Privacy Policy
Effective date: 12 November 2026
This policy describes how AffiPost processes information when customers register for and use the affiliate product and social-publishing workspace. For privacy questions, access requests or deletion requests, contact affipostsiteprivacy@gmail.com.
Information processed
- Account details such as name, email address, password hash and authentication/session records.
- Workspace content such as products, affiliate URLs, caption drafts, generated content, scheduled posts and publishing history.
- Connected Meta account, Page and Instagram identifiers, authorization tokens and related expiry/status information needed for requested integrations.
- Billing records such as plan, order/payment references, amount, currency, invoice status and subscription dates. Payment card details are handled by Razorpay and are not stored by AffiPost.
- Security, diagnostic and operational logs needed to prevent abuse, troubleshoot errors and protect the service.
How information is used
Information is used to authenticate accounts, provide customer workspaces, generate requested AI content, store media, schedule/publish social posts, process and record payments, provide account recovery where configured, and maintain service security.
Service providers and storage
Application records are stored in Cloudflare D1; generated media may be stored in Cloudflare R2. AI prompts and related inputs are processed by Cloudflare Workers AI. Social publishing communicates with Meta. Payments are processed by Razorpay. Password-recovery email, when configured, is sent through Resend. These providers process information under their own terms and applicable agreements.
Retention and security
Passwords are stored as salted PBKDF2 hashes, customer sessions use signed secure HttpOnly cookies, and Meta access tokens are encrypted before storage. Data is retained while needed to provide the service, comply with legal obligations, resolve disputes and protect the service. No online service can guarantee absolute security.
Your choices and requests
Customers can manage workspace content and account settings through the application. A complete self-service account deletion workflow is still being finalized; deletion requests must be handled by the service operator until that workflow is available. Disconnecting Meta access and revoking the app in Meta settings are separate steps.
Children and policy changes
AffiPost is a business productivity service and is not designed for children. This policy may be updated as features, providers and legal requirements change.
Privacy contact
Privacy requests: affipostsiteprivacy@gmail.com. Please include the account email and describe your request. We may ask for reasonable verification before changing or deleting account information.
AffiPost — Privacy Policy