Privacy Policy
Last updated: April 2026
1. Information We Collect
We collect information you provide directly: email address, name, and password when you sign up. We also store the content you paste or submit for repurposing, including URLs and text, to generate and save your outputs. Payment information is processed by our payment provider (Razorpay) and is not stored on our servers.
2. How We Use Your Data
Your content is sent to OpenAI to generate repurposed posts. We store your repurpose history, brand voice samples, and account data in Supabase (PostgreSQL). We use your email to communicate about your account, product updates, and support. We do not sell your data to third parties.
3. Cookies and Storage
We use cookies and local storage for authentication (Supabase Auth) and to remember your preferences (e.g., theme). These are essential for the service to function.
4. Data Retention
We retain your account data, repurposed content and history, brand voice samples, scheduled posts, connected social accounts (OAuth tokens), usage counters, and subscription metadata for as long as your account is active.
5. Right to erasure (account deletion)
You may delete your account and associated personal data at any time from Settings → Delete account. We offer (1) a signed email link you confirm with a phrase, and (2) immediate deletion while you are signed in, also confirmed with a phrase. After deletion completes, we send a short confirmation email to the address we held on file (where email delivery is configured).
Deletion removes application data we control in our primary database, including profiles, subscriptions, brand voices, repurpose jobs and outputs, scheduled posts, post analytics (engagement), AI Content Starter drafts, usage records, and connected account tokens. Your Supabase Auth user record is removed so you cannot sign in again with the same credentials.
Some information may remain with processors under their own retention rules (e.g. payment provider records for tax/fraud, or short-lived server logs). For billing cancellations tied to third-party payment providers, contact support@bhartpostai.com if you need help after self-service deletion.
6. Your rights & regional privacy
You have the right to access, correct, or delete your personal data, and to object to or restrict certain processing where applicable. We aim to comply with major privacy regulations, including the EU's GDPR, California's CCPA/CPRA, and Brazil's LGPD. Contact us at support@bhartpostai.com with any requests related to access, deletion, portability, or other privacy rights.
7. Facebook and Instagram API Services
BhartPostAI uses the Facebook Graph API and Instagram Graph API to allow users to publish posts and captions directly to their connected Facebook Pages and Instagram Business/Creator accounts. By connecting your Facebook account, you authorize BhartPostAI to:
- List your Facebook Pages and read their basic information
- Publish posts and photos to your Facebook Pages on your behalf
- Publish media (photos, Reels) to your linked Instagram Business or Creator account
- Read your Instagram username and profile details to display your connected account
We do not read your personal Facebook timeline, friends list, messages, or any data beyond what is listed above. We only publish content when you explicitly click “Post to platforms” — we never publish automatically.
Page access tokens obtained during the OAuth flow are stored encrypted in our database and used solely to publish content you initiate. We do not share these tokens with any third party.
Your use of Facebook and Instagram features within BhartPostAI is also subject to the Facebook Terms of Service, Instagram Terms of Use, and the Meta Platform Terms.
You can revoke BhartPostAI's access to your Facebook and Instagram accounts at any time through Facebook Settings → Apps and Websites. You can also disconnect from within BhartPostAI at Dashboard → Connections.
8. YouTube API Services
BhartPostAI uses the YouTube Data API v3 to allow users to upload video clips directly to their YouTube channel as YouTube Shorts. By connecting your YouTube account, you authorize BhartPostAI to:
- Upload videos to your YouTube channel on your behalf
- Read your basic Google profile information (name, profile picture) to display your connected account
We do not read, access, or store any other YouTube data (your videos, subscriptions, watch history, or comments). We only upload content when you explicitly click “Post to YouTube” — we never upload automatically.
Your use of YouTube features within BhartPostAI is also subject to the YouTube Terms of Service and Google Privacy Policy.
You can revoke BhartPostAI's access to your Google account at any time by visiting Google Account Permissions. You can also disconnect from within BhartPostAI at Dashboard → Connections.
9. Digital Personal Data Protection Act 2023 (DPDP Act)
BhartPostAI complies with India's Digital Personal Data Protection Act, 2023 (DPDP Act). As a Data Fiduciary, we collect and process your personal data only for lawful purposes — specifically to provide you with the content repurposing and social media management services you have signed up for.
Under the DPDP Act, you have the following rights as a Data Principal:
- Right to access information — you may request a summary of the personal data we hold about you and how it has been processed.
- Right to correction and erasure — you may correct inaccurate or incomplete data, and request erasure of personal data we are no longer required to retain. Account deletion is available from Settings → Delete account.
- Right to grievance redressal — you may raise a complaint or grievance with our Grievance Officer (see below).
- Right to nominate — you may nominate another individual to exercise your rights in case of incapacity or death, as permitted under applicable law.
Grievance Officer (India): For DPDP-related requests or complaints, contact us at support@bhartpostai.com with the subject line “DPDP Grievance”. We will acknowledge your request within 48 hours and endeavour to resolve it within 30 days.
We retain personal data only for as long as necessary to provide our services or as required by law. Upon account deletion, personal data is erased from our primary database as described in Section 5 above.
10. GST and Billing Information
BhartPostAI is operated by an Indian entity and its subscription services are subject to Goods and Services Tax (GST) where applicable under Indian tax law. GST is applied at the rate prescribed by the Indian government for software-as-a-service (SaaS) / online information and database access or retrieval services (OIDAR services).
When you purchase a subscription, we collect your billing details (name, address, and, where applicable, GST Identification Number / GSTIN) solely for the purpose of generating compliant tax invoices. This information is stored securely and shared only with our payment processor (Razorpay) and, where required, with Indian tax authorities.
Tax invoices are issued electronically to the email address associated with your account. If you require a GST invoice with your GSTIN, contact support@bhartpostai.com within 7 days of the transaction. Retroactive invoice amendments are subject to the applicable GST return filing deadlines.
11. Contact
For privacy-related questions, contact support@bhartpostai.com.