Privacy

Last updated 10 November 2026

PostCred turns what you write or say into draft posts for X. This page says what we keep and why.

What we store

Your account: email address, display name, timezone.
Your rants (typed or transcribed), the drafts made from them, and what you kept, rejected or edited. This is how PostCred learns your voice.
Your voice profile and the example posts you paste in.
If you connect X: your X user ID and handle, and access tokens, encrypted at rest. If you use your own X developer app, its client secret, encrypted at rest.
Posts you queue, when they go out, and their results.
If you subscribe: your email, name, country and what you paid. Dodo Payments handles your card; we never see or store card details.
On the public pages: anonymous visit counts (page, referrer, country, device type). No cookies, nothing that identifies you.
Once you're signed in: which pages of the app you open and what you do there (for example "made a draft" or "scheduled a post"), tied to your account id and email, so we can see where PostCred works and where people get stuck. Never the words of your rants, drafts or posts, and no screen recordings.
When something breaks: the error, where in the code it happened, your browser and your account id. Never what you typed.

Supabase (database and sign-in), Google (when you sign in with Google), Vercel (hosting and visit counts), Dodo Payments (payments, as merchant of record), Anthropic (Claude writes drafts from your rants), OpenAI (turning voice memos into words), X (when you sign in with X or connect it for posting), Telegram or Resend (notifications you turn on), PostHog (how the app is used, once you're signed in), Sentry (error reports).

Disconnect X at any time in Settings. To export or delete everything, email the address below and it's done within 30 days.