Privacy policy

Who is responsible

Postdat is operated by RIZOS INVESTMENTS LTD, Cyprus registration HE 475083, Efesou 9, Paralimni 5280, Famagusta, Cyprus. The company is responsible for the personal data described in this notice. Contact hello@postdat.co about privacy, your data, or account deletion.

This notice covers visitors, applicants, hosts and administrators using Postdat, including its campaign-management integration with Meta.

Information we use

When you apply or sign in, we collect your name, email, country, time zone, language, device type, work preferences and confirmation that you are at least 18. We record the source of an application and, when you arrive through a campaign link, the associated campaign and creative identifiers.

To arrange work and payments, we use campaign assignments, social-media account handles and links, posting confirmations and verification results, support messages, Telegram identifiers and group activity, agreements and electronic-signature evidence, earnings statements and payment references. Payout information can include your legal name, address, tax residence, applicable business or tax details and nominated PayPal account.

We also process session identifiers, sign-in and security records, IP addresses and browser information. Administrators connect business assets to manage advertising; this includes Meta Page, ad-account and dataset identifiers, access credentials, creative images and text, campaign settings, delivery status and advertising statistics.

Information comes from you, your use of Postdat, our administrators and connected service providers. We may obtain public social-media information and posting evidence from the relevant platforms or verification providers.

Why we use it

We use application, account and service information to take steps you request before an agreement and to perform our agreement: arranging assignments, supplying content, verifying work, calculating earnings, communicating with you and administering payments.

We use necessary financial and contractual records to meet applicable accounting, tax and other legal obligations. Our legitimate interests include securing the service, preventing fraud, resolving disputes, managing campaigns and understanding which recruitment campaigns bring applications and completed work. You can object to processing based on legitimate interests.

Required application and payout information is needed to provide the relevant service. Without it, we may be unable to create an account, arrange work or pay you. Optional advertising measurement is separate and does not affect your application.

Software supports matching opportunities, checking posting status and calculating earnings under your agreement. Contact hello@postdat.co to ask a person to review a disputed assignment, posting result or payment calculation.

Optional Meta advertising measurement

If you arrive through a tracked advertising link, you may choose an unchecked, optional measurement checkbox when applying. Only if you agree do we send a Lead event to Meta through its Conversions API. It includes the application time, event identifier and website URL, your email converted to a SHA-256 hash, your IP address, browser information and an advertising click identifier if available.

Meta can match hashed email information to its users: hashing does not make it anonymous. Meta uses the event to measure and optimize advertising under its own terms and privacy policy. This implementation does not install a browser Meta Pixel. We retain first-party campaign attribution for our own reporting even if you decline to send a measurement event to Meta.

You may decline without affecting your application. To withdraw consent or request deletion of associated measurement data, email hello@postdat.co. Withdrawal does not change the lawfulness of processing before withdrawal. For Meta's own processing and privacy controls, see https://www.facebook.com/privacy/policy/.

Cookies and browser storage

Postdat uses cookies to maintain sign-in and protect authentication. Browser session storage carries application-source and advertising-link information between signup steps. Campaign-attribution information is ignored after seven days or when the browser session is cleared. Clearing cookies signs you out; blocking storage may affect signup and attribution.

Who receives information

Authorized staff and service providers receive information needed for their work. These include Cloudflare for hosting, storage, security and sign-in email; Telegram for operational messages and groups; PayPal when used for payments; and social-media platforms and verification providers, including ScrapeCreators, for account and posting checks. Meta receives the business information needed to manage advertising and optional measurement events as explained above.

Campaign clients may receive relevant campaign-account details, posting evidence and performance information. Accountants, professional advisers and authorities may receive records where needed for advice, legal obligations or claims. Third-party services also process information under their own privacy terms.

Our providers operate internationally, so information may be processed outside your country, including outside the European Economic Area. Contact hello@postdat.co for information about processing locations and the transfer safeguards applicable to your data.

How long information is kept

Retention depends on the record and its purpose, including whether your account or an assignment remains active, payment and support matters are unresolved, or records are needed for legal obligations or claims. Ending an assignment does not automatically erase the account, signed agreements, statements or posting evidence. You can request deletion or ask about the retention period applicable to your records at hello@postdat.co.

Sign-in codes expire after ten minutes. Measurement payloads are cleared from Postdat's delivery queue after Meta accepts them; failed deliveries and campaign-attribution records remain available for troubleshooting and reporting. Meta applies its own retention rules to data it receives.

Your rights and deletion requests

Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data, object to certain processing, or withdraw consent. Email hello@postdat.co from the address associated with your account, with the subject Privacy request or Delete my Postdat account. State what you want us to do; we may need to verify your identity before acting.

Deletion requests cover information associated with your Postdat account, including data obtained through connected Meta services where applicable. Some records may need to be retained to meet legal obligations or resolve claims; we will explain any applicable restriction. You can also complain to your local data-protection authority or the Cyprus Commissioner for Personal Data Protection.

Age and updates

Postdat is for people aged 18 or older. If you believe a child has provided personal information, contact hello@postdat.co. We may update this notice as the service changes; the date above identifies this version.