PRIVACY POLICY

Last updated: September 3, 2026

Posteady, a service provided by J&Han, LLC, provides this Privacy Policy to inform you of our policies and procedures regarding the collection, use, protection, and disclosure of Personal Information received from your use of this website, located at https://posteady.com ("Site"), as well as all related websites including our subdomains, applications, browser extensions, and other services provided by us (collectively, together with the Site, our "Service"), and in connection with our customer, vendor, and partner relationships. This Privacy Policy also tells you about your rights and choices with respect to your Personal Information, and how you can reach us to update your contact information or get answers to questions you may have about our privacy practices.

In addition to the activities described in this Privacy Policy, we may process Personal Information on behalf of our commercial customers when they use the Service. We process such Personal Information as a data processor of our commercial customers, which are the entities responsible for the data processing. To understand how a commercial customer processes your Personal Information, please refer to that customer's privacy policy.

If you are a California resident, our Privacy Notice for California Residents includes additional information about your rights and how we collect, use, and share information.

Registration with, use of, and access to the Service is subject to this Privacy Policy and our Terms of Use located at https://posteady.com/terms-of-service. All terms not defined in this Privacy Policy will have the meanings set forth in the Posteady Terms of Use.

Here are the sections below:

  1. Personal Information We May Collect
  2. Personal Information Provided by You
  3. Personal Information Collected from Connected Social Media Accounts
  4. Personal Information Automatically Obtained from Your Interactions with the Service
  5. How We May Use Your Personal Information
  6. How We Share Your Personal Information
  7. How We Protect Your Personal Information
  8. Your Rights and Choices
  9. Data Transfers
  10. Children's Privacy
  11. Updates to this Privacy Policy
  12. Your California Privacy Rights
  13. How to Contact Us
  14. ChatGPT and other MCP connections / ChatGPT 및 다른 MCP 클라이언트 연결

1. Personal Information We May Collect

For the purpose of this Privacy Policy, "Personal Information" means any information relating to an identified or identifiable individual. We obtain Personal Information relating to you from various sources described below.

Where applicable, we indicate whether and why you must provide us with your Personal Information, as well as the consequences of failing to do so. If you do not provide Personal Information when requested, you may not be able to benefit from our Service if that information is necessary to provide you with the service or if we are legally required to collect it.

2. Personal Information Provided by You

Registration

If you desire to have access to certain restricted sections of the Site or request to receive marketing materials, you may be required to become a registered user, and to submit the following types of Personal Information to Posteady: your name, email address, phone number, full user name, password, city, and time zone.

Customer Support

We may collect information through your communications with our customer support team or other communications that you may send us and their contents.

Making a Purchase

When you make payments through the Service, you will need to provide Personal Information such as your credit card number and billing address.

Social Media

In order to allow you to post to your social media platforms, we may ask you to provide your username, account ids, social handle, timezones, and email address.

Other

We may also collect your contact details when you provide them in the context of our customer, vendor, and partner relationships.

3. Personal Information Collected from Connected Social Media Accounts

If you connect your third party social media account to your Posteady account, we may collect certain information stored in your social media account such as:

X (Twitter)

Posteady may allow you to connect an X (Twitter) profile to your Posteady account, in which case we will access certain information from X regarding your account. In particular, we may collect profile image, display name, username / profile ID, access tokens, and sent posts. This includes the content of your post and engagement data (such as click rates, likes, retweets, re-shares, impressions, as well as general engagement counts), to the extent permitted by applicable law. This data will only be used by Posteady to provide you with the Service you expect and will not otherwise be shared with third parties except as described in this Privacy Policy.

Instagram

Posteady may allow you to connect an Instagram profile to your Posteady account, in which case we will access certain information from Instagram regarding your account. In particular, we may collect profile image, display name, username / profile ID, access tokens, and sent posts. This includes the content of your post and engagement data (such as click rates, likes, re-shares, impressions, as well as general engagement counts), to the extent permitted by applicable law. This data will only be used by Posteady to provide you with the Service you expect and will not otherwise be shared with third parties except as described in this Privacy Policy.

