Privacy notice
Draft policy for review before public launch. This document is not legal advice.
Who is responsible for your data
PostGrey is operated by LIAsteris Administrative Support and Consultancy Ltd ("LIAsteris"). LIAsteris is the data controller for the personal data described in this notice. Use the contact channel on liasteris.com for privacy questions.
Information we process
We process account identifiers and email, login credentials, workspace memberships, guides, founder profiles, campaign briefs, saved drafts, support messages, generation usage, subscription identifiers, and technical data such as device identifiers and IP address. We use this information to create and secure accounts, provide the service, enforce allowances, handle billing, prevent fraud, improve the product and provide support. We do not store your full payment card number or security code.
Legal basis
We process personal data to perform our contract with you (providing the service and billing), based on our legitimate interests (security, fraud prevention and product improvement), with your consent where required (optional marketing), and to meet legal obligations (tax and transaction records).
Private workspaces
Workspace information is limited to authorized members of that workspace. Owners manage invitations. Connecting an assistant grants that assistant access as the signed-in caller; only connect trusted assistants. Authorized operational access may be necessary for support and security. Privacy does not mean the content is invisible to the services processing it.
AI and service providers
Your brief, selected audiences and relevant workspace guide or founder profile are sent to the AI service to generate drafts. Lovable Cloud provides account and data hosting; Lovable AI Gateway routes generation to its model providers. Paddle acts as Merchant of Record and processes payments, subscription management, tax compliance and invoicing under its own privacy notice. We may also share data with professional advisers and with authorities where required by law. Provider processing locations and contractual retention must be confirmed before launch. Do not submit confidential client information without authority.
Reference material
When you attach a reference, you must confirm your authority to use it and allow processing before generation. Images, PDF files, extracted text, sampled video frames and extracted video audio are sent through Lovable AI Gateway to OpenAI. Video audio is transcribed and the spoken content informs drafts alongside four sampled still frames. Unsupported or oversized audio is reported rather than silently omitted. Public links are checked through the model provider's web search service; if the exact page cannot be verified, the app reports that the link is not accessible. The app does not save reference files alongside drafts or upload them to a public file library. References remain in the current writing screen until removed or the screen is closed; provider processing and operational records remain subject to provider terms. Avoid personal or confidential information you are not authorised to share.
Advertising
Advertising is not currently active. Direct-sponsor banners are disabled and Google AdSense is not yet installed. If Google AdSense is introduced, this notice will be updated to describe Google's processing, advertising cookies and applicable consent choices before ads are activated. Pro and Team accounts will remain ad-free. Native mobile apps and AdMob are deferred.
Storage, retention and security
Essential browser storage maintains your sign-in session and selected workspace. Saved drafts and profiles remain until removed or otherwise deleted under our retention process. Security, usage and transaction records may be retained for fraud prevention or legal obligations. Data is deleted or anonymised when no longer needed. We apply appropriate technical and organisational measures, including encryption in transit and access controls. Exact retention schedules, subprocessors and international transfer safeguards require review before launch.
Cookies
We use essential cookies and browser storage for sign-in and security. We do not use marketing cookies. You can clear or block cookies in your browser settings, though sign-in requires the essential ones.
Your choices and rights
You can review and edit workspace profiles and remove drafts where permitted. Contact the operator through liasteris.com to request access, correction, export, deletion or to raise a privacy concern. Applicable rights depend on your location and may include access, rectification, erasure, restriction, portability, objection and consent withdrawal. A dedicated privacy address, formal request process and company address must be confirmed before public launch. We do not sell your private workspace content.