Privacy policy

Last updated 2026-10-21

Logic Minds LLC ("Postgale", "we") runs a workspace where teams compose, schedule and publish posts to their own Instagram, Facebook, Threads, TikTok, X, Bluesky and Mastodon accounts, Telegram channels and groups and Discord channels, and answer WhatsApp messages. This policy explains what we collect, why, and how to have it deleted.

Logic Minds LLC, 111 NE 1st St, 8th Floor, 88513, Miami, FL 33132, USA, is the operator of Postgale and the data controller for the personal data described here. Contact: +1 (645) 241-7742, [email protected].

What we collect

Your Postgale account: email address, a hashed password, the organizations you belong to and your settings.
Connected social accounts: when you connect an account we receive, from the platform you approve, the account's ID, username or display name, the permissions you granted, and access and refresh tokens. Tokens are encrypted at rest (AES-256-GCM).
Content you create: post text, media you upload or link to, schedules, approval decisions, and the IDs and links the platforms return after publishing.
Instagram comments: if you use comment features, we read comments on your own Instagram posts to show them to you and send the replies you write.
Operational data: audit logs of actions in your workspace, IP addresses for rate limiting and security, and API key metadata.

How we use it

To publish, schedule and report on the posts you or your workspace's API clients ask us to publish, on the accounts you connected.
To show you each connected account's name, posting options (for example TikTok privacy settings) and the status of your posts.
To secure the service, prevent abuse and keep an audit trail for your workspace.

We do not sell personal data, use platform data for advertising, or share it with third parties except the infrastructure providers that host the service and the platforms you publish to. Data received from Meta (Instagram, Facebook, Threads, WhatsApp), TikTok, X, Telegram, Discord, Bluesky and Mastodon is used only to provide the features you use and in line with each platform's developer terms.

Our public pages (the website, docs and legal pages, not the dashboard) use PostHog (US) for anonymous product analytics such as page views and clicks; session recording is off and we do not send it your email.

TikTok

When you connect a TikTok account, Logic Minds LLC receives data from TikTok only for the permissions (scopes) you approve, and uses it only to provide the features below:

user.info.basic: basic profile information, such as your open ID, display name and avatar, to show which account is connected and who a post will be published as.
video.publish and video.upload: posting. We send the videos or photos, captions and settings you choose (privacy, comments, Duet, Stitch, commercial content disclosure) to TikTok, either as a direct post or as a draft in your TikTok inbox, and read back the publishing status. Before each post we read your current posting options from TikTok (nickname, allowed privacy levels, interaction settings, maximum video length).

TikTok access tokens are valid for 24 hours and refresh tokens for 365 days; both are encrypted at rest and renewed only while the account stays connected. You can revoke our access at any time by disconnecting the account in the Postgale dashboard (Dashboard → Accounts) or in the TikTok app under Settings and privacy → Security → Manage app permissions. Data we received from TikTok for an account is deleted within 30 days of disconnecting it, unless the law requires us to keep it longer.

Telegram channels and groups are connected by making Logic Minds LLC's Postgale bot an administrator of the chat and posting a one-time connect code in it. Through the Telegram Bot API we then receive and use only:

Chat details: the chat's ID, type, title and public username (if it has one), to show which channel or group is connected and to publish to it, and its member count, shown as the account's follower metric.
The bot's membership: whether the bot is still an administrator allowed to post, so we can tell you when the chat needs to be reconnected.
Connect messages: messages in the chat that start with /connect (and such posts forwarded to the bot), only to read the code. Telegram may deliver other messages of chats where the bot is an administrator; we do not store or read them.
What you publish: the text, media and settings you send, and the message IDs and links Telegram returns, so the posts can be edited or deleted later.

No Telegram user token is involved: the bot's token belongs to Logic Minds LLC and is never shared. You can stop our access at any time by removing the bot from the chat or disconnecting the account in Dashboard → Accounts, which deletes the data we stored for it. Telegram's own handling of data is described in its privacy policy.

Discord

Discord channels are connected by a server admin who authorizes Logic Minds LLC's Postgale app on Discord with the webhook.incoming permission and picks a server and channel. Discord then creates a webhook in that channel. Through the Discord API we receive and use only:

The webhook: its ID and token (stored encrypted), its name, and the IDs of the channel and server it belongs to, plus the server's name when Discord sends it, to show which channel is connected and to publish to it.
What you publish: the text, files, embeds and settings you send, and the message IDs Discord returns, so the posts can be edited or deleted later.

We do not keep the Discord user access token issued during authorization, and we do not read messages, members or other content of your server. You can stop our access at any time by deleting the webhook in Discord (Server settings → Integrations) or by disconnecting the account in Dashboard → Accounts, which deletes the webhook and the data we stored for it. Discord's own handling of data is described in its privacy policy.

Bluesky

Bluesky accounts are connected with the account's handle and an app password that you create in Bluesky for Logic Minds LLC's Postgale (Settings → Privacy and security → App passwords); we never ask for your account password. Through the AT Protocol we receive and use only:

Account details: the handle, the account's DID and the address of its personal data server, to show which account is connected and to publish to it.
Credentials: the app password and the session tokens Bluesky issues for it, stored encrypted, to sign in and renew the session.
What you publish: the text, images, videos and settings you send, and the post identifiers Bluesky returns, so the posts can be deleted later. To show a link card, we read the title, description and image of the first web page linked in a post.

We do not read your timeline, followers or direct messages. You can stop our access at any time by deleting the app password in Bluesky or by disconnecting the account in Dashboard → Accounts, which deletes the data we stored for it. Posts on Bluesky are public; Bluesky's own handling of data is described in its privacy policy.

Mastodon

Mastodon accounts are connected on the server you choose: Logic Minds LLC's Postgale registers itself as an app on that server and you authorize it there with Mastodon's read, write, follow and push scopes (no admin scopes). These are broader than what Postgale uses: read allows reading your account data, write posting and changing it, follow managing follows, blocks and mutes, and push subscribing to push notifications. Postgale uses them only to read your profile and your server's limits and to upload media, publish and delete statuses; it does not follow, block or mute accounts or subscribe to notifications. From your server we receive and use only:

Account details: the server's domain and limits, your account ID, username, display name and profile link, to show which account is connected and to publish to it.
Access token: the token your server issues to Postgale, stored encrypted, and the app credentials Postgale received from your server (shared by every account on it).
What you publish: the text, media, alt text and settings you send, and the status IDs and links your server returns, so the statuses can be deleted later.

We do not read your home timeline, followers or direct messages. You can stop our access at any time by revoking Postgale under Preferences → Account → Authorized apps on your server or by disconnecting the account in Dashboard → Accounts, which revokes the token and deletes the data we stored for it. Each Mastodon server is run independently and has its own privacy policy.

Retention and deletion

Disconnecting an account in Dashboard → Accounts deletes its tokens and the data we received for it, and revokes our access where the platform supports it.
Removing Postgale from your Instagram or TikTok settings also triggers deletion; see data deletion.
Deleting your workspace removes its posts, accounts, keys and logs. Backups are overwritten within 30 days.

Your rights

You can access, correct, export or delete your data, or object to its processing, by writing to [email protected]. We answer within 30 days.

Security

Traffic is encrypted with TLS, tokens and webhook secrets are encrypted at rest, and access is limited to the members of each workspace.

Changes

We will post changes here and update the date above. Material changes are announced in the dashboard.