LinkedIn

Posteady may allow you to connect a LinkedIn profile to your Posteady account, in which case we will access certain information from LinkedIn regarding your account. In particular, we may collect profile image, display name, username / profile ID, access tokens, and sent posts. This includes the content of your post and engagement data (such as click rates, likes, re-shares, impressions, as well as general engagement counts), to the extent permitted by applicable law. This data will only be used by Posteady to provide you with the Service you expect and will not otherwise be shared with third parties except as described in this Privacy Policy.

Threads

Posteady may allow you to connect a Threads profile to your Posteady account, in which case we will access certain information from Meta regarding your account. In particular, we may collect profile image, display name, username / profile ID, access tokens, and sent posts. This includes the content of your post and engagement data (such as click rates, likes, re-shares, impressions, as well as general engagement counts), to the extent permitted by applicable law. This data will only be used by Posteady to provide you with the Service you expect and will not otherwise be shared with third parties except as described in this Privacy Policy.

TikTok

Posteady may allow you to connect a TikTok profile to your Posteady account, in which case we will access certain information from TikTok regarding your account. In particular, we may collect your profile image, display name, username / profile ID, access tokens, videos or photos you submit through Posteady for posting to TikTok, and published videos we retrieve from TikTok. This includes the media and captions you submit, as well as engagement data for public videos (such as view counts, likes, comments, and shares), to the extent permitted by applicable law. This data will only be used by Posteady to provide you with the Service you expect, including transmitting content you select to TikTok at your direction, and will not otherwise be shared with third parties except as described in this Privacy Policy.

YouTube

Posteady may allow you to connect a YouTube channel to your Posteady account, in which case we will access certain information from YouTube regarding your account. In particular, we may collect profile image, display name, channel name / channel ID, access tokens, and uploaded videos. This includes the content and metadata of your videos (such as titles, descriptions, and thumbnails) and engagement data (such as view counts, likes, comments, as well as general engagement counts), to the extent permitted by applicable law. This data will only be used by Posteady to provide you with the Service you expect and will not otherwise be shared with third parties except as described in this Privacy Policy.

Posteady uses YouTube API Services to provide these features. By using Posteady's Service to connect with YouTube, you agree to be bound by the YouTube Terms of Service. Information collected through YouTube API Services is also handled in accordance with the Google Privacy Policy.

Posteady's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In addition to Posteady's normal procedure for deleting stored data, you can revoke Posteady's access to your YouTube data at any time via the Google security settings page, located at https://security.google.com/settings/security/permissions.

4. Personal Information Automatically Obtained from Your Interactions with the Service

Log Data

When you use our Service, our servers automatically record information that your browser sends whenever you visit a website ("Log Data"). This Log Data may include information such as your IP address, browser type or the domain from which you are visiting, the web-pages you visit, the search terms you use, and any advertisements on which you click.

Cookies and Similar Technologies

Like many websites, we also use "cookie" technology to collect additional website usage data and to improve the Site and our Service. A cookie is a small data file that we transfer to your computer's hard disk. A session cookie enables certain features of the Site and our service and is deleted from your computer when you disconnect from or leave the Site. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to the Site. Persistent cookies can be removed by following your web browser help file directions. Most Internet browsers automatically accept cookies. Posteady may use both session cookies and persistent cookies to better understand how you interact with the Site and our Service, to monitor aggregate usage by our users and web traffic routing on the Site, and to improve the Site and our Service.

We may also automatically record certain information from your device by using various types of technology, including "clear gifs" or "web beacons." This automatically collected information may include your IP address or other device address or ID, web browser and/or device type, the web pages or sites that you visit just before or just after you use the Service, the pages or other content you view or otherwise interact with on the Service, and the dates and times that you visit, access, or use the Service. We also may use these technologies to collect information regarding your interaction with email messages, such as whether you opened, clicked on, or forwarded a message, to the extent permitted under applicable law.

