This translated text is provided for informational purposes only and in the event of any inconsistency between this version and the English version, the latter prevails.

LoadFocus LTD doing business as “PostNext“ develops and maintains à hosted web application (“Service”). This Privacy Policy explains the collection and use of information and data across our website and the Service.
PostNext respects your right to privacy. All information collected by PostNext is used to improve the experience and quality of the Service.

We are à Controller (as defined under GDPR) for the purposes of the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”). Our registered office is at 4 Grayscroft Road, SW16 5UP, London, United Kingdom. Our company registration number is 9554514. Our representative for the purpose of data protection compliance is Bogdan Popa who can be contacted at contact@postnext.io.

Types of information We collect, Why and How

We will only collect personal data from yoù that we consider to be necessary in the context and purpose in which it's given.

Through your use of our services we may also collect personal data from yoù about someone else. If yoù provide us with personal data about someone else, yoù must ensure that yoù are authorised to disclose that data to us and that, without us taking any further steps required by applicable data protection or privacy laws, we may collect, use and disclose such personal data for the purposes described in this Policy.

Yoù must, therefore, take reasonable steps to ensure that the third party concerned is aware of and consents to the various matters detailed in this Policy, including: the fact that their personal data is being collected; the purposes for which that data is being collected; the intended recipients of that data; and the third party's right to obtain access to the data (including details of how to request access). Where requested to do so, yoù must assist us with any requests by the third party to access or update the personal data yoù have collected from them and provided in connection with our Services.

How to access and control your data

Yoù can review, edit or delete your personal data by contacting us by email to contact@postnext.io. We will respond to any request to access or delete your personal data as soon as possible, but certainly within 30 days.

User Information

When you register for an Account (as defined in the Terms of Service) with us, we collect information such as e-mail address and billing information. Billing information is required to start a trial and for all paid plan Accounts. An Account that only publishes a free link in bio page is not required to enter it.
When yoù register for an Account, we collect only the e-mail address and any user profile fields which are filled out, such as the user's name. This information is used solely for identification purposes in connection with the Service and email communication between yoù and the support staff of the site yoù are using.

Cookies

At PostNext, we are committed to protecting the privacy and security of our customers and website visitors. The PostNext team members are customers themselves, both of PostNext and other Internet sites. We therefore fully appreciate and respect the importance of data privacy and security on the Internet.

We believe yoù should feel both informed and empowered when it comes to our handling and usage of your information.
A cookie is à small amount of data which often includes an anonymous unique identifier that is sent to your browser from à web site’s computers and is stored on your computer`s hard drive.

Cookies are required to use our site in order to uniquely identify your browser and user préférénces while logged in. We use non-permanent cookies for sessions that last for up to 1 hour if no activity is present on the site, after which yoù will be required to log in again.

We use the following types of cookies on our website:

Strictly necessary cookies. These cookies are essential for yoù to browse our websites and use the features.

Performance upped. These cookies collect information about how yoù use our websites. This data may be used to help optimise our website and make it easier for yoù to navigate.

Functional cookies. These cookies allow our websites to remember choices yoù make and personalise your experience. We may store your geographic location in à cookie for instance, to ensure that we show yoù the website relevant to your area.

Third Party cookies. Third party cookies are those placed by websites and/or parties other than PostNext. These cookies may be used on our website to improve our products or services or to help us provide more relevant advertising. These cookies are subject to the respective privacy policies for these external services, for example, the Facebook Data Use Policy.

Analytics cookies. We use analytics cookies, like those offered by Google Analytics, to help us understand things like how long à visitor stays on our website, what pages they find most useful, and how they arrived. To learn more about Google Analytics and your data, visit this Google webpage. Google Tag Manager se charge sur chaque page. Tant que vous n'avez pas accepté les cookies, il fonctionne en mode Consentement de Google, avec le stockage analytique et publicitaire refusé : il ne dépose aucun cookie, et Google ne peut recevoir que des signaux de mesure sans cookie, qui ne contiennent aucun identifiant de cookie.

Marketing and Advertising

In accordance with the Digital Advertising Alliance Principles, PostNext may work with third party advertisers that use cookies and similar technologies to provide more relevant advertising about our services on our website and across the internet.

To provide this `interest-based advertising`, the parties combine non-personal data about your online activities acquired over time which helps cater advertising that we deliver to you.

Examples of this may include à PostNext advertisement on à Facebook page, or à Google-owned page such as à search results page or YouTube, or on à site within Google`s advertising network. We do not share your data as part of this process.

