Privacy policy

This policy explains how PostUp handles personal data (UK GDPR / Data Protection Act 2018).

1. Who we are

Controller: PostUp (company details to be confirmed). Contact: legal@postup.app (placeholder until domain is live).

2. What we collect

Depending on how you use the product, we may process:

• Account details (name, email) when sign-in is enabled
• Payment data via our payment provider (we do not store full card numbers)
• Content you upload (job photos, logos, text)
• Device-stored preferences (house style, trades, saved posts) in your browser
• Basic technical logs (IP, device type) for security and reliability

3. Why we use it

To provide the service, improve it, take payment, prevent abuse, and (only if you opt in) send product tips. Legal bases include contract, legitimate interests, and consent where required.

4. Sharing

We use processors such as hosting, email, and payment providers. We do not sell your personal data.

5. How long we keep it

Account and billing records for as long as needed for the service and legal retention. Device-only data stays until you clear it or wipe your browser storage.

6. Your rights

You may request access, correction, deletion, restriction, portability, or object to certain processing. You can also complain to the ICO (ico.org.uk). Use Security & data in your profile to wipe on-device data anytime.

7. Children

The service is aimed at businesses and adults, not children.

8. Contact

Privacy requests: legal@example.com