What we store
- Your account
- Name, email address and, if you signed in with Google, the account identifier Google gives us. Passwords are stored only as an argon2id hash — we cannot read them.
- Your content
- The changelog entries, blog posts, social posts and app details you create, plus the feedback and subscribers your own visitors submit to your public pages.
- Credentials for services you connect
- Google OAuth refresh tokens, Buffer API keys, SMTP passwords and any media or search provider keys. These are encrypted at rest with a key held outside the database, and are used only to make the calls you asked for.
- An audit trail
- Who did what and when — publishing, connecting an account, changing a setting. This is how an unexpected post can be traced, so it is kept for as long as the account exists.
Analytics on this site
We measure our own site with Google Analytics 4, loaded through Google Tag Manager, to see which pages people arrive on and which ones lose them. Google may set its own cookies for this. It tells us nothing about your account or your content, and we do not use it to build advertising profiles.
Who we send data to
Only the services you connect, and only to do the thing you connected them for:
- Google — Analytics, Search Console and Tag Manager, read and, where you ask for it, written on your behalf.
- Buffer — the social posts you schedule and the metrics that come back.
- Your email provider — the SMTP server you configure sends your changelog and blog emails. We do not run a mail service of our own.
- Media and search providers — the prompt for an image or video you ask us to generate, and the keyword you ask us to research.
We do not sell data, and we do not share it with anyone not listed here.
Where it lives
On servers in Germany, in a MongoDB database that is not reachable from the public internet. Traffic to and from the site is encrypted in transit.
Getting it back, or getting it deleted
Write to us and we will export everything associated with your account, or delete it. Deletion removes your account, your organisation, your apps and their content. Some audit records may be retained where we are required to, and anything you have already published to Google, Buffer or a social network has to be removed there as well — we cannot reach into another service and unpublish on your behalf after the connection is gone.
Changes
If this policy changes in a way that affects what we do with your data, we will say so on the changelog rather than quietly editing this page.
Questions, exports and deletion requests:
Email us