If yoù have opted out of receiving communications from us, we will not use your email for interest-based advertising, although yoù may still be subject to certain interest based advertising depending upon your browser and device settings.

Data Storage

PostNext uses third party vendors and hosting partners to provide the necessary hardware, software, networking, storage, and related technology required to run PostNext and its websites and services. Although PostNext owns the code, databases, and all rights to the PostNext application, yoù retain all rights to your data.

Security

PostNext is hosted at Amazon Web Services (https://aws.amazon.com). For more information on their servers and security, please see Amazon Web Services’s security white paper.
Any personal data transferred to us over the internet is protected with Secure Sockets Layer / Transport Layer Security (SSL/TLS) Encryption Certificate technology. This ensures that all personal data transferred is encrypted to prevent eavesdropping and tampering.
Our services can be accessed through the use of an individual user login and password. To protect the confidentiality of data, yoù must keep your password confidential and not disclose it to any other person. Please alert us immediately if yoù believe your password has been misused. Additionally, always logout and close your browser when yoù finish your session, especially if you’re on à public computer. Yoù are ultimately responsible for administering and safeguarding any passwords or memorable words created to control access. Please note, we will never ask yoù to disclose your password in an unsolicited phone call or email.
If yoù have any questions about the security of your data, yoù can contact us at contact@postnext.io.

Private Discussion

PostNext features the ability to make content private or public. These settings fall under the responsibility of the PostNext site in which they are published within. PostNext is not liable for user content on other sites.

Disclosure

PostNext may disclose personally identifiable information under special circumstances, such as to comply with subpoenas when à users actions may violate the Terms of Service.

Our retention of your information

PostNext retains personal data for as long as necessary to provide our services or for other essential purposes such as complying with our legal obligations, resolving disputes and enforcing our agreements. Because these needs can vary for different data types in the context of different services, actual retention periods can vary significantly.

If PostNext needs to alter, restrict processing of your data, or remove your data we will inform you.

Mobile Application

PostNext offers a mobile application ("App") available on iOS and Android. In addition to the data described above, the App may collect the following information:

Device Information: We collect device identifiers, operating system version, device model, and app version to ensure compatibility, diagnose issues, and improve the App experience.

Push Notification Tokens: If you enable push notifications, we collect your device push token to deliver notifications about post publishing status, scheduled reminders, AI task completion, and team invitations. You can disable push notifications at any time through your device settings.

Biometric Data: The App offers optional biometric authentication (Face ID / Touch ID) for account security. Biometric data is processed and stored locally on your device only. PostNext never transmits, collects, or stores your biometric data on our servers.

Camera and Photo Library: With your permission, the App accesses your camera or photo library to attach images and videos to your social media posts. Media files you upload are stored on our servers as described in the Data Storage section above.

AI Services and Third-Party Processing

PostNext uses OpenAI and Google (Gemini) to power AI content generation features, including caption writing, hashtag suggestions, post ideas, image generation, and AI-powered fact-checking. When you use AI features, the text and prompts you provide are sent to these processors for processing. No other personal data (such as your email, name, or account details) is shared with them.

AI usage is tracked per account to enforce subscription plan limits on AI credits. You can view your AI credit balance and usage history within the App or on the website.

By using AI features, you consent to your input text being processed by OpenAI and Google. You can choose not to use AI features at any time. For more information about how these processors handle data, see the OpenAI Privacy Policy at https://openai.com/policies/privacy-policy and the Google Privacy Policy at https://policies.google.com/privacy.

YouTube API Services

PostNext uses YouTube API Services. If you connect a YouTube channel, you authorise PostNext through Google to publish the videos you schedule to that channel, and the Google Privacy Policy applies to that connection: https://policies.google.com/privacy

When you connect a channel we store its channel ID, its channel handle (or the channel ID if it has none) and its avatar, and your Google access and refresh tokens, both stored encrypted. When you schedule a YouTube post we also store the video you choose to upload and its title, description and settings, and, once published, the YouTube video ID. PostNext also reads your channel details and the processing status of the videos it uploads. PostNext asks Google for only two permissions: YouTube upload access, and YouTube read-only access, which covers the reading described above. It does not ask for your Google name or email address. We use this only to publish what you schedule. We never see or store your Google password.

Videos you schedule are sent to YouTube through the YouTube API at the time they are published.

You can revoke PostNext access to your YouTube data at any time, either on the Google security settings page at https://security.google.com/settings/security/permissions or by disconnecting the channel in PostNext. When you disconnect, we delete its stored tokens straight away and ask Google to revoke PostNext access (unless the same channel is still connected elsewhere in PostNext), and we delete the remaining channel record within 7 days. If you delete your PostNext account, we delete your YouTube channel connection and its tokens within 7 days.

