Privacy Policy
Last updated: 9 November 2026
Who we are
PostSail is provided by T-Apps, a sole proprietorship registered in Türkiye; these terms are governed by the laws of the Republic of Türkiye.
Contact: turgut.sonmez@t-apps.io.
What we collect
Account data: when you sign in (with Google or with a link sent to your email) we receive your email address and a user ID; with Google sign-in, also your name.
Connected social accounts: access tokens and account IDs for the YouTube channels, TikTok, X, LinkedIn and Bluesky accounts you connect (and, once available, Facebook Pages and Instagram business accounts). Tokens are encrypted with Google Cloud KMS.
Content you send: the videos and captions you submit for publishing, and the post IDs and links each platform returns.
Operational data: delivery status, error messages and timestamps needed to publish, retry and show status in the dashboard.
Billing data: when you subscribe, Paddle, our reseller and Merchant of Record, collects your payment details. We receive your Paddle customer and subscription IDs, the plan, its status and billing dates; we never see your card number.
YouTube and Google user data
PostSail uses YouTube API Services to publish videos to the YouTube channels you connect. By connecting a YouTube channel you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms). Google's Privacy Policy applies to the data Google processes: http://www.google.com/policies/privacy.
What we access: with your permission we use two Google scopes. "youtube.upload" lets us upload the videos you schedule to your channel, at the time you choose, with the title, description and settings you set. "youtube.readonly" lets us read your channel's ID, name and handle, so we can show which channel is connected. We do not read, change or delete your other videos, comments, playlists or analytics.
What we store: your encrypted tokens, your channel's ID, name and handle, and the YouTube video ID and link of each video we publish for you. We refresh or delete this stored YouTube data at least every 30 days.
How we use and share it: only to publish what you ask, show the result in your dashboard and help you when you contact support. We do not sell it, use it for advertising or use it to train AI models. We share it only with Google (YouTube), to perform the actions you request, and with Google Cloud, which hosts our service.
Limited Use: PostSail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
Removing access in the dashboard: you can disconnect a channel at any time (Accounts > Disconnect). We revoke our access with Google and delete the encrypted token right away, and we delete the remaining YouTube data (channel details, and the video IDs and links in your post history) within 7 days, or right away if you choose "Delete data now".
Removing access in your Google Account: you can also remove PostSail's access at https://security.google.com/settings/security/permissions. We notice this within a day and delete the related YouTube data within 30 days.
Questions or complaints about how we handle your data: write to turgut.sonmez@t-apps.io.
Invite list (privacy notice)
What we collect: when you join the invite list on this site, we store the email address you enter, the platforms you tick (optional), the page language and the time. To stop abuse we count requests per network address for one day; the address itself is not stored.
Why: only to invite you when PostSail opens. No newsletter, no advertising; we do not sell or share it. We send no email until PostSail opens; the form itself sends none.
Where: Google Cloud Firestore in the europe-west1 region (Belgium). Only our server can read it.
How long: until PostSail opens and for at most 12 months after that. If it does not open, we delete it at the latest 24 months after you joined.
How to delete: write to turgut.sonmez@t-apps.io from the address you registered; we delete it within 30 days. You can also ask what we store about you. The data controller is T-Apps (see "Who we are").
How we use it
Only to provide the service: to publish the content you send to the accounts you choose, show its status, retry failed posts and email you about problems. We do not sell your data, we do not use it for advertising and we do not use it to train AI models.
Where and for how long
Google Cloud (Firestore, Cloud Storage, Cloud KMS) in the europe-west1 region (Belgium).
Uploaded videos are deleted automatically after 14 days. Operational logs are kept for 30 days.
Account tokens are kept until you disconnect the account; when you disconnect it, we delete them right away. The remaining data of a disconnected account is deleted after 7 days for YouTube and after 30 days for other platforms, unless you reconnect the account before then.
When a paid plan ends, we keep the workspace's data for 30 days so you can pick up where you left off, then delete it: connected accounts are disconnected and their tokens deleted, and posts, uploads and API keys are removed.
Your rights and data deletion
You can ask us to see, correct or delete your data at any time by writing to turgut.sonmez@t-apps.io. We delete YouTube data within 7 days and all other data within 30 days of your request.
You can also delete a connected account's data yourself: Accounts > Disconnect > Delete data now.
For Facebook and Instagram you can also remove PostSail in your Facebook settings (Settings and privacy > Business integrations). We delete the related tokens when we receive the removal or your request.
You can also complain to your data protection authority.
Children
PostSail is a tool for businesses and is not meant for children under 16.
Changes
We post any change on this page and update the date above.