Privacy Policy

Last updated: October 24, 2026

QuickPostr is a tool for writing and publishing content to the social media accounts you own or manage. It is a product of El Embrollo SL. This policy explains what personal data we collect, what we use it for, who we share it with, and how you can control it, including the data of the social media accounts you connect to QuickPostr.

1. Data controller

The party responsible for processing your data is El Embrollo SL, with CIF B05410279, located at:

C/Miguel Manaute Humanes s/n.
Edificio Ciudad del Conocimiento, Showroom 3
41704 Dos Hermanas (Sevilla), Spain

For any question about this policy or your data, contact us at info@quickpostr.com.

2. Data we collect

• Account data: your name, email address and password (stored as a one-way hash, never in readable form). If you sign in with Google, we receive your name, email address and Google account identifier instead of a password.
• Content you create: the text, images and links you write or upload to publish, the versions QuickPostr suggests for each network, your publishing schedule, and the history of what was published, with its status and a link to the published post.
• Data from connected social media accounts: described in detail in section 3.
• Billing data: your subscription plan and payment status. Card details are entered directly with our payment provider, Stripe, and never reach our servers.
• Usage and technical data: pages visited, device and browser information, IP address, and error logs we need to keep the service working and secure.

3. Connected social media accounts

You can connect accounts from X (Twitter), LinkedIn, Instagram, Facebook Pages, Threads and Bluesky. You always authorize the connection on the social network's own screen: QuickPostr never sees or stores your social media password, except for Bluesky, where you provide an app password that you create for this purpose and can revoke at any time.

What we receive and store

• The account identifier, username, display name and profile picture, so we can show you which account is connected.
• For LinkedIn and Facebook, the list of Company Pages or Facebook Pages you administer, so you can choose where to publish.
• The access tokens (and refresh tokens, where the network provides them) that allow us to publish on your behalf and to renew that access before it expires.

What we use it for

• Publishing the content you approve, immediately or at the date and time you schedule, to the profile or Page you select.
• Checking whether a post was published successfully and storing the link to it, so you can see your publishing history.
• Keeping the connection working, and telling you when an account needs to be reconnected.

Nothing is ever published without an explicit action by you: pressing "Publish" or confirming a scheduled post.

What we do not do

• We do not read your feed, followers, connections, private messages, or the content of other people.
• We do not like, comment, follow, connect or send messages on your behalf.
• We do not use your social media data for advertising, profiling, or to train AI models, and we do not sell or rent it to anyone.

Some networks require applications like ours to request permissions to read post comments or performance metrics as part of the same authorization. QuickPostr does not currently use those permissions to read, store or display that data. If we ever add a feature that does, we will update this policy before enabling it.

The connection and publishing infrastructure we use is based on the open-source software Postiz, which we run on our own servers. It is not a separate company with access to your data.

4. Legal basis for processing

• Performance of a contract: to provide the service you sign up for, including publishing to the accounts you connect.
• Consent: when you connect a social media account, and for non-essential cookies. You can withdraw it at any time.
• Legitimate interest: to keep the service secure, prevent abuse, and understand how it is used in order to improve it.
• Legal obligation: for example, keeping invoices for the period required by tax law.

5. Who we share data with

El Embrollo SL does not sell your personal data. We only share it with these service providers, to the extent each needs to do its job, and with the social networks you choose to publish to:

• AI providers (such as OpenAI): the text you submit, to adapt it to each network or translate it. We do not send them your social media tokens or account data.
• Cloudinary: the images you upload, so they can be published.
• Stripe: payment and subscription management.
• Google: sign-in with Google, and website analytics (see section 10).
• An email delivery provider: account emails such as address verification and password recovery.
• The social networks you connect: the content you publish, governed by each network's own privacy policy.

We may also disclose data when required by law or by a competent authority, or as part of a merger or acquisition, in which case the new owner would remain bound by this policy.

Some of these providers are located outside the European Economic Area, mainly in the United States. In those cases the transfer is carried out under the safeguards required by the GDPR, such as adequacy decisions or the European Commission's Standard Contractual Clauses.

Google user data

QuickPostr's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use your Google name and email address to create and sign in to your QuickPostr account.

6. How long we keep data

• Social media tokens: until you disconnect the account, revoke QuickPostr's access on the social network, or delete your QuickPostr account.
• Account data, content and publishing history: while your account is active. When you delete it, they are deleted within 30 days, and removed from backups as they rotate, within a further 90 days.
• Billing records: for the period required by Spanish tax law.

Deleting your data from QuickPostr does not delete posts that are already published on social networks. You can delete those directly on each network.

7. Disconnecting accounts and deleting your data

You are always in control of the access QuickPostr has to your accounts:

• Disconnect an account in QuickPostr: go to your group settings, open "Connected accounts", and press "Disconnect" on the account. Its tokens are deleted and QuickPostr can no longer publish to it.
• Revoke access from the social network itself, at any time and without going through QuickPostr:
  • X: Settings → Security and account access → Apps and sessions → Connected apps.
  • LinkedIn: Settings → Data privacy → Permitted services.
  • Facebook: Settings → Business integrations.
  • Instagram: Settings → Apps and websites.
  • Threads: Settings → Account → Website permissions.
  • Bluesky: Settings → Privacy and security → App passwords.
• Delete your QuickPostr account and all its data: email info@quickpostr.com from the address you registered with, asking for your account to be deleted. We will confirm the deletion within 30 days.

8. Your rights

Under the General Data Protection Regulation (GDPR) and Spanish data protection law, you have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. To exercise any of them, email info@quickpostr.com.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or the supervisory authority of your country of residence.

9. Security

Access to our servers and databases is restricted to the systems and people that need it to operate the service, and connections to QuickPostr are encrypted with HTTPS. Passwords are stored as one-way hashes. No method of storage or transmission over the Internet is completely secure, so we cannot guarantee absolute security, but if a breach affecting your data occurs, we will notify you and the competent authority as required by law.

10. Cookies and analytics

We use Google Analytics, through Google Tag Manager, to understand how visitors use our website. It uses cookies and may process your IP address on servers outside the EU. You can find more detail, and how to manage cookies, in our Cookie Policy.

11. Children

QuickPostr is not directed to people under 14 years of age, and we do not knowingly collect their data. If you believe a child under 14 has given us personal data, contact us at info@quickpostr.com and we will delete it.

12. Changes to this policy

We may update this policy, for example when we add a feature that processes data in a new way. We will publish the new version on this page, update the date at the top, and, for material changes, notify you by email or in the application before they take effect.

13. Contact

El Embrollo SL
C/Miguel Manaute Humanes s/n.
Edificio Ciudad del Conocimiento, Showroom 3
41704 Dos Hermanas (Sevilla), Spain
Email: info@quickpostr.com