Privacy Policy
This Privacy Policy explains what personal data Postiada collects, why, how long we keep it, and the rights you have. It applies to the website postiada.com and to the Postiada service.
1. Who we are
The data controller is Travelpedia Travel Ltd, a company registered in England and Wales under company number 17299925, registered office Unit 501 Leroy House, 434-436 Essex Road, London N1 3FY, United Kingdom (“Postiada”, “we”, “us”). Contact: info@postiada.com.
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Contact and account data | Name, company, email address, website URL, messages you send us | You, through our forms and email |
| Billing data | Subscription plan, invoices, payment status. Card numbers are processed by Stripe and never reach our systems. | You and Stripe |
| Website connection data | Your WordPress site URL, a WordPress application password you create for Postiada, the categories, authors and sitemap of your site | You and your website |
| Search data (optional) | Queries, impressions, clicks and positions for your site from Google Search Console, only if you connect it | Google, with your authorisation |
| Social publishing data | Access tokens and identifiers for the Facebook Page and Instagram professional account you connect; published post identifiers | Meta, with your authorisation |
| Business facts you provide | Prices, durations, opening hours, policies and other verified facts about your products and services | You |
| Generated content | Articles, social posts, images and quality-check results produced for your site | Created by the service |
| Technical data | IP address, browser type, pages visited, approximate location, referrer | Your device, through our website |
3. Why we use it and on what legal basis
- To provide the service — connecting to your website and accounts, choosing topics, writing and publishing content, showing you results. Legal basis: performance of a contract (Art. 6(1)(b) UK GDPR / GDPR).
- To bill you — processing subscriptions, refunds and invoices. Legal basis: contract and legal obligation.
- To answer you and provide support. Legal basis: contract and legitimate interests.
- To keep the service secure and improve it — logs, error monitoring, aggregate usage. Legal basis: legitimate interests.
- To send you service notices about your account, publishing or billing. Legal basis: contract. We do not send marketing email without your consent, and you can withdraw consent at any time.
- To comply with the law — tax, accounting and lawful requests. Legal basis: legal obligation.
4. Who we share it with (sub-processors)
We share personal data only with providers that help us run the service, under contracts that restrict their use of it:
| Provider | Purpose | Location |
|---|---|---|
| Hostinger | Website hosting | EU |
| Stripe | Payments and subscription billing | EU / US |
| GitHub (Microsoft) | Running the content engine and storing its configuration | US / EU |
| Anthropic | Text generation and content checks (AI model) | US |
| OpenAI | Image generation, only when no suitable photo exists | US |
| Google (Search Console) | Search performance data, when connected | US / EU |
| Meta (Facebook, Instagram) | Publishing social posts to your accounts | US / EU |
| Pexels, Pixabay | Licensed stock photography | US / EU |
The text and facts you provide are sent to the AI providers above to produce your content. We do not permit these providers to use your data to train their models under our agreements with them. We do not sell personal data, and we do not share it with advertisers.
5. International transfers
Some providers are located outside the United Kingdom and the European Economic Area, mainly in the United States. Where that is the case we rely on adequacy decisions (including the UK–US Data Bridge and the EU–US Data Privacy Framework where the provider is certified) or on standard contractual clauses approved by the UK and EU authorities.
6. How long we keep data
- Contact and support requests: up to 24 months after our last exchange.
- Account, connection and business-facts data: for the life of your subscription and 30 days after it ends, so you can return without starting over; then deleted, except where the law requires otherwise.
- Access tokens and application passwords: deleted immediately when you revoke them or end your subscription.
- Billing records: 7 years, as required by UK tax law.
- Generated content: it lives on your website and your accounts, which you control. Our working copies are deleted with your account data.
- Technical logs: up to 12 months.
7. Your rights
Under UK GDPR and GDPR you can ask us to access, correct, delete or export your personal data, to restrict or object to processing, and to withdraw consent where processing is based on consent. Write to info@postiada.com; we answer within one month. Step-by-step instructions for revoking our access and having your data deleted are on the Data deletion page. You also have the right to complain to a supervisory authority — in the UK, the Information Commissioner’s Office (ico.org.uk); in the EU, the authority of your country of residence. If you are in Turkey, you also have rights under the Personal Data Protection Law (KVKK), which you can exercise through the same address.
8. Security
Credentials you give us are stored in an encrypted secrets store, are never displayed in our workspace, and are used only by the engine that publishes for you. We never ask for your WordPress login password; the application password you create can be revoked by you at any time. Access to production systems is limited to the people who operate them. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we will notify you and the relevant authority of a personal data breach where the law requires it.
9. Cookies
postiada.com uses strictly necessary cookies to remember choices you make on the site (such as a billing period or an open tab). We do not run advertising cookies. If we add analytics in the future we will ask for your consent first and update this section.
10. Children
Postiada is a business service and is not directed at children under 16. We do not knowingly collect personal data from them.
11. Changes to this policy
We will post any changes on this page and update the date at the top. If a change materially affects how we use your data, we will tell you by email before it takes effect.
12. Contact
Travelpedia Travel Ltd, Unit 501 Leroy House, 434-436 Essex Road, London N1 3FY, United Kingdom · info@postiada.com