StreamPost

Last updated: 30 July 2026

Privacy Policy

This page is maintained by Andreia Communication to explain how StreamPost handles personal data. It is app-owned content and not an independent legal certification.

1. Data controller

The data controller for data processed through StreamPost is:

2. What data we collect

We collect only the data necessary to provide StreamPost:

  • Account data: email address, name, profile picture, and authentication credentials managed by our auth provider.
  • Content: media files, captions, titles, descriptions, hashtags, and scheduled posts you create or upload.
  • Social account tokens: OAuth access tokens and account identifiers you authorize when connecting social profiles. You can revoke these at any time from the platform or inside your account settings.
  • Integration data: API keys, webhook URLs, and Zapier configurations you create to connect external tools.
  • Billing data: plan, subscription status, and payment-related information processed by our payment provider. We do not store full card numbers.
  • Usage data: logs, error reports, and analytics needed to keep the service secure and reliable.

3. How we use your data

We use your data to:

  • Authenticate you and keep your account secure.
  • Upload, schedule, and publish content to the social platforms you connect.
  • Provide analytics on posts, accounts, and publishing history.
  • Process subscriptions and payments.
  • Offer API access and webhook integrations to external services.
  • Fix bugs, prevent abuse, and improve the service.
  • Comply with legal obligations and enforce our terms.

4. Legal basis

For users in the European Economic Area, the legal bases under GDPR are:

  • Performance of a contract: providing the StreamPost service, scheduling posts, and processing payments.
  • Consent: connecting social accounts and enabling optional integrations such as webhooks and third-party automations.
  • Legitimate interests: fraud prevention, security, analytics, and service improvement.
  • Legal obligation: retaining invoices or records as required by tax and accounting law.

5. Data sharing and subprocessors

We do not sell personal data. We share data only with the trusted services needed to run StreamPost:

  • Cloud hosting and database: Lovable Cloud (powered by Supabase) stores data, handles authentication, and manages file storage.
  • Payments: Stripe processes subscriptions and payment methods.
  • Social platforms: when you publish, the relevant platform (such as TikTok, Instagram, YouTube, X, LinkedIn, Facebook, Threads, or Pinterest) receives the content and metadata you choose to send.
  • External integrations: webhook and API calls you configure may send data to Zapier or other services you authorize.

Each subprocessor has its own privacy policy and security practices. We choose providers that offer standard contractual clauses and data protection commitments where required.

6. Cookies and tracking

We use only essential cookies and local storage items needed for authentication, security, and basic preferences. We do not use tracking cookies, marketing pixels, or third-party analytics scripts.

7. International transfers

StreamPost is operated from Italy and is used globally. Some subprocessors may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as standard contractual clauses and adequacy decisions.

8. Data retention

We keep your data for as long as your account is active. After you delete your account or disconnect a social profile, we remove or anonymize data within a reasonable time, except where we must keep it longer to comply with legal obligations, resolve disputes, or enforce our agreements. Social platforms may retain published content according to their own policies.

9. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise your rights, contact us at andreiacommunication@gmail.com. We will respond within the time required by applicable law.

10. Security

We use industry-standard measures to protect your data, including encrypted connections, hashed passwords and API keys, role-based access controls, and secure hosting. No system is completely risk-free, so we encourage you to use strong passwords and revoke social connections you no longer need.

11. Children

StreamPost is not intended for users under the age of 16 (or the minimum age required by local law). We do not knowingly collect data from children.

12. Changes to this policy

We may update this policy as the service evolves. We will change the "Last updated" date at the top of the page and, for significant changes, notify you through the app or by email.

13. Contact

For privacy questions, data requests, or complaints, please contact:

Andreia Communication
Via Cervese 119, 47122 Forlì, Italy
Email: andreiacommunication@gmail.com

This policy describes the current practices of StreamPost as built and maintained by Andreia Communication. It is not a legal certification or guarantee by Lovable or any third-party platform.

Back to home