Privacy Policy

Last updated: June 2026

1. Data Controller

Helmuth Rieger
Email: support@postair.ai

2. Data We Collect

• Account data: Email address and encrypted password upon registration
• Persona data: Name, profession, industry, target customers, tone and language as entered in your profile
• Usage data: Generated comments and posts, LinkedIn post URLs/text, timestamps
• Activity & analytics data: Time of your last activity, features used, platform used (iOS/Android/Web) and triggered events (see Section 9)
• Payment data: Processed exclusively by Stripe — we do not store credit card information
• LinkedIn data: When logging in via LinkedIn: name and email address from your LinkedIn profile

3. Purpose of Processing

• Providing app functionality (comment and post generation)
• Personalizing AI-generated content based on your persona
• Billing and managing your subscription
• Technical operation and troubleshooting
• Usage analysis to improve the app (feature usage, activity, stability)

4. Legal Basis

Processing is based on Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interest in operating the service).

5. Third-Party Services

Supabase (Auth & Database)

Authentication and data storage. Servers in the EU. Privacy Policy

Stripe (Payments)

Subscription payment processing. Privacy Policy

xAI / Grok (AI Generation)

Comment and post generation. Input data (post text, persona) is sent to the API for processing.

LinkedIn

OAuth login and post retrieval. Only data you explicitly share is transferred.

6. Data Retention

Your data is stored as long as your account is active. Upon account deletion, all personal data will be removed within 30 days.

7. Your Rights

You have the right to:

• Access your stored data
• Rectification of inaccurate data
• Erasure of your data
• Restriction of processing
• Data portability
• Object to processing
• Lodge a complaint with a supervisory authority

Contact us at support@postair.ai to exercise your rights.

To delete your account, use our deletion form.

8. Cookies

PostAir does not use tracking cookies. Only technically necessary data is stored in the browser's local storage (language setting, login session).

9. Usage Analytics

To improve the app, we analyze how PostAir is used. For this purpose we store events such as the time of your last activity, features used (e.g. comment or post generation, post retrieval), the platform used (iOS, Android or Web), and triggered actions (e.g. reaching the credit limit, completing a subscription).

This data is stored exclusively in our own database (Supabase, EU) and linked to your user ID. We do not use any third-party analytics services (e.g. Google Analytics) or tracking cookies, and we do not sell data. The legal basis is our legitimate interest in improving the product (Art. 6(1)(f) GDPR). When you delete your account, this analytics data is deleted as well.