1. Who we are
Postfox is a product of BRMEDIA, a company registered in France under SIREN 789 477 726, located at 123 Avenue Henri Ginoux, 92120 Montrouge, France. Postfox ("we", "our", "us") operates postfox.ai and app.postfox.ai. Contact: hello@postfox.ai
2. Data we collect
- Account data: email address, name, collected at signup
- Usage data: pages visited, features used, actions taken in the app
- Payment data: handled entirely by Stripe — we never store card details
- Content data: LinkedIn posts and ideas you create using the service
- Analytics data: see section 4 below
3. Legal basis for processing (GDPR Article 6)
We process your data on the following legal bases:
- Contract performance (Art. 6.1.b) — to provide the Postfox service you subscribed to
- Legitimate interest (Art. 6.1.f) — to analyze usage and improve the product
- Consent (Art. 6.1.a) — for analytics and tracking cookies (GA4, PostHog)
- Legal obligation (Art. 6.1.c) — for billing and tax records
4. Analytics tools
We use the following tools only after your explicit consent:
- Google Analytics 4 (Google LLC) — website traffic analysis
- PostHog (PostHog Inc.) — product analytics, funnels, and session replay
You can withdraw consent at any time by clearing your cookies. The cookie banner will reappear on your next visit.
5. Data processors and sub-processors
We use the following third-party processors, each bound by a Data Processing Agreement (DPA):
- Supabase Inc. — database and authentication infrastructure
- Stripe Inc. — payment processing
- Google LLC — analytics (GA4)
- PostHog Inc. — product analytics
6. International data transfers
Supabase, Stripe, Google, and PostHog may process data in the United States. These transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of protection for your personal data.
7. Data we do not collect or use
- We do not sell your personal data to third parties
- We do not use your content or data to train AI models
- We do not access your LinkedIn account beyond what you explicitly authorize
8. Data retention
- Account data: retained as long as your account is active
- Analytics data: retained per Google Analytics and PostHog default retention policies
- Billing data: retained 10 years as required by French tax law
You can request deletion of your account and associated data at hello@postfox.ai.
9. Your rights (GDPR)
As a data subject, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Delete your data ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise these rights, contact hello@postfox.ai. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés).
10. Cookies
For details on how we use cookies, please see our Cookie Policy.
11. Chrome Extension
The Postfox Chrome extension collects the following data from your LinkedIn profile, only when you explicitly trigger an analysis from your Postfox dashboard: the text content of your recent posts, and basic engagement metrics (likes and comments count). This data is transmitted securely to app.postfox.ai solely to build your personal AI voice profile. The extension does not collect data passively, does not access your LinkedIn account without your explicit action, does not collect data from other users' profiles, and does not store any data locally beyond a short-lived temporary cache cleared after each session.
12. Changes
We may update this policy. We will notify you by email for significant changes. The date at the top of this page always reflects the latest version.