You can instruct your browser, by editing its options, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. Please note that if you delete, or choose not to accept, cookies from the Service, you may not be able to utilize the features of the Service to their fullest potential.

Third Party Web Beacons and Third Party Buttons

We may display third-party content on the Service, including third-party advertising. Third-party content may use cookies, web beacons, or other mechanisms for obtaining data in connection with your viewing of the third party content on the Service. Additionally, we may implement third party buttons, such as Facebook "share" buttons, that may function as web beacons even when you do not interact with the button. Information collected through third-party web beacons and buttons is collected directly by these third parties, not by Posteady. Please consult such third party's data collection, use, and disclosure policies for more information.

Links to Other Websites

Our Site contains links to other websites. The fact that we link to a website is not an endorsement, authorization or representation of our affiliation with that third party. We do not exercise control over third party websites. These other websites may place their own cookies or other files on your computer, collect data or solicit Personal Information from you. Other sites follow different rules regarding the use or disclosure of the Personal Information you submit to them. We are not responsible for the content, privacy and security practices, and policies of third-party sites or services to which links or access are provided through the Service. We encourage you to read the privacy policies or statements of the other websites you visit.

5. How We May Use Your Personal Information

We may use the Personal Information we obtain about you to:

  • create and manage your account, provide our Service, process payments, and respond to your inquiries;
  • manage account authentication such as two-factor authentication;
  • communicate with you to verify your account and for informational and operational purposes, such as account management, customer service, or system maintenance, including by periodically emailing you service-related announcements;
  • tailor our Service (e.g., we may use cookies and similar technologies to remember your preferences);
  • publish your content, comments or messages on social media platforms;
  • provide AI-powered features, such as generating content drafts, building content personas, and analyzing your content and engagement, when you choose to use them;
  • provide tailored advertising, for Posteady services, via Google AdWords;
  • aggregate your Personal Information for analytical purposes;
  • provide customer support;
  • operate, evaluate and improve our business (including by developing new products and services; managing our communications; determining the effectiveness of our advertising; analyzing how the Service is being accessed and used; tracking performance of the Service; debugging the Service; facilitating the use of our Service);
  • send you marketing communications about products, services, offers, programs and promotions of Posteady, and affiliated companies;
  • ensure the security of our Service;
  • manage our customer, service provider and partner relationships;
  • enforce our agreements related to our Service and our other legal rights; and
  • comply with applicable legal requirements, industry standards and our policies.

6. How We Share Your Personal Information

We may disclose the Personal Information we collect about you as described below or otherwise disclosed to you at the time the data is collected, including with:

We engage certain trusted third parties to perform functions and provide services to us, including hosting and maintenance, error monitoring, debugging, performance monitoring, billing, customer relationship, database storage and management, and direct marketing campaigns. We may share your personal information with these third parties, but only to the extent necessary to perform these functions and provide such services. We also require these third parties to maintain the privacy and security of the personal information they process on our behalf.

AI Service Providers

When you choose to use AI-powered features of the Service (such as generating content drafts, building content personas, or analyzing your content and engagement), the content you provide and, where applicable, information from your connected social media accounts may be processed by third-party AI service providers on our behalf in order to generate the requested output. We share with these providers only the information necessary to provide the requested feature, and we require them to maintain the privacy and security of the information they process on our behalf. Posteady does not use your content to train its own AI models.

Compliance with Laws and Law Enforcement

Posteady cooperates with government and law enforcement officials or private parties to enforce and comply with the law. To the extent permitted under applicable law, we may disclose any information about you to government or law enforcement officials or private parties as we believe is necessary or appropriate to investigate, respond to, and defend against claims, for legal process (including subpoenas), to protect the property and rights of Posteady or a third party, to protect Posteady against liability, for the safety of the public or any person, to prevent or stop any illegal, unethical, fraudulent, abusive, or legally actionable activity, to protect the security or integrity of the service and any equipment used to make the service available, or to comply with the law.

