Privacy policy

Last updated 26 September 2026

Who we are

This policy explains how Eniva LLC (“Eniva”, “we”, “us”) collects, uses, shares and protects personal data when you use Postmaxx: the website, the app, its API, MCP server and command-line tool (the “Service”). Eniva is responsible for this data. Questions go to postmaxx@support.eniva.io.

The data we collect

Account data: Your name and email address, your profile picture if you sign in with Google, your workspaces and roles, and your settings.
Connected accounts: For each social account you connect: its identifier, name, handle and picture on the platform, and the access the platform gives Postmaxx, which we store encrypted.
Your content: The posts, images and videos you add, their schedules, and each post’s result on each platform.
Platform numbers: What the platforms report about your published posts and accounts, such as likes, views and followers.
Billing data: Your plan, its status and your invoices. Card details are collected and kept by Stripe; we never see or store card numbers.
Usage and device data: Technical details that come with each request, such as your IP address, browser and device, the pages and features you use, and sign-in and security events.
Support conversations: What you write to us, in Postmaxx or by email, and our answers.
Cookies: Essential cookies and browser storage that keep you signed in and remember your choices, and analytics cookies only if you allow them.

How we use it

To provide the Service: to sign you in, publish your posts where and when you ask, show their results and numbers, and answer your messages. (To perform our contract with you.)
To handle billing: to run plans, payments and invoices. (Contract; legal obligation.)
To keep the Service safe: to prevent abuse, fraud and unauthorised access, and to enforce our terms. (Our legitimate interests; legal obligation.)
To write to you: the emails the Service needs, such as sign-in codes, invitations and notices about your posts and accounts. (Contract.)
To understand how the site is used: only if you allow analytics. (Your consent.)
To comply with the law: to answer lawful requests and defend our rights. (Legal obligation; legitimate interests.)

We don’t sell your data, share it for advertising, or use your posts to train AI models.

Cookies and analytics

Postmaxx always uses a few essential cookies and your browser’s storage, to keep you signed in and remember your choices. There are no advertising cookies.

Analytics is optional and off until you allow it. If you do, we use Google Analytics to count, in aggregate, how the site’s pages are used. Its cookies hold a random identifier, and the data is not linked to your Postmaxx account. Analytics events are kept for at most 14 months. You can change your choice at any time in , which is also at the foot of every page and, once you are signed in, in Settings and your account menu.

Google explains how it uses information from sites that use its services on How Google uses information from sites or apps that use our services.

Google and YouTube

Postmaxx’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When you sign in with Google, we receive your name, email address and profile picture, and use them only to create your account and sign you in.

When you connect a YouTube channel, Postmaxx uses YouTube API Services to upload your videos and read their numbers. By connecting a YouTube channel you agree to the YouTube Terms of Service, and the Google Privacy Policy applies. You can remove Postmaxx’s access at any time on Google’s security settings page.

International transfers

We and our service providers may process your data in the United States and other countries. Where the law requires it, these transfers rely on safeguards such as the European Commission’s standard contractual clauses.

How long we keep it

Account data, for as long as your account exists.
Your content and connected accounts, until you delete them or the workspace they belong to.
Logs and security records, for at most 14 months.
Billing records, for as long as tax and accounting law requires.

Deleted data can stay in backups for a short time before it is gone for good. The data deletion page explains how to delete your data.

Security

We protect your data with safeguards such as encryption in transit and at rest for sensitive data, sign-in without passwords, and access limited to what each person needs. No system is completely secure, so we can’t guarantee absolute security. The security page explains how to report a problem.

Your rights

Depending on where you live, you can ask to see, correct, export or delete your personal data, object to or limit some uses of it, and withdraw a consent you gave, such as for analytics. You can do most of this yourself in Postmaxx, or email postmaxx@support.eniva.io from the address you use for Postmaxx. We may need to confirm it is you, and we answer within 30 days. You can also complain to the data protection authority where you live.

We don’t sell personal information or share it for cross-context behavioural advertising, as California law defines those terms, and we won’t treat you differently for using your rights.

Children

Postmaxx is not for anyone under 18. If we learn that someone under 18 has an account, we delete it.

Other services

Postmaxx links to and works with other companies’ services, including the platforms you connect. Their own privacy policies govern what they do with your data.

Changes to this policy

When this policy changes, the date at the top of this page changes. For a change that matters, we email workspace owners before it takes effect.

Contact

Eniva LLC, Delaware, USA. Email: postmaxx@support.eniva.io.