Warning: JavaScript is not enabled or not loaded. Please enable JavaScript for the best experience.
Legal

Legal

PhotoPost.AI Privacy Policy

Effective date: August 25, 2026

This Privacy Policy explains how Touch & Store LLC collects, uses, discloses, stores and otherwise processes personal data in connection with PhotoPost.AI, including our website, mobile application, account services and supported social-network integrations.

1

Who We Are and Scope

PhotoPost.AI is an AI-assisted social media communication and publishing service operated by Touch & Store LLC, 2915 Ogletown Road, #1470, Newark, DE 19713, United States (“Touch & Store”, “PhotoPost.AI”, “we”, “us” or “our”).

This Privacy Policy explains how we collect, use, disclose, store and otherwise process personal data in connection with PhotoPost.AI, including our website, mobile application, account services and supported social-network integrations.

It should be read together with our Terms of Service and, where applicable, our Data Deletion and Cookie information.

2

Our Role Under Data Protection Law

For personal data that we collect and use for our own purposes, such as account administration, service operation, security, billing administration, support and compliance, Touch & Store LLC generally acts as the data controller or equivalent responsible entity under applicable privacy law.

Business customers may also submit content containing personal data about other individuals. Where PhotoPost.AI processes such personal data solely on the documented instructions of a business customer in order to provide the Service, Touch & Store LLC may act as a processor or service provider on behalf of that customer.

In those circumstances, the business customer remains responsible for determining whether it has an appropriate legal basis and the necessary rights or permissions to provide the personal data to PhotoPost.AI.

Where required, additional controller and processor obligations may be addressed in a Data Processing Addendum.

3

Categories of Personal Data We Process

Depending on how you use PhotoPost.AI, we may process the following categories of personal data.

Account and identity information. This may include your name, email address, authentication identifiers, account settings, preferred language and information associated with your PhotoPost.AI account.

Business information. This may include your business name, business activity, sector, website, business description, brand information and other information you provide so that PhotoPost.AI can understand and personalize the Service for your business.

User Content. This may include text, photographs, images, videos, audio, logos, documents, captions, instructions and other content that you submit to, upload to or ask PhotoPost.AI to process.

User Content may contain personal data relating to individuals other than the account holder.

Connected social-network information. When you connect a supported social-network account, we may receive account identifiers, profile information, pages, profiles, boards or other publishing destinations, permissions and other information made available through the relevant provider’s authorized API.

Authentication and authorization data. This may include OAuth access tokens, refresh tokens, authorization scopes, connection status and other credentials or identifiers required to maintain an authorized integration with a connected provider.

Publication and service activity. This may include generated drafts, content selections, publication destinations, scheduling instructions, publication attempts, provider responses and information needed to operate and troubleshoot requested features.

Technical and security information. This may include IP address, device or application information, timestamps, diagnostic information, security events, error logs and other technical information reasonably necessary to operate, protect and troubleshoot the Service.

Website assistant interaction context. When you choose to send a message to the PhotoPost.AI website assistant, contextual information about that interaction is submitted together with your message. This may include the page you are viewing, the number of messages exchanged in the current conversation, and interaction context such as how far you have scrolled on the page, which section is visible and how long you have spent on it. This information is used to make the assistant’s reply more relevant to what you are looking at. It is submitted with an assistant message rather than collected continuously, it is not used for advertising, and it is not used to follow you across other websites.

Billing and transaction information. Where paid subscriptions are available, we may process subscription status, plan information, transaction references, billing status and information necessary to administer a subscription.

Where payment-card information is collected directly by a payment provider, PhotoPost.AI does not receive or store the complete payment-card details.

4

Where Personal Data Comes From

We may obtain personal data:

  • directly from you;
  • from your PhotoPost.AI account and your use of the Service;
  • from supported social networks that you choose to connect;
  • from service providers acting on our behalf;
  • from business websites, public business profiles or other publicly available business information where you provide the relevant source to PhotoPost.AI or request a feature that uses that information;
  • from other authorized sources where necessary to provide a feature you request.