Business Transfers

Posteady may sell, transfer or otherwise share some or all of its assets, including personal information, in connection with a merger, acquisition, reorganization, sale of assets, or similar transaction, or in the event of insolvency or bankruptcy. You will have the opportunity to opt out of any such transfer if the new entity's planned processing of your information differs materially from that set forth in this privacy policy.

Other Third Parties

We may share personal information with our headquarters and affiliates, and business partners to whom it is reasonably necessary or desirable for us to disclose your data for the purposes described in this privacy policy. We may also make certain non-personal information available to third parties for various purposes, including for business or marketing purposes or to assist third parties in understanding our users' interest, habits, and usage patterns for certain programs, content, services, advertisements, promotions, and functionality available through the service.

7. How We Protect Your Personal Information

Posteady cares deeply about safeguarding the confidentiality of your personal information. We employ administrative and electronic measures designed to appropriately protect your personal information against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of the personal information in our possession. Please be aware that no security measures are perfect or impenetrable. We cannot guarantee that information about you will not be accessed, viewed, disclosed, altered, or destroyed by breach of any of our administrative, physical, and electronic safeguards, subject to requirements under applicable law to ensure or warrant information security.

We will make any legally-required disclosures of any breach of the security, confidentiality, or integrity of your unencrypted electronically stored personal information to you via email or conspicuous posting on our site in the most expedient time possible and without unreasonable delay, consistent with (i) the legitimate needs of law enforcement or (ii) any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system, and any other disclosures that may be required under applicable law.

We also take measures to delete your personal information or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we are required by law to keep this information for a longer period. When determining the retention period, we take into account various criteria, such as the type of products and services requested by or provided to you, the nature and length of our relationship with you, possible re-enrollment with our products or services, the impact on the services we provide to you if we delete some information from or about you, mandatory retention periods provided by law and the statute of limitations.

8. Your Rights and Choices

If you decide at any time that you no longer wish to receive marketing communications from us, please follow the unsubscribe instructions provided in any of the communications. You may also opt out from receiving commercial email from us by sending your request to us by email at support@posteady.com.

Please be aware that, even after you opt out from receiving commercial messages from us, you will continue to receive administrative messages from us regarding the service.

In certain jurisdictions you have the right to request access and receive information about the personal information we maintain about you, to update and correct inaccuracies in your personal information, to restrict or object to the processing of your personal information, to have the information blocked, anonymized or deleted, as appropriate, or to exercise your right to data portability to transfer your personal information to another company. Those rights may be limited in some circumstances by local law requirements. In addition to the above-mentioned rights, you also have the right to lodge a complaint with a competent supervisory authority subject to applicable law.

Where required by law, we obtain your consent for the processing of certain personal information collected by cookies or similar technologies, or used to send you direct marketing communications, or when we carry out other processing activities for which consent may be required. If we rely on consent for the processing of your personal information, you have the right to withdraw it at any time and free of charge. When you do so, this will not affect the lawfulness of the processing before your consent withdrawal.

To update your preferences, ask us to remove your information from our mailing lists, delete your account or submit a request to exercise your rights under applicable law, please contact us as specified in the "How to Contact Us" section below.

9. Data Transfers

Posteady is based in the United States (US). Personal information that we collect may be transferred to, and stored at, any of our affiliates, partners or service providers which may be inside or outside the European Economic Area (EEA), the United Kingdom (UK) or Switzerland. Your personal information may be transferred to countries that do not have the same data protection laws as the country in which you initially provided the information.

Posteady complies with the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework, and the UK Extension to the Data Privacy Framework (the "DPFs") to transfer personal information outside the EEA, the UK and Switzerland to the U.S. as further described in the DPFs Policy.

