Start for free
Legal

Privacy Policy

Effective date: July 27, 2026

Heropost Media Ltd. ("us", "we", or "our") operates https://www.heropost.io website as well as http://dashboard.heropost.io/, http://link.heropost.io/, and https://heropost.ai/ (the "Service").

This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

Definitions

Personal Data

Personal Data means data about an individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).

Usage Data

Usage Data is data collected automatically either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

Cookies

Cookies are small pieces of data stored on a User's device.

Data Controller

Data Controller means a person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed. For the purpose of this Privacy Policy, we are a Data Controller of your data.

Data Processor (or Service Providers)

Data Processor (or Service Provider) means any person (other than an employee of the Data Controller) who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.

Data Subject

Data Subject is any individual who is the subject of Personal Data.

User

The User is the individual using our Service. The User corresponds to the Data Subject, who is the subject of Personal Data.

Information Collection And Use

We collect several different types of information for various purposes to provide and improve our Service to you.

API Data

Google Workspace APIs are not used to develop, improve, or train generalized/non-personalized AI and/or ML models.

Personal Data

While using our Service, we may ask you to provide us with Personal Data including:

  • Email address
  • First name and last name
  • Social Network authentication tokens and account identifiers for accounts you connect
  • Content you create, upload, or schedule through the Service (posts, images, videos, captions)
  • Billing information (processed by our payment processor — we never store card numbers)
  • Communications you send to our support team

We may also collect certain information automatically through cookies and similar tools (see Usage Data and Tracking & Cookies below).

We use your Personal Data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send.

Social Platform Data

When you connect a social account (Facebook, Instagram, TikTok, X, LinkedIn, YouTube, Pinterest, Reddit, Telegram, Threads, Bluesky, or others), the platform provides us with data such as your account name, profile information, access tokens, and — where you use those features — your posts, media, comments, and analytics.

We use this platform data solely to provide the features you ask for: publishing and scheduling posts, showing your content calendar, and reporting analytics. We never sell platform data, never use it for advertising, and never share it with third parties except the service providers needed to operate the Service. When you disconnect a social account, we delete its access tokens and stop collecting data from that platform; you can also request full deletion at any time (see Account & Data Deletion below).

YouTube API Services

Heropost uses YouTube API Services to provide YouTube publishing and analytics features. By using these features, you agree to be bound by the YouTube Terms of Service. Data handled via YouTube API Services is also governed by the Google Privacy Policy. We access and store only the YouTube data needed to schedule and publish your videos and report their performance, and we retain it only as long as needed for those features. You can revoke Heropost's access to your YouTube data at any time via the Google security settings page.

Heropost's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Usage Data

We may also collect information that your browser sends whenever you visit our Service or when you access the Service by or through a mobile device ("Usage Data").

This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When you access the Service by or through a mobile device, this Usage Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data.

Tracking & Cookies Data

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.

Cookies are files with small amounts of data which may include a unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Examples of Cookies we use:

  • Session Cookies. We use Session Cookies to operate our Service.
  • Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
  • Security Cookies. We use Security Cookies for security purposes.

Some of our service providers also use cookies and tracking tools. See Analytics and Behavioral Remarketing below.

Cookies that are not strictly necessary to operate the Service — such as analytics and marketing cookies — are only set with your consent, which you can give or withdraw through the cookie preferences on our website or your browser settings.

Use of Data

Heropost Media Ltd. uses the collected data:

  • To provide and maintain our Service
  • To notify you about changes to our Service
  • To allow you to participate in interactive features of our Service when you choose to do so
  • To provide customer support
  • To gather analysis or valuable information so that we can improve our Service
  • To monitor the usage of our Service
  • To power AI features you choose to use (see AI Features below)
  • To detect, prevent and address technical issues
  • To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information

AI Features

Some features of the Service use artificial intelligence — for example, to help you generate or improve captions and content. When you use an AI feature, the content you provide to it may be processed by AI model providers acting as our Service Providers, solely to return the result to you.

