Effective Date: August 25, 2025
PostWave (“we”, “us”, “our”) provides tools to plan, schedule and analyze social media content. Contact: support@postwave-app.com. For GDPR, we act as the data controller for your account data and as a processor for content you instruct us to publish.
Consent (connecting social accounts, analytics); Contract (providing the service); Legitimate Interests (security, anti-abuse); Legal Obligation (tax/records).
We don’t sell personal data. We share it with vendors under DPAs and confidentiality:
TLS in transit, encryption at rest for sensitive fields, scoped OAuth tokens, access controls, audit logging, least-privilege keys, and regular backups. No social media passwords are stored—only OAuth tokens.
Where data moves outside the EEA/UK, we use appropriate safeguards (e.g., SCCs).
GDPR/UK/CCPA rights to access, correct, delete, port, or object/restrict processing. Email support@postwave-app.com. We may verify identity before acting. You can disconnect any social account in Settings.
You can delete your PostWave account and associated personal data from Manage Account. You may also email support@postwave-app.com with subject “Data Deletion Request”. After verification, we will delete personal data within 30 days, except data we must keep for legal/audit purposes. Disconnecting a social account in Settings immediately revokes our token and scheduled publishing for that account.
We use strictly necessary cookies (auth, security), analytics, and preferences. Where required, we present a consent banner. You can change preferences anytime via the cookie settings link in the footer or your browser controls.
PostWave is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided data, contact us to remove it.
We may update this policy and will post the new Effective Date. Material changes will be notified in-app or by email.