Privacy Policy
Last updated: 19 October 2026
In short: Postnest is a desktop app. Your posts, media and social network logins stay on your computer, encrypted. We cannot see them. Our servers only handle licences, updates and this website, and we keep that data to a minimum.
1. Who we are
Postnest ("we", "us") is a product in pre-release testing. The full details of the company that operates it will be published here before the public launch. For any privacy question write to hello@postnest.amz.ee. We are the data controller for the limited data described in section 4.
2. Data that stays on your device
The Postnest app runs on your computer. The following data is stored only on your device, in the app's data folder, and is never sent to us:
- your posts, drafts, schedules and the media files you add;
- the spaces (profiles) you create and their isolated browser sessions;
- access tokens, keys and passwords for the networks you connect. These are encrypted with your operating system's keychain (macOS Keychain, Windows DPAPI);
- your settings.
We have no copy of this data and no way to access it. If you lose your device or delete the app's data folder, we cannot recover it.
3. Connections to social networks
When you connect a network, the app talks directly from your device to that network's official API, with the permissions you grant. We use those permissions only to publish the posts you schedule, upload the media you attach to them and show you the result (for example the link to the published post). Data received from the networks is not sent to us, is not sold, and is not used for advertising or to train AI models.
You can disconnect a network in the app at any time and revoke access from the network's own settings. Each network's privacy policy applies to what you publish there.
Google and YouTube. When YouTube publishing is available, Postnest will use the YouTube API Services. By using it you agree to the YouTube Terms of Service; Google's Privacy Policy applies. You can revoke access at Google security settings. Postnest's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Services you choose. Some networks need a third-party service that you configure: for example images for Nostr are uploaded to a public media server (nostr.build by default), and Discord or Slack posts are sent to the webhook you provide. Those services' policies apply.
4. Data we process on our servers
| When | What | Why | How long |
|---|---|---|---|
| You visit this website | No cookies, no analytics, no visit logs. Server error logs may contain your IP address. | Security and troubleshooting (legitimate interest) | 14 days |
| You buy a plan | Name, email, country, plan, price paid, licence key. Card data is handled only by our reseller. | Provide the licence (contract); tax records (legal obligation) | While the licence is active, then as required by tax law |
| The app checks your licence | Licence key, a random installation ID (not a hardware ID), app version, operating system. | Validate the licence and the number of devices (contract) | While the licence is active, plus 30 days |
| The app checks for updates | App version, operating system and, technically, your IP address. | Deliver updates (contract) | Not stored beyond the 14-day error logs |
| You email us | Your email and what you write. | Answer you (legitimate interest) | 24 months after the last message |
Payments are processed by a Merchant of Record (named at checkout), which acts as the reseller and is an independent controller for payment and tax data under its own privacy policy.
5. Who we share data with
Only with the providers we need: our hosting provider (DigitalOcean), the Merchant of Record for payments, and our email provider. We do not sell personal data and we do not share it for advertising. We disclose data to authorities only when the law requires it.
Because we and our providers may process data in other countries, data may be transferred outside your country. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. Your rights
Depending on where you live (for example under the EU/UK GDPR or other applicable data protection laws) you can ask to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent. Write to hello@postnest.amz.ee: we answer within 30 days. If you are in the EU or UK you can also complain to your data protection authority.
7. How to delete your data
- On your device: disconnect the networks in the app, then delete the app and its data folder:
~/Library/Application Support/postneston macOS,%APPDATA%\postneston Windows. - On the social networks: remove Postnest from the connected apps in each network's settings.
- On our servers: email hello@postnest.amz.ee from the address you used to buy. We delete your licence data within 30 days, except what tax law requires us to keep.
8. Children
Postnest is not intended for anyone under 16, and we do not knowingly collect their data.
9. Security
Credentials are encrypted on your device with the operating system's keychain. Our website and servers use HTTPS. No system is perfectly secure: keep your computer and its user account protected.
10. Changes
We will update this page if our practices change and change the date at the top. For significant changes we will also tell licence holders by email or in the app.