Posteady may also transfer personal information from the EEA, the UK or Switzerland based on approved Standard Contractual Clauses, or otherwise in accordance with applicable data protection laws. When we transfer or disclose your personal information to other countries, we will protect that information as described in this privacy policy.

Posteady will not rely on the Swiss-U.S. Data Privacy Framework or the UK Extension to the Data Privacy Framework until each enters into force, but Posteady adheres to their required commitments in anticipation of their doing so.

10. Children's Privacy

The site is not directed to persons under 16. If a parent or guardian becomes aware that his or her child has provided us with personal information without their consent, he or she should contact us at support@posteady.com. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will delete such information from our files.

11. Updates to this Privacy Policy

This privacy policy may be updated from time to time for any reason; each version will apply to information collected while it was in place. We will notify you of any modifications to our privacy policy by posting the new privacy policy on our site and indicating the date of the latest revision. You are advised to consult this privacy policy regularly for any changes.

In the event that the modifications materially alter your rights or obligations hereunder, we will make reasonable efforts to notify you of the change. For example, we may send a message to your email address or generate a pop-up or similar notification when you access the service for the first time after such material changes are made. Your continued use of the service after the revised privacy policy has become effective indicates that you have read, understood and agreed to the current version of this privacy policy.

12. Your California Privacy Rights

California law affords California residents certain additional rights regarding our collection and use of your personal information. To learn more about your California privacy rights, please visit our Privacy Notice for California Residents.

13. How to Contact Us

J&Han, LLC is the entity responsible for the processing of your personal information. If you have any questions or comments regarding this privacy policy, or if you would like to exercise your rights to your personal information, you may contact us by emailing us at support@posteady.com.

This Privacy Policy is effective as of September 3, 2026.

If you have any thoughts or questions about this privacy policy please let us know at support@posteady.com.

14. ChatGPT and other MCP connections

Access you authorize

When you connect ChatGPT or another MCP client, Posteady authorizes that client to use Posteady tools under the posteady:full scope. This includes reading eligible workspace and social account data and requesting supported publishing, scheduling, cancellation, reposting, and media operations. Access is checked against your workspace membership, plan eligibility, and permissions. Some list operations can return data across multiple eligible workspaces when you do not select one workspace.

Information exchanged and its purpose

Posteady receives the tool inputs sent by the client, such as account and workspace identifiers, post text, media references, and scheduling details, to perform your request. Tool results returned to the client can include workspace names, account names, post previews, engagement metrics, scheduled content, media filenames and URLs, and publishing results. The MCP interface receives tool requests; it does not request your entire ChatGPT conversation history. Content you submit for publishing is sent to the selected social platform, immediately or at the scheduled time.

Credentials and uploaded files

Social platform access tokens, refresh tokens, and OAuth secrets are used on Posteady servers and are not returned in MCP tool results. The client receives separate Posteady OAuth credentials to authenticate its connection. Media upload tools return a temporary signed upload URL. Confirmed media has a public URL accessible to anyone who has that URL, even before it is included in a social post.

Records, disconnection, and deletion

Posteady stores connection and authorization records, organization usage counts, and tool audit records for authentication, usage limits, and operational accountability. Audit records include user and workspace identifiers, the token record identifier, tool name, summarized arguments, outcome, and time; the audit summary excludes token values and post text. Token expiry is an authentication limit, not a data deletion deadline.

Disconnecting an MCP connection in Posteady settings revokes that connection’s Posteady tokens. It does not disconnect your social accounts or delete posts, media, audit records, or existing schedules. Cancel schedules separately if you do not want them to run. Disconnection does not delete information already returned to ChatGPT or content already published on social platforms. Manage that information with the respective service. For Posteady data access or deletion requests, contact us below.

