Privacy Policy

Last updated: October 29, 2026

This Privacy Policy explains how Poest (“Poest”, “we”, “us”) collects, uses, shares and protects personal data when you use the Poest website at https://poest.site, the Poest web app, and the Poest mobile apps for iOS and Android (together, the “Service”). Poest is a tool for planning content and publishing it to your own social media accounts.

1. Who is responsible for your data

The Service is operated by Serhii Bilotil (the “operator”), who is the controller of your personal data. You can reach us at contact@moderncv.io with any question about this policy or your data.

2. Data we collect

Account data

• Your name and email address.
• Your password, stored only as a salted hash. We never see or store it in plain text.
• Preferences you set in the app, such as time zone, language and theme.

Content you create

• Projects, post texts, captions, hashtags, schedules, templates and notes.
• Images and videos you upload to attach to posts.
• Instructions and prompts you write for AI-assisted text or image generation, and the results.

Data from social networks you connect

When you choose to connect a social media account (for example Instagram, Threads, Facebook Pages, TikTok, LinkedIn or X), you sign in on that network’s own page and grant Poest specific permissions. We then receive and store:

• Access tokens and refresh tokens issued by the network. They are encrypted at rest.
• Basic profile information of the connected account: account ID, username, display name and profile picture.
• Identifiers, links and status of the posts that Poest publishes for you.
• Engagement statistics of those posts (such as views, likes, comments and shares), if you use analytics.

We only request the permissions needed to publish your content and show you its results. We do not read your private messages, and we do not access your followers’ personal data beyond aggregate counts provided by the network.

Technical data

• Server logs: IP address, browser or device type, request time and errors. Logs are kept for security and troubleshooting and have secrets masked.
• A push notification token for your device, if you allow notifications in the mobile app.
• A session cookie (web) or a securely stored session token (mobile) that keeps you signed in. We do not use advertising or third-party tracking cookies.

3. How we use your data

• To create and run your account and sign you in.
• To store, schedule and publish your content to the social accounts you connected, at the times you choose.
• To show the status and statistics of your published posts.
• To generate texts or images with AI when you ask for it.
• To send service emails, such as password reset, and notifications about failed or completed publications.
• To keep the Service secure, prevent abuse and fix errors.

The legal bases are performance of our contract with you (providing the Service), our legitimate interest in keeping the Service secure and working, and your consent where we ask for it (for example, connecting a social account or enabling notifications). You can withdraw consent at any time.

4. Data from Meta, TikTok and other platforms

Data we receive through the APIs of Meta (Instagram, Threads, Facebook), TikTok, LinkedIn, X and other networks is used only to provide the features you asked for: publishing your content and showing its results to you. We do not sell this data, do not use it for advertising, do not share it with data brokers, and do not use it to build profiles of anyone. We follow the developer policies of each platform, including the Meta Platform Terms and the TikTok Developer Terms.

5. Who we share data with

We do not sell personal data. We share it only with service providers who help us run the Service, under contracts that require them to protect it, and only to the extent needed:

• Hosting: Hetzner Online GmbH (servers in the European Union) hosts our servers, database and file storage.
• Social networks you connect: the content you choose to publish is sent to that network, and from then on it is governed by that network’s own privacy policy.
• AI providers: when you use AI generation, the prompt and related post context are sent to the AI provider selected in the app (such as Anthropic or OpenAI) to produce the result. Under their API terms, these providers do not use API data to train their models.
• Email delivery: a transactional email provider sends service emails to your address.
• Push notifications: Expo (650 Industries, Inc.) delivers notifications to the mobile app through Apple and Google push services.
• Legal requirements: we may disclose data if required by law or to protect the rights and safety of users and the Service.

Some of these providers are located outside your country, including in the United States. Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

6. How long we keep data

• Account data and your content: while your account exists.
• Tokens of a connected social account: until you disconnect that account, the network revokes access, or you delete your Poest account.
• Server logs: up to 30 days.
• Backups: up to 30 days, after which deleted data is removed from them as well.

7. Security

All connections use HTTPS. Social network tokens are encrypted at rest, passwords are hashed, and access to servers is restricted. No system is perfectly secure, but we take reasonable measures to protect your data and will notify you and the relevant authorities of a breach where the law requires it.

8. Your rights

Depending on where you live (for example under the EU GDPR or the Law of Ukraine “On Personal Data Protection”), you have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent. You can also lodge a complaint with your data protection authority. To use any of these rights, write to contact@moderncv.io. We will answer within 30 days.

9. Deleting your data

You can disconnect any social account in the app at any time, and you can ask us to delete your whole account and all related data. Step-by-step instructions are on the Data Deletion page.

10. Children

The Service is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy. We will post the new version on this page with a new date, and notify you in the app or by email about significant changes.

12. Contact

Serhii Bilotil
Email: contact@moderncv.io