Privacy Policy
Last updated 8 October 2026
p4post helps you plan, publish and measure posts on your social accounts. This policy explains what data that takes, what we do with it, and how you stay in control.
Who we are
“p4post”, “we” and “us” mean the operator of the p4post service at p4post.io. For anything about your data, email privacy@p4post.io.
What we collect
Your account
- Your name, email address and, if you add one, a profile photo and backup email.
- Your settings, such as time zone, appearance and notification choices.
- How you sign in. Passwords are stored only as a secure hash. Sign-in codes we email you expire after 10 minutes and are stored hashed.
- If you sign in with Google: your name, email address and profile picture from your Google account. We don’t receive your Google password.
What you create
- Posts, drafts, scheduled times, images and videos you upload, ideas, tags, notes, templates, saved replies and your Start Page.
- The creators you follow in Inspiration (their public handles) and the questions you ask the research assistant.
Billing
Your plan and a customer ID from our payment provider. Card details are handled by the payment provider and never reach us.
Start Page visits
We count views of your public Start Page and clicks on its links. We don’t set cookies for, or store personal details about, the people who visit it.
Technical data
A session cookie that keeps you signed in, and standard server logs (such as IP address and browser type) that our hosting provider keeps for security and reliability.
Data from social networks
When you connect a social account, you sign in on that network’s own page and choose what to allow. p4post only receives what that network shares under the permissions below, and only for the accounts you connect.
| Network | What we receive and why |
|---|---|
| Your professional account’s ID, username and picture; permission to publish posts you schedule; insights for your posts and account; comments on your posts, so you can read and reply to them in p4post. | |
| The list of Pages you manage and choose to connect; permission to publish to those Pages; engagement and insights for their posts; comments, so you can reply. | |
| Threads | Your profile basics; permission to publish; replies to your posts, so you can read and manage them; insights for your posts. |
| Your name and profile picture; permission to post as you and as Company Pages you administer; engagement for those posts. | |
| X | Your profile basics; permission to post and upload media; reading your posts and likes, and liking replies when you ask. |
| Bluesky | Your handle and profile; you connect with an app password you create in Bluesky, which you can revoke there at any time. |
| Your username; permission to submit the posts you schedule to the communities you choose, and to read their scores and comments. |
We use this data only to provide p4post to you: to publish what you ask, show your results and comments, and keep your connection working. We don’t:
- post anything you didn’t create or schedule, or follow, like or message people on your behalf without you asking;
- read your direct messages;
- sell social network data, use it for advertising, or share it with data brokers;
- use it to train AI models.
Access tokens (and Bluesky app passwords) are encrypted before we store them and are used only by our servers. When you disconnect a channel, we delete its stored token straight away. You can also remove p4post’s access in each network’s own settings at any time.
Google. p4post’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Today we use Google only for “Continue with Google” sign-in.
How we use it
- To run p4post: scheduling and publishing, the calendar and queue, analytics, comments, Inspiration, the AI writer and research assistant, and your Start Page.
- To keep your account secure, for example sign-in codes, 2-step login and spotting abuse.
- To email you about your account: sign-in codes, password resets, team invitations, and alerts such as a post that failed to publish. You can turn off non-essential alerts in Settings.
- To bill you for a paid plan.
- To answer you when you contact us, and to fix problems and keep the service reliable.
We don’t sell personal data, and we don’t show ads.
AI features
When you use the AI writer or the research assistant, we send the text needed for that request (your prompt, the draft or post you’re working on, and for research, web search results and the pages it reads) to the AI model that produces the answer. We send only what that request needs, we don’t use your content to train models, and nothing is posted until you choose to post it.
Who we share it with
We share data only as needed to run p4post:
- The social networks you connect, when you publish, reply or load your stats there.
- People in your workspace, who can see the workspace’s channels and content according to their role.
- Service providers who process data for us under contract: Cloudflare (hosting, database, file storage and AI processing), our email delivery provider (sign-in codes and notifications), Dodo Payments (payments), Serper (web search for the research assistant), and Google (only if you use Google sign-in).
- Legal reasons, when the law requires it or to protect people’s safety, and in a merger or sale, where this policy keeps applying to your data.
Cookies
We use one essential cookie to keep you signed in, and a short-lived one during Google sign-in to protect against forged requests. We don’t use advertising or tracking cookies.
How long we keep it
- We keep your data while your account is open.
- Disconnecting a channel deletes its access token immediately. Scheduled and draft posts for that channel are deleted too.
- Deleting your account deletes your profile and every workspace you own, including its channels, tokens, posts, media files, comments and analytics. It’s removed from our live systems right away and from backups within 30 days.
- Server logs are kept for a short time for security, then deleted.
See how to delete your data for step-by-step instructions.
Your choices and rights
You can see and edit most of your data in the app, disconnect channels at any time, and delete your account in Settings. You can also ask us to give you a copy of your data, correct it, delete it, or stop a particular use of it. Depending on where you live (for example under the GDPR in the EU and UK, or in California), you have these rights by law, and you can complain to your local data protection authority. Email privacy@p4post.io and we’ll reply within 30 days.
Security
All traffic is encrypted with HTTPS. Social network tokens are encrypted at rest, passwords are hashed, and you can turn on 2-step login. No system is perfectly secure, so if we learn of a breach that affects you, we’ll tell you.
Children
p4post isn’t meant for anyone under 16, and we don’t knowingly collect data from them. If you think a child has an account, email us and we’ll delete it.
Changes and contact
If we change this policy in a way that matters, we’ll update the date at the top and tell you by email or in the app before the change takes effect. Questions or requests: privacy@p4post.io.