We do not use your content, your connected social account data, or your Personal Data to train generalized AI or machine-learning models, and our AI model providers are contractually prohibited from doing so.

AI output is generated for you on request; you remain in control of whether it is saved or published. If any feature ever makes a decision about you exclusively by automated means, you have the right to be informed and to ask for human review.

Retention of Data

Heropost Media Ltd. will retain your Personal Data on our servers or those of our service providers only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

Heropost Media Ltd. will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.

In general: account data is retained for as long as your account is active; social platform access tokens are deleted when you disconnect the account; and when your account is deleted, associated Personal Data is deleted or anonymized within a reasonable period, except where retention is required by law (for example, billing records).

Account & Data Deletion

You can delete data we hold about you in the following ways:

  • Disconnect a social account from your Heropost dashboard — we delete its access tokens and stop collecting data from that platform.
  • Delete your Heropost account from your account settings, or by contacting us and requesting deletion.
  • Facebook and Instagram data — you may also request deletion of data we received from Meta platforms by removing Heropost from your connected apps in your Facebook/Instagram settings, or by contacting us with a deletion request.
  • Google/YouTube data — revoke access via the Google security settings page.

Transfer of Data

Your information, including Personal Data, may be transferred to — and maintained on — computer systems owned or controlled by us or our service providers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

If you are located outside Canada and choose to provide information to us, please note that we transfer the data, including Personal Data, to Canada and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Heropost Media Ltd. will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

Where Personal Data is transferred outside the European Economic Area, the United Kingdom, or Québec, we rely on appropriate safeguards such as Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework, and we assess that the data will receive protection equivalent to that required under the laws of your jurisdiction.

Disclosure Of Data

Business Transaction

If Heropost Media Ltd. is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

Disclosure for Law Enforcement

Under certain circumstances, Heropost Media Ltd. may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Legal Requirements

Heropost Media Ltd. may disclose your Personal Data in the good faith belief that such action is necessary:

  • To comply with a legal obligation
  • To protect and defend the rights or property of Heropost Media Ltd.
  • To prevent or investigate possible wrongdoing in connection with the Service
  • To protect the personal safety of users of the Service or the public
  • To protect against legal liability

Service Providers

We may employ third party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services or to assist us in analyzing how our Service is used.

These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Analytics

We may use third-party Service Providers to monitor and analyze the use of our Service.

  • Google Analytics — Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page.
  • Firebase — Firebase is an analytics service provided by Google Inc. You may opt-out of certain Firebase features through your mobile device settings, such as your device advertising settings or by following the instructions provided by Google in their Privacy Policy. We also encourage you to review Google's policy for safeguarding your data.
  • Mixpanel — Mixpanel is provided by Mixpanel Inc. You can prevent Mixpanel from using your information for analytics purposes by opting-out. To opt-out of the Mixpanel service, please visit this page. For more information on what type of information Mixpanel collects, please visit the Terms of Use page of Mixpanel.

Behavioral Remarketing

Heropost Media Ltd. uses remarketing services to advertise on third party websites to you after you visited our Service. We and our third-party vendors use cookies to inform, optimize and serve ads based on your past visits to our Service.

  • Google AdWords — Google AdWords remarketing service is provided by Google Inc. You can opt-out of Google Analytics for Display Advertising and customize the Google Display Network ads by visiting the Google Ads Settings page. Google also recommends installing the Google Analytics Opt-out Browser Add-on for your web browser. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page.
  • X (Twitter) — X remarketing service is provided by X Corp. You can opt-out from X's interest-based ads by following their instructions. You can learn more about the privacy practices and policies of X by visiting their Privacy Policy page.
  • Facebook — Facebook remarketing service is provided by Facebook Inc. You can learn more about interest-based advertising from Facebook by visiting this page. To opt-out from Facebook's interest-based ads, follow these instructions from Facebook. Facebook adheres to the Self-Regulatory Principles for Online Behavioral Advertising established by the Digital Advertising Alliance. You can also opt-out from Facebook and other participating companies through the Digital Advertising Alliance in the USA, Canada or the European Interactive Digital Advertising Alliance in Europe. For more information on the privacy practices of Facebook, please visit Facebook's Data Policy.
  • Pinterest — Pinterest remarketing service is provided by Pinterest Inc. You can opt-out from Pinterest's interest-based ads by enabling the "Do Not Track" functionality of your web browser or by following Pinterest instructions. You can learn more about the privacy practices and policies of Pinterest by visiting their Privacy Policy page.

