Privacy Policy

Last updated: 2025-09-10

This Privacy Policy explains how BEQODIA LTD ("we", "us", "our") collects, uses, shares and protects personal data when you use PostDaba’s website, web application and API (the “Services”). We act as the data controller for personal data we process about users under the UK GDPR and the Data Protection Act 2018.

Who we are

Legal name: BEQODIA LTD
Registered in: England and Wales
Company number: 15908740
Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
Contact: see Contact page or email privacy@postdaba.com

Scope

This policy covers data collected via our website, app and API. It does not cover processing by third‑party platforms you connect (e.g., TikTok, Instagram, Facebook, YouTube, LinkedIn), which have their own privacy notices.

Personal data we collect

Account data – name, email, password (hashed), workspace details, role, time zone.
Connected accounts – OAuth tokens/credentials required to publish to third‑party platforms; scopes and metadata needed for posting.
Billing data – payment method details processed by our payment provider (we do not store full card numbers), transaction records, VAT info.
Content data – drafts, media, captions, hashtags, scheduled times, first‑comment text and similar content you upload or generate (including AI‑assisted prompts/outputs).
Usage and technical data – IP address, device information, browser, app version, log events, diagnostics, performance data, crash/error reports.
Support and communications – messages you send us, survey responses, feedback.
Cookies and similar tech – see “Cookies & tracking”.

How we collect data

Directly from you when you create an account, upload content, or contact support.
From connected platforms via their APIs with your permission.
Automatically through cookies, SDKs and server logs when you use the Services.
From service providers (e.g., payment processors) and publicly available sources where permitted.

Purposes and lawful bases

Provide and operate the Services (contract) – account creation, posting, scheduling, retries, and notifications.
Security and integrity (legitimate interests/legal obligation) – authentication, fraud prevention, abuse monitoring, and incident response.
Analytics and improvement (legitimate interests/consent where required) – performance, product development, and quality assurance.
Billing and account management (contract/legal obligation) – payments, invoices, tax/VAT compliance.
Marketing communications (consent/legitimate interests) – newsletters and product updates; you can opt out at any time.
Legal compliance (legal obligation) – responding to lawful requests, enforcing our Terms.

Cookies & tracking

We use cookies and similar technologies subject to the UK Privacy and Electronic Communications Regulations (PECR). Categories include: essential (required for sign‑in, security and core features), analytics (to understand usage), and marketing (to personalise content). You can manage your preferences using the cookie banner available on our site at any time. Disabling optional cookies may affect certain features.

Sharing your data

We share personal data with:

Service providers (processors) that host, store, transmit, analyse or support the Services (e.g., cloud hosting/CDN, email delivery, analytics, payment processing, error monitoring, logging).
Third‑party platforms you connect, to publish content or retrieve analytics as requested by you.
Professional advisers (lawyers, accountants) under confidentiality obligations.
Authorities where required by law or to protect rights, safety or property.
Business transfers in connection with a merger, acquisition or asset sale, subject to appropriate safeguards.

International transfers

Your data may be transferred outside the UK. Where we transfer personal data internationally, we rely on an adequacy regulation or implement appropriate safeguards such as the UK IDTA or the EU Standard Contractual Clauses (as amended for UK transfers), along with technical and organisational measures.

Data retention

Account data is retained for the life of your account and then deleted or anonymised within a reasonable period, subject to legal obligations.
Content and logs are retained as needed to provide the Services (e.g., scheduling, retries) and for security, audit and compliance.
Billing records are retained as required by tax and accounting laws.

Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, audit logging and secure development practices. However, no method of transmission or storage is completely secure.

Your rights

Under the UK GDPR you have rights to access, rectify, erase, restrict processing, object to processing, and data portability. Where we rely on consent, you can withdraw it at any time. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk). We will respond to requests in line with applicable law.

Children

The Services are not intended for individuals under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data to us, please contact us to request deletion.

AI features

If you use optional AI features, prompts and outputs may be processed by our infrastructure and trusted model providers for the purpose of delivering the feature, improving safety and quality, and preventing abuse. You are responsible for reviewing AI output before publishing.

Links to other sites

Our Services may contain links to third‑party websites. Their privacy practices are governed by their own policies; we are not responsible for them.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will provide notice (e.g., in‑app, by email, or on our website) and indicate the “Last updated” date above.

Contact

To exercise your rights or ask questions about privacy, please contact us via the Contact page or at privacy@postdaba.com.