Privacy Policy

VantagePost is run by DeepStation LLC. This Privacy Policy explains how VantagePost collects, uses, and protects information when you use our website, application, and related services.

Information we collect

We may collect information you provide directly, such as your name, email address, account details, organization information, prompts, uploaded content, social posts, event details, and support messages.

If you sign in with your Google account, we receive your name, email address, and profile picture from it.

We may also collect basic technical information, such as browser type, device information, IP address, pages visited, log data, and usage activity. If you connect an account on another service, we receive the information described under Connected accounts below.

Our payment processor collects your payment details when you subscribe or buy credits. We don't receive or store your full card number.

Connected accounts

When you connect an account on another service, we receive the information that service shares under the permissions you approve, including a token, key, or password that lets VantagePost act for you. We use this information only to provide the features you use with that account. If a social network refuses a post, we keep the reason it gives, which can name your account or Page.

• Facebook and Instagram (Meta). You connect an Instagram professional account through Facebook Login. We receive access tokens for your Facebook account; the ID, name, and an access token for each Facebook Page you give us access to; and the ID, username, and number of posts of the Instagram account linked to one of those Pages. We keep that Page's access token, the Instagram account's ID and username, and the ID and link of each post we publish. We use them to set up and show the connection, to publish the posts you create or schedule to that Instagram account, and to get the link to each post we publish.
• Facebook Pages. You connect a Facebook Page through Facebook Login to post to it. We receive access tokens for your Facebook account, which permissions you granted, and the ID, name, access token, and tasks of each Page you share with us. We use your Facebook account's tokens only while you connect, and don't keep them. If you share more than one Page, your account's token and the Pages' IDs and names are held in a sealed cookie in your browser for up to ten minutes while you choose one. We keep the chosen Page's access token, ID, and name, and when it was connected; for a workspace-wide connection, we also keep who connected it. For each post we publish to the Page, we keep its ID and link and, if you delete it from Facebook through VantagePost, when it was deleted. We use them to set up and show the connection and to publish, edit, and delete the posts you create or schedule for that Page.
• LinkedIn. If you connect your LinkedIn profile, we receive tokens and your LinkedIn member ID, name, email address, and profile picture. If you connect a LinkedIn Page, we receive the list of Pages you have a role on, and we keep the tokens LinkedIn issues, the ID of the Page you choose, and a link to each post we publish to it. We use them to set up and show the connection and to publish the posts you create or schedule to your profile or Page. We look up the Page's name and web address from LinkedIn when we show them, and use a looked-up copy for no more than 24 hours. Through a Page connection, we don't read, store, or display LinkedIn members' profiles, comments, or reactions.
• Google Search Console. We receive read-only access to the sites in your Search Console account and their search performance data, such as search queries, pages, clicks, and impressions, which we store to show you reports. Where available, we also receive the email address of the account you connect, to show which account is connected.
• WordPress, Prismic, and Luma. We receive what you enter: for WordPress, the site address, user name, and application password; for Prismic, the repository and access token; for Luma, the API key. We use them to send articles to WordPress or Prismic as drafts, and to read your Luma events and update them when you ask.

We store these tokens, keys, and passwords in our database and use them only to act for you on that service. When you disconnect an account in Settings → Integrations, VantagePost deletes the tokens, keys, or passwords it stored for that account. Disconnecting does not delete the posts already published to that service, or the records VantagePost keeps of what it published, such as links to published posts and the Google Search Console data it has already imported.

Our Data Deletion page explains how to disconnect an account, how to remove VantagePost's access on the service itself, and how to ask us to delete your data.

How we use information

We use information to:

• Provide, operate, and improve VantagePost.
• Create, edit, schedule, publish, and manage content.
• Authenticate users and secure accounts.
• Process subscriptions, billing, and usage limits.
• Support integrations you choose to connect.
• Respond to support requests and product inquiries.
• Prevent abuse, troubleshoot issues, and comply with law.

Service providers

We use service providers to run VantagePost. They process information on our behalf, only as needed to provide their service:

• Hosting and storage providers, which run our servers and database and store the files you upload.
• AI model providers, which receive the prompts, documents, and other content needed to write, edit, and research content for you.
• An image generation service, which receives the descriptions of the images you ask for.
• Speech-to-text services, which transcribe the audio of the videos you add.
• A document text extraction service, which reads the text of the documents you upload.
• A keyword data provider, which receives the keywords you research.
• A stock photo library, which receives the search terms for the photos you look for.
• Our payment processor, which handles subscriptions and payments.
• An email delivery service, which sends sign-in codes, invitations, and other messages from VantagePost.
• An error monitoring service, which receives technical reports when something goes wrong.
• A bot-protection service, which checks sign-in attempts for automated abuse.

The services you connect receive the content you publish to them, as described under Connected accounts.

Sharing information

We do not sell personal information. We may share information with service providers, connected integrations, members of your organization, or when required for legal, security, or business reasons.

Cookies and analytics

We use cookies and similar technologies to keep you signed in and remember your preferences. We may also use an analytics service that sets cookies to help us understand how the site is used. You can manage cookies through your browser settings, though some features may not work without them.

Data retention and security

We keep information for as long as needed to provide the service, comply with legal obligations, resolve disputes, and maintain security. When you disconnect an account, we delete the tokens, keys, and passwords we stored for it. When we delete your account at your request, we delete your personal information and the tokens, keys, and passwords stored for every account you connected, except information we need to keep for the reasons above. We use reasonable safeguards designed to protect information, but no system is completely secure.

Your choices

You can update your account information and disconnect connected accounts in Settings. To ask for access to, correction of, or deletion of your personal information, email support@vantagepost.ai from the address you sign in with. We may need to verify your identity before completing certain requests.

Changes

We may update this Privacy Policy from time to time. If we make changes, we will update the date above.

Contact

If you have questions about this Privacy Policy, contact us at support@vantagepost.ai.