Privacy policy
Last updated: June 9, 2026
Who we are
PostNimble ("PostNimble", "we") provides AI-assisted content creation and social publishing for businesses and agencies. This policy describes what we collect, why, and your choices. Questions: support@postnimble.net.
What we collect
- Account data — your name, email, and a hashed password (we never store plaintext passwords).
- Brand & client data — company profiles, brand voice notes, website content you provide or ask us to fetch, and audience descriptions, used to generate content for you.
- Content — briefs you submit and the articles, social posts, and images generated from them.
- Connected social accounts — when you connect Facebook or LinkedIn, we store the access token and account/page identifier the platform issues. Tokens are stored in our database with restricted access and are used solely to publish content you have approved and scheduled. You can disconnect an account at any time in Client Settings, or revoke our access from the platform's own settings.
- Billing data — payments are processed by Stripe; we do not see or store card numbers.
- Usage data — operational records such as generation runs, scheduling activity, and error reports, used to run and improve the service. We use session cookies only; no third-party advertising trackers.
How AI processing works
To generate content, your briefs and brand context are sent to our AI providers (Anthropic, Groq, and OpenAI) under their API terms. We do not use your data to train models, and our API providers' terms prohibit them from training on this data as well.
Who we share data with
We do not sell your data. We share it only with the service providers needed to run PostNimble: Fly.io (hosting), Cloudflare (storage and delivery), Anthropic/Groq/OpenAI (content generation), Meta and LinkedIn (publishing you explicitly authorize), Stripe (payments), Twilio (SMS features, if you use them), and our email provider (transactional email). Each receives only what its function requires.
Retention & deletion
We keep your data while your account is active. You can delete content and disconnect social accounts in-product at any time. For full account deletion, see our data deletion instructions — requests are honored within 30 days, and expired backups age out within a further 30 days.
Tenancy
Your briefs, drafts, brand profiles, and connected accounts are scoped to your workspace and are not visible to other customers.
Changes
We'll update this page when our practices change and note the date above. Material changes will be announced in-product.