Payments

We may provide paid products and/or services within the Service. In that case, we use third-party services for payment processing (e.g. payment processors).

We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

The payment processors we work with are:

  • Stripe — Their Privacy Policy can be viewed here.

Legal Basis for Processing

We rely on one or more of the following legal grounds (as appropriate) to process Personal Data:

  • To enter and perform a contract with you or to perform any steps you require from us before entering into a contract.
  • To pursue our legitimate business interests in establishing, managing or concluding our business relationship with you.
  • Where you have specifically consented to us processing your Personal Data.
  • To comply with our legal obligations and establish, exercise or defend our legal rights.

Where Personal Data is processed with consent, you may (subject to contractual and legal restrictions) refuse to provide your consent, or choose to withdraw your consent by contacting us as described below. Note that if you refuse to consent, or withdraw your consent, to certain processing of your personal information, we may not be able to provide certain of our services.

Security Of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. Authorized employees, representatives and agents will have access to your Personal Data for the purposes described in this Privacy Policy.

Your Rights

Heropost Media Ltd. aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

Whenever made possible, you can update your Personal Data directly within your account settings section. If you are unable to change your Personal Data, please contact us to make the required changes.

If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please contact us.

In certain circumstances, you have the right:

  • To access and receive a copy of the Personal Data we hold about you
  • To rectify any Personal Data held about you that is inaccurate
  • To request the deletion of Personal Data held about you
  • To restrict or object to our processing of your Personal Data
  • To withdraw consent at any time, where processing is based on consent
  • To request that your Personal Data cease to be disseminated, or be de-indexed, where dissemination contravenes the law or a court order (Québec)
  • To be informed of, and to object to, any decision made about you exclusively through automated processing

You have the right to data portability for the information you provide to Heropost Media Ltd. You can request to obtain a copy of your Personal Data in a commonly used electronic format so that you can manage and move it.

Please note that we may ask you to verify your identity before responding to such requests. We respond to verified requests within 30 days.

If you believe we have not adequately addressed your concerns, you may lodge a complaint with your local data protection authority — including the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, or your EU/UK supervisory authority.

US State Privacy Rights

If you reside in California or another US state with a comprehensive privacy law (including Virginia, Colorado, Connecticut, and Texas), you have the right to know what categories of personal information we collect, to access, correct, and delete that information, and to opt out of the sale or sharing of personal information, targeted advertising, and profiling.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We honor Global Privacy Control (GPC) signals where required. To exercise any of these rights, contact us; we will not discriminate against you for doing so.

Privacy Officer

Heropost Media Ltd. has designated a Privacy Officer responsible for the protection of Personal Data in accordance with Québec's Act respecting the protection of personal information in the private sector (Law 25) and Canada's PIPEDA. To reach our Privacy Officer with any privacy question, request, or complaint, please contact us and mark your message "Privacy".

Data Breach Notification

If a confidentiality incident involving your Personal Data presents a risk of serious injury, we will notify the Commission d'accès à l'information du Québec (and any other applicable regulator) and affected individuals without undue delay, and we maintain a register of all confidentiality incidents as required by law.

Links To Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children's Privacy

Our Service is intended for business and professional use and does not address anyone under the age of 16 ("Children").

We do not knowingly collect personally identifiable information from anyone under the age of 16. If you are a parent or guardian and you are aware that your Children have provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from Children without verification of parental consent, we take steps to remove that information from our servers.

Changes To This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the "effective date" at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us.