If you remove PostNext access in your Google account, or that access expires, we delete the stored tokens, channel handle and avatar as soon as we notice, and delete the remaining channel record within 30 days. We refresh the channel handle and avatar we store at least every 30 days, and delete them if we cannot. Your posts and their history in PostNext are not part of this data and are kept, including the channel handle shown on each post.

We share your YouTube channel handle and post data with an AI assistant only when you connect that assistant to PostNext yourself (see the MCP section below). It is also processed by the hosting and infrastructure providers PostNext uses to run the service. We never sell it.

Deleting or disconnecting data in PostNext does not delete videos already published on YouTube. Those stay on your channel until you remove them on YouTube.

By connecting YouTube you also agree to be bound by the YouTube Terms of Service: https://www.youtube.com/t/terms. For privacy questions or complaints about how PostNext handles your YouTube data, contact us at contact@postnext.io.

MCP Server and AI Assistant Access

PostNext provides an MCP (Model Context Protocol) server at https://mcp.postnext.io that lets compatible AI assistants, such as Claude by Anthropic and ChatGPT by OpenAI, read and modify your PostNext content on your behalf. Connecting an AI assistant is optional and requires explicit OAuth authorisation; no AI assistant can access your account until you complete the consent flow.

When you authorise an AI assistant, it can call MCP tools to: read your draft, scheduled and published posts, post metrics, channel analytics (impressions, reach and follower counts), connected-channel handles, account summary and health, brand profile, bio pages and their visitor analytics (sources, devices and countries), blog plans, the latest post on a connected WordPress blog, your teams, and your plan and billing dates; create, update, schedule, cancel or delete drafts; add photos and videos to your asset library; start connecting a social account; test a connected blog; switch your active team; create blog plans; edit the blocks on your bio pages; and update fields on your brand profile. Most of these actions stay inside your account until you schedule a post, but some are public straight away: bio page edits are live as soon as they are made, and on plans with a connected WordPress blog, a new blog plan publishes its generated posts to that blog unless auto-publish is turned off. When you attach a photo or video to a message and ask for it in a post, the assistant gives PostNext a temporary link to that file; PostNext downloads it once and stores it in your asset library like any other upload. The AI assistant never receives the OAuth tokens for your connected social accounts (those remain encrypted in Azure Key Vault) and never receives your Stripe payment data.

You control which AI assistants are authorised. Visit https://app.postnext.io/settings/mcp-connections to view and revoke connected clients individually or all at once; revocation immediately invalidates the entire token family (access, refresh, and authorisation codes) for that client.

Conversations with the AI assistant are handled by the assistant provider and are subject to that provider's privacy policy. For Claude, see https://www.anthropic.com/legal/privacy. For ChatGPT, see https://openai.com/policies/privacy-policy. Every tool call the AI assistant makes to PostNext is recorded in our service logs with your user ID, the tool name, how long it took and whether it succeeded, but not the content sent; these logs are kept for 30 days. Security-relevant events are also kept in our audit log for one year: failed sign-ins (with the IP address and the browser or app identifier of the request), scope rejections, team lookups that fail, plan and limit refusals, and token issuance and revocation.

In-App Purchases and Payment Processing

The App offers subscription plans via in-app purchases processed by Apple (App Store) or Google (Google Play). When you subscribe through the App, payment is handled by the respective platform. PostNext uses RevenueCat as a subscription management service to synchronize your purchase status across platforms.

RevenueCat receives a pseudonymous user identifier and purchase receipt data to manage your subscription. RevenueCat does not receive your name, email, or other personal information. For more information, see the RevenueCat Privacy Policy at https://www.revenuecat.com/privacy.

Changes to this Privacy Policy

PostNext may modify or update this Policy when necessary to reflect feedback and changes in our services. Visiting our website and/or using our services after any modification to this Policy will constitute your acceptance of such modification and updates. When we update this Policy we will revise the `Last Update` date at the top of the Policy.

If there are material changes to the Policy or in how PostNext uses your personal data, we will notify yoù either by posting à notice of such changes before they take effect or by directly sending yoù à notification. We encourage yoù to regularly review this Policy to learn more about how PostNext is using and protecting your information.

Request my data

Contact PostNext to request your data and get it sent to your email address. Yoù can do so here.

Contact Us

If yoù have any questions regarding this Privacy Policy, please contact us through email at contact@postnext.io.
Copyright © 2026 PostNext. All rights reserved.