Privacy policy

Last updated: November 8, 2026

This policy describes personal data processed by Postmina at postmina.com. Connecting a social account is optional and separate from signing in to Postmina. The available features depend on the permissions and integrations actually enabled for your workspace.

Who is responsible

Sellrock UG (haftungsbeschränkt), Kölner Str. 43a, 90425 Nürnberg, Germany, operates Postmina and is the controller for website visitors, account administration, security and support. Contact info@postmina.com or +49 176 61838332. When a business provides personal data for its own content workflows, it remains responsible for its purposes and instructions; any processing on its behalf requires the applicable data-processing arrangements.

Data we process

Account and workspace: name, email address, a one-way password hash, session information, workspace memberships, roles and settings. We do not store your password in readable or reversibly encrypted form.
Business and sources: submitted website URLs, permitted source material, brand information, project settings and the sources of business facts.
Content and activity: uploaded media, drafts, revisions, approvals, schedules, publication identifiers, job progress and operational usage records.
Optional social connections: provider/app identifiers, the authorizing account or business identity, selected Facebook Pages or Instagram Professional accounts, their names/profile metadata, granted permissions, token expiry and encrypted access credentials. We only request capabilities used by the selected integration.
Technical and contact data: IP address, request time, browser/request information, security and error logs, and the name, email and message you send when contacting us.

Purposes and legal bases

We process account and workflow data to provide the service you request and perform our contract (Article 6(1)(b) GDPR). We process necessary security, abuse-prevention and operational records for our legitimate interest in a reliable, secure service (Article 6(1)(f)). Required accounting and compliance records are processed to fulfil legal obligations (Article 6(1)(c)). Where an optional activity requires consent, its basis is Article 6(1)(a), and consent can be withdrawn for the future. Granting Meta permissions does not consent to unrelated processing.

AI processing is separate

AI features, when enabled, send the necessary parts of your briefing, instructions and content through our controlled gateway to the configured provider. No external AI provider is currently activated in this production deployment. Before an external provider is enabled for production personal data, its identity, purpose and relevant transfer information must be disclosed here. Social authorization alone does not permit sending Meta platform data to AI. AI output is a suggestion requiring the applicable review and approval; it is not a decision about your legal or similarly significant rights.

Trying Postmina without an account

When you enter a website or a description on postmina.com before creating an account, Postmina reads the public pages of that website (respecting robots.txt), derives a brand profile and, on request, writes one example post. The result of a website is kept for up to 90 days and shown again to anyone who enters the same website in the same language, so it is not read again; your own changes, a description you enter and an example written with your changes stay with your browser session only. A necessary cookie (postmina_guest) identifies that session for up to 90 days; we store only a hash of it. To prevent abuse we keep a keyed hash of your IP address with the session and use Cloudflare Turnstile to check that a person starts new work. When you save the result to an account, it is copied into your workspace; unsaved results and sessions are deleted after their 90 days.

Facebook and Instagram

If you authorize an available Meta connection, Postmina uses the granted access to identify eligible accounts, let you select the intended target and publish content approved or scheduled by your business. The publishing integration does not read private messages, manage advertisements or import your social history into AI. We do not sell Meta platform data or use it to train AI models. Disconnecting stops eligible future work and removes usable connection credentials; it does not retract a post already accepted by Meta. A validated provider deletion request removes matching connection identity, permission and profile data. Workspace drafts, approvals, publication history and evidence needed to resolve uncertain remote operations are separate records. See the deletion instructions and request-status page for all deletion options, including account and workspace requests.

Service providers and recipients

Our application and private storage run on Hetzner hosting. Cloudflare provides DNS, HTTPS traffic routing, caching and security and can process IP addresses and request metadata. Transactional and support email is handled through our Mailcow installation at mail.trafficlog.app and the relevant recipient mail servers. Authorized personnel may access data for support, security and operations. When you connect and publish to a social platform, that platform receives the authorized requests and content and processes data under its own terms. We disclose data to authorities only where legally required. We do not sell personal data.

Cookies and local storage

Postmina uses necessary login/session cookies and browser storage for functions such as language, appearance and workspace preferences. Cloudflare may use necessary security cookies. These functions are necessary to deliver a requested service or protect it; we do not deploy a Meta Pixel or optional advertising trackers on these pages. Any future nonessential tracking requires its own information and, where required, prior consent. A necessary cookie (postmina_guest) remembers a preview you started without an account for up to 90 days.

Retention and deletion

Account and workspace data is retained while needed to provide your requested service. When a purpose ends or a valid deletion request is fulfilled, we delete or anonymize the affected data unless a legal retention obligation or a necessary, proportionate legal claim requires retention. Connection credentials are removed on disconnect or validated revocation; deletion also removes matching provider identity and profile metadata. Minimal Meta deletion receipts expire after 90 days. Published content on Meta must be removed on that platform. Restricted encrypted backups may temporarily contain older records; they are used for recovery, and applicable deletions must be reapplied after restoration. Contact us for the retention criteria applying to your request.

International processing

Cloudflare operates an international network, and connected social platforms or recipient mail providers may process data outside the EEA. Where a transfer requires safeguards, the applicable basis must be an adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses, with additional measures where necessary. Cloudflare publishes its data-processing addendum and transfer arrangements at cloudflare.com/cloudflare-customer-dpa/. Contact us for information about the arrangements relevant to your data.

Your rights and how to contact us

Subject to the GDPR conditions, you can request access, correction, erasure, restriction and portability, object to legitimate-interest processing, and withdraw consent for the future. Send your request to info@postmina.com. We verify identity proportionately and normally respond within one month; statutory extensions will be explained. Never send passwords, access tokens or identity documents in an initial email. You may complain to a supervisory authority, including the Bavarian State Office for Data Protection Supervision (BayLDA), www.lda.bayern.de.

Changes to this policy

We update this notice when processing changes. The date above identifies this version. Material new purposes, recipients or optional tracking will be explained before the change is applied where required.