Privacy Policy — Postpilot

Summary

1. What We Collect

• Google account info (name, email, profile picture, account id) — to create and identify your Postpilot account.
• Blogger access — when you connect, Google issues access/refresh tokens that let Postpilot list your blogs and create posts on your behalf.
• Content & settings you create — blogs, RSS feeds, topics, schedules, and the articles generated for your review.

2. How We Use It

We use this data only to provide Postpilot's features: signing you in, listing your blogs, generating draft articles, and publishing posts you approve.

3. Google User Data — Limited Use

Postpilot's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:

• We use Blogger data solely to provide and improve Postpilot's user-facing features.
• We do not sell Google user data.
• We do not use it for advertising.
• We do not allow humans to read it, except (a) with your consent, (b) for security/abuse/legal reasons, or (c) where data is aggregated/anonymized.

4. Storage & Security

• Google access/refresh tokens are stored encrypted (AES-256-GCM).
• Data is stored on our own server (Pewarisgroup infrastructure).
• Article generation uses Google's Gemini API; the prompt includes your blog's niche/language and public RSS headlines for inspiration — not your Google tokens.

5. Your Choices & Deletion

You can disconnect at any time via Settings → Delete account in Postpilot, which removes your data and revokes Postpilot's access to your Google account. You can also revoke access from your Google account permissions.

6. AI-Generated Content

Postpilot produces drafts for your review. You are responsible for reviewing and for the content you choose to publish to your own blog.

7. Your Rights

You have the rights described in the Pewarisgroup master Privacy Policy, including access, correction, deletion, and withdrawal of consent.

8. Contact Us

Privacy questions about Postpilot: [email protected]