We do not treat the fact that information is publicly available as removing the need to process it lawfully.

5

Purposes and Legal Bases

Where the GDPR or another law requiring a legal basis applies, we process personal data only where an appropriate legal basis is available.

Depending on the processing, this may include the following.

Providing the Service. We process account information, business context, User Content, connected-network information and related service data where necessary to provide the PhotoPost.AI features you request and perform our agreement with you.

Legal basis where applicable: performance of a contract or steps taken at your request before entering into a contract.

Personalizing PhotoPost.AI for your business. We process information about your business and your instructions to adapt recommendations and generated content to the context you provide.

Legal basis where applicable: performance of the Service you request.

Connecting social networks and carrying out user-authorized actions. We process provider identifiers, permissions, tokens, publication destinations and approved content where necessary to connect and operate the third-party integrations you choose to use.

Legal basis where applicable: performance of the Service you request.

Security, fraud prevention and service integrity. We may process technical information, security events and account activity to protect users, prevent misuse, investigate incidents and maintain the security and reliability of PhotoPost.AI.

Legal basis where applicable: our legitimate interests in protecting the Service and its users, subject to applicable balancing requirements, and legal obligations where applicable.

Support and troubleshooting. We process information necessary to respond to support requests and diagnose or resolve technical issues.

Legal basis where applicable: performance of the Service and our legitimate interests in supporting and improving its operation.

Legal and regulatory compliance. We may process and retain information when reasonably necessary to comply with applicable law, enforce legal rights, respond to lawful requests or resolve disputes.

Legal basis where applicable: compliance with legal obligations and legitimate interests in establishing, exercising or defending legal claims.

Service communications. We may send operational communications relating to your account, security, connected services, subscription or important changes to PhotoPost.AI.

Legal basis where applicable: performance of the Service and our legitimate interests in administering it.

Marketing communications. If PhotoPost.AI sends optional promotional communications, we will do so only where permitted by applicable law and will provide any legally required ability to opt out.

Legal basis where applicable: consent or legitimate interests, depending on the jurisdiction and circumstances.

6

Account and Business Information

We use account and business information to operate your account, understand the business context you provide, personalize supported features, provide requested recommendations and maintain the relationship between your account and your selected services.

You are responsible for ensuring that business information and other personal data you provide are lawfully provided and reasonably relevant to your use of PhotoPost.AI.

7

User Content and Media

PhotoPost.AI processes User Content only to the extent reasonably necessary to provide requested features, perform user-authorized actions, secure the Service and comply with applicable law.

Depending on the feature, this may involve hosting, copying, analyzing, transforming, generating from or transmitting text, photographs, images, videos, audio or other materials.

As explained in our Terms of Service, you retain ownership of your User Content.

PhotoPost.AI does not use User Content to train its own general-purpose artificial intelligence models unless you have separately and expressly agreed to such use.

This statement does not mean that no authorized third-party AI provider processes User Content. Where an AI-assisted feature requires external processing, information necessary for that feature may be transmitted to an authorized AI service provider as described below.

8

AI-Assisted Processing

PhotoPost.AI uses artificial intelligence and automated systems to provide certain analysis, recommendation and content-preparation features.

Depending on the feature requested, information sent for AI-assisted processing may include:

  • instructions and text provided by the user;
  • business context;
  • images or other media submitted for analysis or transformation;
  • information reasonably necessary to generate or evaluate requested content.

We seek to limit information sent to AI providers to what is reasonably necessary for the requested functionality.

Authorized AI service providers may process that information on our behalf or otherwise under the applicable contractual and privacy arrangements governing the relevant service.

Information about material service providers may be provided in our Subprocessors information where applicable.

9

Automated Safety Screening

PhotoPost.AI may use automated analysis, classification and safety mechanisms, including safeguards provided by artificial intelligence service providers, to detect content or requests that appear unsafe, prohibited, unlawful or inconsistent with applicable rules.

These systems may process submitted text, images or other media.

