Zenpost Privacy Policy

1. Introduction

Zenpost (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our content creation and social media management platform (“the Service”).

2. Information We Collect

Account Information

• Email address and password (hashed)
• First name, last name, and avatar
• Job title and business type
• Content preferences: niche, target audience, voice tone, content goals, pillar topics, and posting schedule

Content & Media

• Videos you record, edit, and upload through the Studio
• Thumbnails uploaded for scheduled posts
• Transcripts generated from your video content (via AI transcription)
• Captions you write or generate with AI assistance
• Chat messages exchanged with the AI Coach

Social Media Data

• OAuth tokens (access and refresh tokens) for connected platforms (Instagram, TikTok, YouTube, LinkedIn, Facebook, X)
• Platform user IDs and usernames
• Post performance metrics: views, likes, comments, shares, saves, reach, impressions, engagement rate, watch time, and average watch percentage
• Historical short-form video data imported from connected accounts

Usage & Technical Data

• Browser type, device information, and IP address
• Pages visited and features used within the Service
• Timestamps of account creation, updates, and activity

3. How We Use Your Information

• Provide the Service: Record, edit, and export videos; schedule and publish posts to your connected social accounts; display analytics
• AI Features: Generate captions, transcribe videos, provide content coaching, score post potential, and suggest content strategies based on your profile and transcript data
• Personalization: Tailor AI coaching, content suggestions, and feed recommendations to your niche, audience, and content goals
• Analytics: Aggregate and display your post performance metrics to help you understand and improve your content
• Communication: Send transactional emails (password resets, account verification)
• Security & Compliance: Detect fraud, enforce our Terms of Service, and comply with legal obligations

4. Data Storage & Security

Your data is stored on secure cloud infrastructure. We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Row-level security policies ensuring users can only access their own data
• Hashed passwords — we never store plaintext credentials
• OAuth tokens stored securely and used only for authorized platform interactions
• Sensitive tokens are excluded from public-facing API views

Video projects are stored temporarily and may expire automatically. You are responsible for downloading content before expiration.

5. Third-Party Services

We integrate with the following categories of third-party services:

• Social Media Platforms: Instagram (Meta), TikTok, YouTube (Google), LinkedIn, Facebook (Meta), X (Twitter) — for publishing content and retrieving analytics via their official APIs
• AI Providers: Third-party AI models for transcription, caption generation, coaching, and content analysis. Your content may be sent to these providers for processing but is not used to train their models
• Cloud Infrastructure: Hosting, database, file storage, and serverless function providers

Each third-party service operates under its own privacy policy. We encourage you to review them.

6. Data Sharing

We do not sell your personal data. We may share data only in the following circumstances:

• With your consent: When you authorize us to publish content to your social accounts
• Service providers: Trusted third parties who assist in operating the Service (hosting, AI processing), bound by confidentiality obligations
• Legal requirements: When required by law, regulation, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data via your Settings page
• Delete your account and associated data
• Disconnect social media accounts at any time
• Export your data upon request
• Object to certain processing activities

To exercise any of these rights, contact us at support@zenpost.com.

8. Cookies & Local Storage

We use browser local storage and session tokens to maintain your authentication state and preferences. We do not use third-party tracking cookies for advertising purposes.

9. Data Retention

• Account data: Retained as long as your account is active
• Video projects: Subject to automatic expiration (see Studio)
• Scheduled posts and analytics: Retained for the life of your account
• OAuth tokens: Retained until you disconnect the social account or they expire
• Deleted accounts: Personal data is deleted within 30 days, except where retention is required by law

10. Children’s Privacy

The Service is not intended for children under 13. We do not knowingly collect personal data from children under 13. If we discover that we have collected such data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the Service. Your continued use after changes constitutes acceptance.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact us at support@zenpost.com.