Privacy Policy

1. Introduction

Welcome to PostCopilot (postcopilot.ai). We respect your privacy and are committed to being transparent about how we handle data. This privacy policy covers our website, online tools, and Chrome extensions.

2. Information We Collect

Website Analytics

We use Google Analytics 4 (GA4) to understand how visitors use our website. GA4 may collect:

• Pages visited and time spent on each page
• Referral source (how you found us)
• Device type, browser, and general geographic region
• Interaction events (e.g., button clicks, tool usage)

This data is aggregated and anonymized. We do not collect names, email addresses, or any personally identifiable information through analytics.

Tool Usage

When you use our online tools (AI Threads Generator, Video Downloader, Post Downloader, Fake Post Generator), the content you input is processed to provide the service. We may log anonymous usage events (e.g., "a video was downloaded" or "a post was generated") to improve our tools. We do not store the content you create or download.

Cookies

Our website uses cookies for:

• Analytics: Google Analytics cookies to measure site usage
• Advertising: Google AdSense cookies to serve relevant ads and measure ad performance
• Preferences: Local storage to remember your tool settings (e.g., dark mode, export format)

You can control cookies through your browser settings. Disabling cookies may affect some tool functionality.

3. Google AdSense

We use Google AdSense to display advertisements on our website. Google AdSense may use cookies and web beacons to serve ads based on your prior visits to our website and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your browsing activity.

You can opt out of personalized advertising by visiting Google Ads Settings. For more information about how Google uses data, see Google's Privacy & Terms.

4. Chrome Extensions

We offer Chrome extensions (Threads Exporter, XTract) that operate entirely on your device. Our extensions:

• Do not collect, store, or transmit any personal data
• Do not track your browsing activity
• Store preferences (e.g., export format) locally on your device only
• Process data on-device — exported files are saved directly to your computer

For extension-specific privacy details, see the Threads Exporter Privacy Policy or the XTract Privacy Policy.

5. Connecting Your Own Threads Account (Official Threads API)

If you choose to connect your own Threads account through Meta's official Threads API, you grant PostCopilot access to your account so we can show your own data back to you (and, where you use an AI assistant through us, to that assistant). This is entirely optional, requires your explicit consent on Meta's authorization screen, and only ever touches your own account.

What we collect through the Threads API

With your permission, and only for the access you approve on Meta's consent screen, we may retrieve:

• Your Threads profile (user id, username, display name, biography and profile picture)
• Your posts (threads) and their text, media and timestamps
• Your replies, and replies and mentions involving you
• Insights and metrics about your own posts and account
• An access token issued by Meta that lets us make these requests on your behalf

How we use it

Solely to provide the feature you asked for: displaying your Threads data back to you inside PostCopilot, letting you export it, and — if you use an AI assistant through our tools — passing the data you request to that assistant. We do not sell it, use it for advertising, or build profiles from it.

Retention

Your access token is stored encrypted at rest and is kept only while your connection is active (Meta's long-lived tokens last about 60 days and we refresh them while the connection remains connected). The content we fetch from the API is returned to you on demand and is not retained as a separate copy. Your token and connection are deleted when you disconnect, when you remove the app in your Threads settings (which calls our deauthorization endpoint), or when you make a data-deletion request (below).

Third parties

Two parties are involved by design: Meta (Threads), which issues the token and serves the data under its own privacy policy; and, if you use one, the AI assistant / client you have connected, which receives the data you ask it to work with. We do not share your Threads data with anyone else.

How to delete your Threads data

You can remove your connection and the data tied to it in any of these ways:

• Disconnect in-product — use the Disconnect control on the Threads connection page; we immediately delete the stored token and connection.
• Remove the app in Threads — remove PostCopilot from your Threads/Instagram app settings. Meta then calls our deauthorization endpoint and we delete your stored grant.
• Data-deletion request — Meta can send us a Data Deletion Request on your behalf; we delete your stored grant and return a confirmation code and a status page where you can verify the deletion.

6. Data About Other People

Our export tools retrieve information that Threads and X already publish publicly about accounts other than your own — for example usernames, display names, profile pictures, bios, follower and following counts, and the text, timestamps and media URLs of public posts. This section explains how we handle that data, because it concerns people who never visited this site.

• We only ever retrieve public data. Nothing private, restricted, or behind a follow-approval is accessed. We do not collect email addresses, phone numbers, or any contact details.
• We do not store it. Web export results are held in server memory only, for at most one hour, purely so you can download the file you just generated. They are never written to disk and are gone on restart. Browser-extension exports are processed entirely on your own device and never reach us.
• We do not sell it, share it, or build profiles from it. It is not used for advertising, not passed to any third party, and not retained for analytics.
• You are the data controller for what you export. If you export data about other people, you are responsible for how you store and use it, including under the GDPR, the CCPA, and any other law that applies to you. See our Terms for the full allocation of responsibility.

If you appear in data someone exported through PostCopilot and want to raise a concern, please contact us. Because we do not retain export results we usually cannot locate or delete a specific past export, but we will help where we can and will act on any lawful request.

7. Data Sharing

We do not sell, rent, or share your personal data with third parties. The only third-party services that receive data are:

• Google Analytics — anonymized usage data for website analytics
• Google AdSense — cookie-based data for ad serving

These services operate under their own privacy policies.

8. Data Retention

We do not maintain a user database or store personal information. Analytics data is retained in Google Analytics according to Google's standard retention policies. Anonymous usage logs are periodically deleted.

9. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Your Rights

Depending on your location, you may have the right to:

• Access the data we hold about you (note: we collect minimal data)
• Request deletion of any data associated with you
• Opt out of analytics tracking by using browser extensions like Google Analytics Opt-out
• Opt out of personalized ads via Google Ads Settings

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of our website or tools after changes constitutes acceptance of the updated policy.