They may result in a request being refused, limited or returned with an error or warning.

Automated safety systems are not infallible and may fail to identify problematic material or may incorrectly flag permissible material.

The absence of a safety warning or refusal does not mean that PhotoPost.AI has approved, verified or certified the content.

10

Connected Social Networks

PhotoPost.AI may support connections to third-party services including, where available:

  • Facebook;
  • Instagram;
  • LinkedIn;
  • Pinterest;
  • Snapchat;
  • TikTok;
  • X.

When you connect a service, PhotoPost.AI processes only the permissions and information made available through the authorization you grant and the relevant provider API.

The categories of data available to PhotoPost.AI can differ by provider and may change if a provider changes its API or permissions.

You may disconnect a supported network or revoke provider permissions using the mechanisms made available by PhotoPost.AI or the relevant third-party platform.

11

OAuth Tokens and Permissions

PhotoPost.AI may process OAuth tokens, authorization scopes and related provider identifiers when necessary to maintain a connection that you have authorized.

These credentials are used to perform authorized actions and communicate with the relevant provider’s API.

We do not use provider credentials to access functions or data outside the permissions made available through the authorization you grant.

Revoking or disconnecting an integration may prevent PhotoPost.AI from continuing to use the corresponding provider permissions, although certain records may be retained where necessary for security, legal compliance or dispute resolution.

12

Service Providers and Processors

We may use service providers to help operate PhotoPost.AI.

Depending on the Service, categories of providers may include:

  • cloud hosting and database providers;
  • storage and content-delivery providers;
  • artificial intelligence service providers;
  • payment and billing providers;
  • security and infrastructure providers;
  • communications and support providers;
  • technical monitoring and diagnostic providers.

We provide these providers only with the information reasonably necessary for their role and require appropriate contractual and data-protection arrangements where applicable.

We do not sell personal data for independent commercial exploitation by third parties.

Where legally required, information about material subprocessors may be provided in a separate Subprocessors list.

13

Social Networks as Independent Third Parties

Connected social networks operate their own services and have their own privacy practices.

When you instruct PhotoPost.AI to transmit information or approved content to a connected platform, that platform may process the information under its own terms and privacy policy and may act as an independent controller or equivalent responsible entity.

PhotoPost.AI does not control how a third-party platform independently processes information after it receives that information.

You should review the privacy information of each platform you choose to connect.

14

Payments

Where you purchase a paid PhotoPost.AI subscription, an authorized payment provider may process payment and billing information.

PhotoPost.AI may receive information such as transaction identifiers, payment status, subscription status and limited billing information necessary to administer your subscription.

Where card information is collected directly by the payment provider, PhotoPost.AI does not receive or store the complete payment-card number or security code.

We will identify material payment providers in our relevant privacy or Subprocessors information once the applicable production provider is confirmed.

15

Communications

We may use your contact information to send messages necessary to:

  • operate your account;
  • provide security notices;
  • confirm important account or subscription events;
  • respond to support requests;
  • notify you of material Service or policy changes.

Optional promotional communications, if offered, will be subject to applicable marketing and privacy requirements.

16

Cookies and Similar Technologies

The PhotoPost.AI website may use browser storage and other technologies that are necessary to operate the site, maintain security or remember user preferences.

For example, the website stores the user’s language preference locally in the browser.

We do not describe a technology as necessary, analytical or advertising unless its actual use supports that description.

If PhotoPost.AI introduces non-essential analytics, advertising or similar tracking technologies, we will update our Cookie information and implement any consent mechanism required by applicable law before using those technologies where such consent is required.

For current details, see our Cookie Policy.

17

Data Retention

We retain personal data for no longer than reasonably necessary for the purposes for which it is processed, subject to applicable legal, security and dispute-resolution requirements.

The applicable retention period or criteria depend on the category of information.

