1. Who we are and what this policy covers
AtoPost LLC is a Virginia, United States limited liability company. In this policy, “AtoPost,” “we,” “us,” and “our” refer to AtoPost LLC. Contact us at info@atopost.com for privacy questions or requests. This policy covers our website, workspaces, AI creation tools, scheduling, publishing, analytics, billing, and supported integrations.
If you use AtoPost on behalf of a business or client, that organization may control the information supplied to its workspace. Its privacy practices also apply to information it collects from its customers, employees, or audiences. External platforms and websites have their own privacy policies.
2. Information we collect
- Account and workspace information: name, email, account identifiers, authentication information, business or creator details, workspace settings, audience, niche, brand voice, preferences, and authorized social accounts.
- Content and instructions: prompts, agent conversations, uploaded logos, images, audio and video, briefs, reference materials, generated drafts, captions, edits, approvals, schedules, and publishing records.
- Connected-platform information: account and channel identifiers, profile details, granted permissions, access and refresh tokens where provided, destination details such as boards or communities, publishing receipts and errors, and available post and account performance metrics.
- Billing and referral information: plan, purchase and transaction identifiers, billing status, credit usage, referral attribution, commissions, and payout status. Stripe processes payment credentials and payout verification information. AtoPost does not store complete payment-card numbers.
- Technical and support information: service requests, timestamps, IP addresses and browser or device information made available through requests, diagnostic logs, generation and usage records, and communications you send to support.
We receive information from you, your use of the service, authorized workspace users, connected platforms, and providers that process transactions or perform requested functions. The information a platform supplies depends on your permissions and its API availability.
Do not put passwords, full payment credentials, government identifiers, sensitive medical records, or other unnecessary sensitive personal information in prompts or uploads. Only submit another person’s information when you have the necessary authority and permissions.
3. How we use information
- Authenticate accounts, operate workspaces, and remember preferences.
- Personalize your agent and translate your instructions into content briefs, drafts, images, narration, video, and other requested outputs.
- Carry out authorized approvals, scheduling, publishing, and advertising actions and report their status.
- Display available analytics and use brand-specific performance information to inform recommendations and automatic content planning.
- Process subscriptions, credits, referrals and payouts; maintain transaction and usage records; and enforce applicable limits.
- Provide support, diagnose failures, improve reliability, protect accounts, investigate misuse, and meet legal obligations.
Recommendations and creative scores are estimates. They are not guarantees of virality, revenue, or advertising results.
4. AI processing and service providers
Creating content may require sending relevant prompts, workspace instructions, selected brand materials, images, audio, video, or drafts to AI providers. We use OpenRouter for supported model routing and may use additional providers for image, voice, video, transcription, or related production steps. Which provider receives information depends on the selected workflow and supported model.
Providers may process and retain submitted information under their applicable terms, privacy policies, and service arrangements. This policy is not a promise that every AI provider has identical retention or model-training practices. Do not submit information you are not authorized to share with the providers needed to complete your request. Contact us if your organization needs specific processing restrictions before using the service.
We use hosting, authentication, database and storage providers, including Vercel and Supabase; Stripe for payments and supported payouts; email providers for service communications; and social integration providers, including Zernio where applicable. Relevant information is shared to provide the requested functions. We do not use one customer’s private brand materials to create content for another customer.
If you enable optional phone review notifications, we store your phone number, verification and consent status, and message delivery or opt-out records. We use Twilio to verify your number and deliver notifications. Review texts contain a link to your workspace’s review and upload page; viewing private content or approving posts requires signing in. You can disable phone alerts in Automatic Posting or reply STOP to opt out.
5. Other disclosures and public content
Content you authorize for publication is sent to the selected platform and becomes visible according to that platform’s settings. Public posts can be copied, shared, indexed, or retained by others. Removing content from AtoPost does not remove a published post or third-party copies.
Information may be accessible to people you authorize to manage your workspace. We may disclose information where reasonably necessary to comply with lawful requests, protect rights and safety, investigate fraud or security incidents, or address disputes. If our business is involved in a merger, acquisition, financing, or sale of assets, relevant information may be disclosed or transferred subject to applicable privacy obligations.
6. Connected accounts, including YouTube
You choose which accounts to authorize. We use permissions to perform supported actions such as publishing and retrieving available analytics. Some connections are handled directly and others through an integration provider. Disconnect an account from the Connections page or revoke access through the platform’s own settings. An action already submitted to a platform may still complete. Disconnecting does not cancel your subscription or automatically delete previously stored information; request deletion using the instructions below.
AtoPost uses YouTube API Services when you connect or use supported YouTube features. The Google Privacy Policy applies to Google’s processing. In addition to disconnecting in AtoPost, you can revoke access through your Google account security permissions. Contact us to request deletion of stored YouTube data. Applicable platform requirements may impose shorter deletion or refresh periods than our general retention practices.
7. Cookies and similar storage
We use cookies and related browser storage for authentication, session security, connection authorization, workspace selection, and preferences. Providers involved in checkout or connected-account authorization may also use cookies under their own policies. Blocking or clearing necessary cookies can prevent sign-in, checkout, or connections from working. This policy does not itself give consent for optional tracking where separate consent is required.
8. Retention and deletion
We retain information for the period needed for the relevant function, taking account of account activity, content and scheduling needs, security, transaction records, disputes, legal obligations, and platform requirements. Different categories may have different retention periods; this is not a commitment to retain all information indefinitely or delete all categories on the same day.
Request deletion by following our Data Deletion instructions. We may need to verify your identity and authority. Limited records may remain where required or permitted for legal compliance, billing, fraud prevention, security, or disputes. Backup copies may remain until normal backup rotation, subject to applicable requirements. Published content and records independently held by payment or social providers are subject to their own controls.
9. Your privacy choices and rights
You can edit available workspace information, adjust automatic posting settings, disconnect accounts, and request access, correction, export, or deletion of eligible personal information by emailing info@atopost.com. Include the account email, the request, and enough information to identify the relevant workspace. Do not email passwords or full payment credentials.
Depending on your location and applicable law, you may also have rights to restrict or object to processing, withdraw consent, use an authorized agent, or opt out of a sale or sharing of personal information, targeted advertising, or certain profiling. Available rights and exceptions depend on the law and processing involved. We respond within applicable legal deadlines and explain any permitted refusal or extension. Where a right to appeal applies, email the same address with “Privacy appeal” and the original request details. You may also contact your relevant privacy regulator, including the Virginia Attorney General where applicable. We do not discriminate against you for exercising applicable privacy rights.
For personal information your organization controls in a client workspace, contact that organization as well. We can assist with eligible requests within our role and authority.
10. International processing and security
AtoPost is operated from the United States, and providers may process information in other countries. Privacy laws may differ from those where you live. Where applicable law requires a transfer mechanism or additional safeguards, those requirements still apply; using AtoPost does not waive them.
We use reasonable administrative and technical safeguards, including access controls and server-side handling of service credentials. No system is completely secure. Protect your sign-in information and notify us promptly if you suspect unauthorized access. We will handle security incidents and required notices in accordance with applicable obligations.
11. Children and changes to this policy
AtoPost is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child has supplied information, contact us so we can investigate and take appropriate action.
We may revise this policy as the service or legal requirements change. We will update the effective date and provide additional notice or obtain consent where required for material changes. Questions about this policy can be sent to info@atopost.com.