Privacy

This service is operated by Forge Digital Services Ltd, which is the data controller for the information described here. It is a company registered in England and Wales, number 17421027, with its registered office at M20 Maidstone Studios, Vinters Business Park, New Cut Road, Maidstone, England, ME14 5NZ.

Forge Digital Services Ltd develops and publishes its own software: subscription web applications for small businesses, designed, built, hosted and supported in house rather than under contract to anybody else.

PostMinder is one of its products. Your data is held for running PostMinder and is not passed to anything else the company builds.

For anything on this page, including a request to see or delete your data, contact support@postminder.co.uk.

Registered with the Information Commissioner’s Office under ZC235082.

Everything the product stores about you, and why it needs it:

• Your email address and password

  To sign you in. The password is hashed by Supabase and is never visible to us or stored by this application.

• Your website address

  It is the one thing the product needs to work.

• The public pages we read from your website

  The text of pages our crawler fetched, kept so your content can be written from your own words rather than guesswork.

• A profile of your business

  What you sell, where you work, who you serve. Written by AI from your website, and editable by you at any time.

• The answers you typed, if you have no website

  The ten questions asked in setup instead of reading a website, kept in your own words. They are the equivalent of the pages we would have read, and they are stored for the same reason: so your profile can be rebuilt without asking you to type it all again. They are deleted with your account.

• The content we write for you

  Your posts and articles, their dates and their status.

• Photographs you upload

  Stored so they can be attached to a post. Anyone holding the exact link can view one, because the social networks you publish to have to be able to fetch it. The addresses are long and random rather than guessable, and they are never listed anywhere, but treat an uploaded photo as something you are about to publish, because that is what it is for.

• A connection to a social account, if you connect one

  When you connect an account we store the key that account gives us, its name, when the key expires, and what it allows. The key lets us post the pieces you have approved and nothing else. We never see your password for that network. Disconnect it in Settings and everything we hold for it is deleted straight away.

• How much you have used

  A count of the pieces written each month, so your plan limit can be applied.

• Your subscription

  A Stripe customer reference, your plan, and its status. Card details are handled by Stripe and never reach us.

• Your email address, if you registered before launch

  Kept so we can tell you when the product is ready, and so the free trial you were offered at the time can be honoured. It is not an account, and it is separate from everything above. We write twice: once to confirm the address, once when it launches. Ask us and it is deleted.

There is no analytics on this site. No Google Analytics, no advertising pixels, no session recording, no third-party scripts of any kind. The only cookie is the one that keeps you signed in, described on the cookies page.

We do not sell your data, share it with advertisers, or use your business information to train anything of our own.

When you give us your website address, our crawler fetches pages that are publicly available on it, the same pages any visitor or search engine can see. It identifies itself as PostMinderBot, obeys your robots.txt, and waits between requests. It does not sign in, submit forms, or reach anything behind a login.

PostMinder uses YouTube API Services to upload the videos you approve to your YouTube channel. When you connect it, Google gives us a key with two permissions: to upload videos, and to read your channel. We use the second only to read your channel’s name and ID, and to check that each video we upload for you arrived and whether it is public, unlisted or private. We never see your Google password.

We store that key, your channel’s name and its ID, in our database in London, in a table that only our own server can read. No web browser can read it, including yours. We use them for nothing but uploading the videos you ask us to and showing you which channel is connected.

Nobody else receives information from your Google account, apart from Supabase and Vercel, which host the service and are listed under “Who else sees it” below. It is never used for advertising, never sold, never used to decide anyone’s credit, and never used to train any AI model, ours or anyone else’s. It is not sent to OpenAI. Our use of information received from Google APIs, and any transfer of it, follows the Google API Services User Data Policy, including its Limited Use requirements.

By connecting, you agree to be bound by the YouTube Terms of Service. What Google does with your information is covered by the Google Privacy Policy.

We keep it only while YouTube is connected. Disconnect YouTube in Settings and we take our access back at Google and delete everything we hold for it straight away; deleting your account does the same. You can also remove our access yourself at any time in your Google Account settings.

To run the service we use the companies below. Each one only receives what it needs to do its job.

The application itself runs on Vercel, in their London region, in the same country as the database. Vercel is a United States company, which is why it appears in the table above.

Your content is sent to OpenAI each time something is written. OpenAI states that data submitted through its API is not used to train its models. That is their policy rather than our guarantee, and it is worth knowing that this is the one point where your business information leaves our systems.

Everything between your browser and PostMinder travels over an encrypted connection, and the site only loads over one.

Your data is stored by Supabase in London, which encrypts it on disk and in its backups (AES-256, their standard) and encrypts it again whenever it moves between their systems.

Each customer’s records are walled off from every other customer’s in the database itself, not only in our code. The keys for the accounts you connect, such as YouTube, Facebook, Instagram and TikTok, sit in a table that no web browser can read. Only our own server reads them, and only to do what you have asked it to.

Access to the database is limited to the company’s own staff.

While your account exists. If you cancel, your content stays available to you unless you ask us to delete it.

When an account is deleted, everything goes: the business profile, the pages we read from your website, every piece of content, and every photograph you uploaded. Deletion is permanent and there is no copy kept afterwards.

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Contact us at the address above and we will action it within one month, which is what the law allows us.

Most of it you can do yourself without asking: your business profile is editable in the app, and your content is yours to change or remove at any time.

If you think we have handled your data badly, you can complain to the Information Commissioner’s Office at ico.org.uk.