PostBreezy Privacy Policy
Effective Date: 8 February 2026
This Privacy Policy explains how MP Software for Good Ltd (Company number 16693896) trading as PostBreezy ("PostBreezy," "we," "us," or "our") collects, uses, shares, and protects information in connection with your use of the PostBreezy service (the "Service").
We are committed to protecting your personal data and your right to privacy. As a company registered in England and Wales, we comply with the General Data Protection Regulation (GDPR) and related UK data protection legislation.
1. Data Controller
MP Software for Good Ltd, registered in England and Wales, is the data controller responsible for the processing of your personal data.
Contact: [email protected]
2. Information We Collect
We collect personal data that you provide to us directly and information automatically generated through your use of the Service.
2.1 Information You Provide to Us
- Account Data: When you register, we collect your name, email address, and password (encrypted).
- Payment Data: When you subscribe, we collect billing address details. We do not store your full payment card details; these are handled directly by Stripe, our secure third-party payment processor.
- Communication Data: Information you provide when you contact us for support or feedback (e.g., content of your emails).
2.2 Connected Platform Data
- Authentication Tokens: We collect and securely store API access tokens and related credentials provided by Connected Platforms (like LinkedIn, Meta, TikTok, etc.). These tokens are necessary for the Service to post content on your behalf.
- Profile Information: We may access and store basic public profile information (e.g., profile picture, account name) from your Connected Platforms for the purpose of displaying them within the PostBreezy dashboard and verifying account linkage. We do not collect private messages or extensive personal data from these platforms.
2.3 User Content Data
Scheduled Content: We store the content (text, images, media links) and the corresponding schedule information you create within PostBreezy. This data is stored only to fulfil your scheduling instructions.
2.4 Workspace and Team Data
PostBreezy supports collaborative workspaces where multiple users can be invited to share access. When you create or join a workspace, all members of that workspace can access shared data within it, including posts, scheduled content, connected social media accounts, and analytics. Workspace administrators can invite new members and assign roles (member or admin). By joining a workspace, you acknowledge that your contributions and activity within that workspace will be visible to other workspace members.
2.5 Information We Collect Automatically (Usage and Analytics)
- Log Data: Information about your access and use of the Service, including your Internet Protocol (IP) address, browser type, operating system, and the pages/features of the Service you visit and the time and date of your use.
- Cookies and Tracking: We use cookies and similar tracking technologies to track activity on our Service. Specifically, we use Google Analytics and Microsoft Clarity to analyse user behaviour, improve the service, and identify technical issues. These analytics tools are loaded only after user interaction with the page. This data is generally aggregated and anonymised. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, and you can opt out of Microsoft Clarity by adjusting your browser's cookie settings.
2.6 AI Content Generation Data
We integrate with third-party Artificial Intelligence (AI) models, including Anthropic (Claude), OpenAI, and Google's Gemini, to provide content drafting and enhancement features. When you use these features, the input text you provide (prompts) is sent to these third-party AI providers for processing and generating the output. The resulting content is saved as User Content (Section 2.3). Your prompts may be processed by any of these providers based on availability and load balancing.
3. How We Use Your Information (Legal Bases)
We process your personal data under the following legal bases as required by GDPR:
| Purpose of Use | Legal Basis for Processing |
|---|---|
| To Provide the Service (Account setup, scheduling, publishing content) | Performance of a Contract |
| To Process Payments (Billing, invoicing, managing subscriptions) | Performance of a Contract / Legal Obligation |
| To Integrate AI Tools (Processing content prompts for generation) | Performance of a Contract |
| To Communicate with You (Service updates, security alerts, support) | Legitimate Interest / Performance of a Contract |
| For Analytics and Improvement (Monitoring usage, fixing bugs, feature planning) | Legitimate Interest |
| For Legal Compliance (Responding to lawful requests, preventing fraud) | Legal Obligation |
4. How We Share Your Information
We only share your information with third parties necessary to operate the Service:
- Connected Platforms: We share your User Content and necessary Authentication Tokens with the specific social media platforms (e.g., LinkedIn) you have connected, solely for the purpose of publishing your scheduled posts.
- AI Providers: If you use our AI content generation features, the input data (prompts) is shared with the respective third-party AI provider (Anthropic, OpenAI, or Google) solely to process your request and generate the output content.
- Service Providers: We use third-party providers for hosting, payment processing (Stripe), customer support, and analytics (Google Analytics, Microsoft Clarity). These providers are required to adhere to strict data protection standards.
- Legal Compliance: We may disclose your information where legally required to do so in order to comply with applicable law, governmental requests, judicial proceedings, or legal process.
5. Your Data Protection Rights (GDPR)
As a user located in the UK or EU, you have the following rights regarding your personal data:
- The Right to Access: You have the right to request copies of your personal data.
- The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- The Right to Erasure ("Right to be Forgotten"): You have the right to request that we erase your personal data, under certain conditions.
- The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- The Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions (e.g., direct marketing).
- The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
To exercise any of these rights, please contact us at [email protected].
6. Data Storage, Security, and Transfers
Data Location
All primary application data, including User Content and Authentication Tokens, is stored within a secure UK-based data centre.
Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. After account termination (see our Terms of Service Section 7), we retain certain information, such as non-essential backups and logs, for up to 180 days for operational purposes and to comply with legal obligations before permanent deletion.
Data Transfers
Since our primary data storage is in the UK, any limited international transfers (e.g., to our AI providers, payment processors, or analytics providers, some of which may be based in the US or other regions) will be done only if appropriate safeguards (such as UK Standard Contractual Clauses or adequacy decisions) are in place to ensure your data receives the required level of protection.
7. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Effective Date" and the updated version will be effective as soon as it is accessible. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.
8. How to Contact Us
If you have questions or comments about this policy, you may contact us via email at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.