ChatGPT is provided by OpenAI. Information returned to ChatGPT is also handled under the policies and settings applicable to your ChatGPT account. Other MCP clients have their own policies. Review the client’s data controls before connecting.

For connection support and Posteady privacy or deletion requests: support@posteady.com.

14. ChatGPT 및 다른 MCP 클라이언트 연결

승인하는 접근 범위

ChatGPT 또는 다른 MCP 클라이언트를 연결하면 해당 클라이언트가 posteady:full 권한으로 Posteady 도구를 사용할 수 있습니다. 여기에는 이용 가능한 워크스페이스와 소셜 계정 데이터 조회 및 지원되는 발행, 예약, 취소, 리포스트, 미디어 작업 요청이 포함됩니다. 워크스페이스 소속, 플랜 이용 자격, 작업 권한을 확인하며, 일부 목록 조회는 워크스페이스를 지정하지 않으면 이용 가능한 여러 워크스페이스의 데이터를 반환할 수 있습니다.

주고받는 정보와 이용 목적

Posteady는 요청을 수행하기 위해 클라이언트가 전송한 계정·워크스페이스 식별자, 게시물 본문, 미디어 참조, 예약 정보 등의 도구 입력을 받습니다. 클라이언트에 반환하는 결과에는 워크스페이스 이름, 계정 이름, 게시물 미리보기, 성과 지표, 예약 콘텐츠, 미디어 파일명과 URL, 발행 결과 등이 포함될 수 있습니다. MCP 인터페이스는 도구 요청을 받으며 전체 ChatGPT 대화 기록을 요청하지 않습니다. 발행을 요청한 콘텐츠는 즉시 또는 예약 시각에 선택한 소셜 플랫폼으로 전송됩니다.

인증 정보와 업로드 파일

소셜 플랫폼의 access token, refresh token, OAuth secret은 Posteady 서버에서 사용하며 MCP 도구 결과로 반환하지 않습니다. 클라이언트는 연결 인증에 필요한 별도의 Posteady OAuth 인증 정보를 받습니다. 미디어 업로드 도구는 임시 서명 업로드 URL을 반환합니다. 업로드를 확정한 미디어에는 공개 URL이 생성되며, 소셜 게시물에 포함하기 전에도 URL을 아는 사람은 파일에 접근할 수 있습니다.

기록, 연결 해제 및 삭제

Posteady는 인증, 사용량 제한, 작업 내역 확인을 위해 연결·인증 기록, 조직별 사용량, 도구 호출 감사 기록을 저장합니다. 감사 기록에는 사용자·워크스페이스 식별자, 토큰 레코드 식별자, 도구명, 요약 인자, 결과, 시각이 포함되며 감사 요약에는 토큰 값과 게시물 본문을 넣지 않습니다. 토큰 만료 시각은 인증 유효기간이며 데이터 삭제 기한이 아닙니다.

Posteady 설정에서 MCP 연결을 해제하면 해당 연결의 Posteady 토큰이 폐기됩니다. 소셜 계정 연결을 해제하거나 게시물, 미디어, 감사 기록, 기존 예약을 삭제하지는 않습니다. 실행을 원하지 않는 예약은 별도로 취소해야 합니다. 연결 해제로 ChatGPT에 이미 반환한 정보나 소셜 플랫폼에 이미 발행한 콘텐츠가 삭제되지 않습니다. 해당 정보는 각 서비스에서 관리하세요. Posteady 데이터 열람 또는 삭제 요청은 아래 연락처로 문의하세요.

ChatGPT는 OpenAI가 제공하며, ChatGPT에 반환된 정보에는 해당 ChatGPT 계정에 적용되는 정책과 설정도 적용됩니다. 다른 MCP 클라이언트에도 각자의 정책이 있습니다. 연결 전에 클라이언트의 데이터 관리 설정을 확인하세요.

연결 지원 및 Posteady 개인정보 열람·삭제 문의: support@posteady.com.