For example:

  • account data may be retained while your account remains active and for a limited period afterward where reasonably necessary;
  • connected-provider credentials may be retained while the connection remains authorized and may cease to be usable following revocation, expiry or disconnection;
  • User Content may be retained for as long as reasonably necessary to provide the requested feature or until deletion in accordance with applicable account and deletion mechanisms;
  • publication and diagnostic records may be retained for a limited period where necessary for reliability, security, troubleshooting and dispute resolution;
  • billing and transaction records may be retained for periods required by tax, accounting or other applicable law;
  • limited information may remain temporarily in backups until backup rotation or deletion processes are completed.

We may retain information longer where required by law, where necessary to establish, exercise or defend legal claims, or where deletion is technically delayed by secure backup processes.

18

Security

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration and unlawful processing.

Measures may include access controls, authentication, logging, monitoring, provider security controls and other protections appropriate to the nature and risk of the processing.

No internet-based service or storage system can guarantee absolute security.

If you believe your PhotoPost.AI account or information has been compromised, please contact us promptly.

19

International Data Transfers

Touch & Store LLC is based in the United States, and PhotoPost.AI and its service providers may process personal data in countries other than the country where the user is located.

Where applicable privacy law restricts international transfers of personal data, we will use a legally recognized transfer mechanism or safeguard where required.

Depending on the circumstances, these mechanisms may include an applicable adequacy decision, approved contractual safeguards or another mechanism permitted by applicable law.

Information about safeguards applicable to a specific transfer may be requested at contact@photopost.ai.

20

Your Privacy Rights

Depending on where you live and the law that applies to the processing, you may have rights relating to your personal data.

These may include the right to:

  • request access to personal data concerning you;
  • request correction of inaccurate personal data;
  • request deletion where applicable;
  • request restriction of processing where applicable;
  • receive certain personal data in a portable format where applicable;
  • object to certain processing based on legitimate interests;
  • withdraw consent where processing is based on consent, without affecting processing lawfully carried out before withdrawal;
  • lodge a complaint with a competent data-protection or supervisory authority.

Rights are not absolute and may be subject to conditions or exceptions under applicable law.

Where PhotoPost.AI acts only as a processor for a business customer, a request concerning data controlled by that customer may need to be directed to or handled in cooperation with that customer.

To make a privacy request, contact contact@photopost.ai or use the account or deletion mechanisms made available by PhotoPost.AI.

We may take reasonable steps to verify the identity and authority of a person making a request before disclosing or changing personal data.

21

Automated Decision-Making

PhotoPost.AI uses automated systems to generate recommendations, prepare content and perform safety analysis.

These functions assist the user and do not replace the user’s decision about whether to approve or publish content.

PhotoPost.AI does not currently use personal data to make decisions about account users based solely on automated processing that produce legal effects or similarly significant effects on those users within the meaning of applicable data-protection law.

If that changes, we will provide any information and safeguards required by applicable law.

22

Users Under 16 and Personal Data About Other People

PhotoPost.AI is not intended for account users under the age of 16.

Eligibility requirements for account holders are further described in our Terms of Service.

The fact that PhotoPost.AI permits eligible users aged 16 or 17 does not mean that they necessarily have legal capacity to enter into a paid subscription in every jurisdiction.

User Content may include information or media relating to individuals other than the account holder, including potentially minors.

Business customers are responsible for ensuring that they have an appropriate legal basis, authorization or permission to provide and publish personal data relating to other individuals where required by applicable law. PhotoPost.AI does not intentionally request that users submit unnecessary sensitive personal data.

23

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to PhotoPost.AI, our processing activities, service providers, technology or applicable legal requirements.

The current version and effective date will be published on this page.

Where required by applicable law or appropriate because of the significance of a change, we will provide additional notice before or when the updated policy becomes effective.

24

Contact

PhotoPost.AI is operated by:

Touch & Store LLC
2915 Ogletown Road, #1470
Newark, DE 19713
United States

For privacy questions, requests or concerns: contact@photopost.ai

If applicable law requires Touch & Store LLC to maintain a representative, data protection officer or other local privacy contact, the relevant contact information will be made available as required.

For privacy questions, requests or concerns, contact contact@photopost.ai