Privacy Policy

1. Information We Collect

We collect information you provide when you create an account, make a purchase, or communicate with us:

• Email address and basic profile information
• Payment information and transaction history
• Content you upload for analysis (images, text)
• Usage data and interaction with our AI features

2. Service Providers

We integrate with trusted third-party services:

• Authentication: Clerk (sign-in, account and session management).
• Payments: Lemon Squeezy (checkout, subscriptions and billing).
• AI analysis and writing: Google Gemini (your uploaded images and the notes you add are sent to Gemini to score images and generate posts).
• Image embeddings: Voyage AI (your uploaded images, and the ranking prompts you type, are sent to Voyage AI to create the embeddings used to rank a collection).
• Media storage: Cloudflare R2 (your uploaded images and their resized versions, in private storage).
• Database: Supabase (hosts the Postgres database holding your account, collections, image analysis, posts and credit history).
• Background jobs: Inngest (runs image analysis and post generation as background jobs).
• Hosting: Netlify (hosts the website and application).
• Product analytics and error tracking: PostHog (product analytics in your browser only when you accept analytics cookies, see Section 4; server-side error reports are sent regardless of that choice).

3. Data Retention & Security

We retain your information for as long as necessary to provide the services you have requested. We take reasonable measures to protect your information from unauthorized access, loss, or misuse.

4. Cookies & Analytics

PostReach uses two categories of cookies and similar storage:

• Strictly necessary (always on): authentication and session cookies set by Clerk, plus small preference values for things like the sidebar and theme. These are required for the site to function and don't require consent.
• Analytics (opt-in): if you accept, we use PostHog to understand how PostReach is used (pageviews, feature usage, errors). When you're signed in, we associate this with your user ID, email, and name so we can support you and improve the product. Until you accept, PostHog runs in a no-capture, memory-only mode and sets no cookies.

Separately from this choice, when something goes wrong on our servers we send an error report to PostHog so we can fix it. These reports are sent whether or not you accept analytics cookies. They describe the error and the request that caused it (such as the page address and request method), and they set no cookies in your browser.

You can change your choice at any time below. You may also use your browser's "Do Not Track" / "Global Privacy Control" signals; we treat those as a request to keep analytics off.

5. Your Rights

Depending on where you live (e.g. EU/UK under GDPR, California under CCPA/CPRA), you may have the right to access, correct, export, or delete your personal information, and to opt out of certain uses. To exercise any of these rights, contact us using the link at the end of this page.