleted, object to a use of it or ask for it to be limited, by writing to hello@postfiber.com. If you think your data is handled badly, you can also complain to the data protection authority where you live.

Deleting your data

From "Privacy and data", in the menu of your account, you can delete your account or the whole workspace, and a project from its settings. You can also remove PostFiber from your Facebook or Instagram settings: Meta then tells PostFiber to forget what came from your login there. All the ways are described on the page about deleting your data.

How to delete your data

Cookies

PostFiber uses only the cookies it needs to work: the one that keeps you signed in, the one that protects forms, and "remember me" if you ask for it. There is no advertising or analytics cookie, and the public pages (link in bio, shared posts) set none.

Security

Everything travels encrypted (HTTPS); the accesses to your networks are stored encrypted; each person of a workspace sees what their role allows; and you can protect your account with two-factor authentication.

Children

PostFiber is not meant for people under 16, and does not knowingly keep their data.

Changes

When this policy changes, the new one is published here with its date, and an important change is told by email before it applies.