Privacy Policy

Polityka Prywatności (Tłumaczenie)

Last updated: March 2026

Postomat ("Service," "we," "us," or "our") is operated by REBDI Sp. z o.o., a company incorporated under Polish law (KRS: 0000658915, NIP: 7393893405, REGON: 366367441), with registered address at ul. Ogrodowa 2, 89-422 Sypniewo, Poland.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media scheduling and management platform available at postomat.eu and app.postomat.eu. By accessing or using Postomat, you agree to the terms of this Privacy Policy.

For any privacy-related questions, please contact us at: kontakt@postomat.eu

1. Our Services

1. Nasze Usługi (Tłumaczenie)

Postomat Services

Postomat is a social media management and scheduling platform that allows users to connect and manage multiple social media accounts from a single dashboard. Through our platform, you can schedule and publish posts, manage content across channels, and analyze the results of your social media activities.

Social Networks

Any collection, use, and management of personal information by third-party social networks — including Facebook, Instagram, X (Twitter), LinkedIn, TikTok, YouTube, Pinterest, Reddit, and others (collectively, the "Social Networks") — is governed by their respective privacy policies and terms of service. Postomat is not responsible for the privacy practices of these Social Networks. We recommend carefully reviewing their privacy policies.

Eligibility

Our Services are intended for business use by individuals who are at least 18 years old. Postomat is not directed at children.

2. Information We Collect

2. Informacje, które zbieramy (Tłumaczenie)

Account Information

When you register for Postomat, we collect:

  • Your name, email address, and password
  • Organization or company name (if provided)
  • Profile picture (if you choose to upload one)
  • Language and time zone preferences
  • Billing information for paid plans (processed securely by our payment provider)

Social Network Data

When you connect your Social Network accounts to Postomat, we may collect:

  • Profile information (username, profile image, page names)
  • Content you create, schedule, or publish through our platform (posts, images, captions)
  • Engagement metrics and analytics data from connected accounts
  • Access tokens required to interact with Social Network APIs on your behalf

We access Social Network data only as necessary to provide the Services you request. When you connect Facebook or Instagram, we use Meta's official APIs governed by the Meta Platform Terms:

  • Facebook Pages API — to publish and manage posts on your Facebook Pages
  • Instagram Graph API — to publish and manage posts on your Instagram accounts

Usage and Technical Data

When you use our platform, we automatically collect:

  • IP address and general location (country/region)
  • Browser type and version, device information
  • Pages visited within the platform, session duration
  • Date and time of access
  • Cookies and similar tracking technologies (see Section 7)

Communications

If you contact our support team, we retain records of your inquiries and our responses to help resolve issues and improve our service.

3. How We Use Your Information

3. Jak wykorzystujemy Twoje informacje (Tłumaczenie)

We use your information for the following purposes:

  • Providing the Services: To authenticate you, operate your account, process payments, and enable social media scheduling and publishing on your behalf.
  • Social Network Integration: To interact with Social Network APIs using your authorization tokens so that Postomat can publish content and retrieve analytics as instructed by you.
  • Communication: To send you transactional emails (account confirmation, password reset), service updates, and — with your consent — marketing communications.
  • Analytics and Improvement: To understand how users interact with Postomat and improve the platform's features, performance, and security.
  • Legal Compliance: To comply with applicable laws and regulations, including EU data protection law (GDPR), Polish law (UODO), and the requirements of Social Network platforms.

4. Legal Bases for Processing (GDPR / RODO)

4. Podstawy prawne przetwarzania (RODO) (Tłumaczenie)

As Postomat primarily serves users in Poland and the European Union, we process personal data under the following legal bases pursuant to Regulation (EU) 2016/679 (GDPR):

  • Performance of a contract (Art. 6(1)(b) GDPR): Processing necessary to provide you with the Services under our Terms of Service.
  • Legitimate interests (Art. 6(1)(f) GDPR): To maintain and improve our platform, ensure security, prevent fraud, and communicate about our services.
  • Consent (Art. 6(1)(a) GDPR): For marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
  • Legal obligation (Art. 6(1)(c) GDPR): When required by applicable Polish or EU law.

5. Data Sharing and Disclosure

5. Udostępnianie i ujawnianie danych (Tłumaczenie)

Postomat does not sell your personal data. We may share your information only in the following circumstances:

Service Providers

We use trusted third-party providers to help operate Postomat, including cloud hosting, payment processing, and analytics tools. These providers are contractually obligated to protect your data and may only process it to deliver services on our behalf.

Social Networks

When you connect a Social Network account, Postomat interacts with that platform's API on your behalf under your authorization. Data shared with Social Networks is governed by their own privacy policies. You may revoke Postomat's access at any time via the Social Network's settings or from within your Postomat account.

Meta Platforms (Facebook & Instagram)
Postomat integrates with Meta's APIs to enable publishing to Facebook Pages and Instagram accounts. Data exchanged with Meta is governed by the Meta Privacy Policy. We request only the minimum permissions necessary to provide scheduling and publishing features. You can revoke our access at any time through your Facebook settings.

YouTube / Google
If you connect YouTube, Postomat uses the YouTube API Services. The Google Privacy Policy applies. You may revoke access through Google Security Settings.

Legal Requirements

We may disclose your information if required by law, court order, or competent Polish or EU authority, or when necessary to protect the rights, property, or safety of Postomat, our users, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of company assets of REBDI Sp. z o.o., your information may be transferred to the successor entity under equivalent privacy protections.

6. Your Rights (GDPR / RODO)

6. Twoje prawa (RODO) (Tłumaczenie)

As a user — and particularly as a resident of Poland or the European Union — you have the following rights:

  • Right of access (Art. 15 GDPR): Request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
  • Right to erasure (Art. 17 GDPR): Request deletion of your personal data, subject to legal obligations.
  • Right to restriction (Art. 18 GDPR): Request that we limit how we process your data.
  • Right to data portability (Art. 20 GDPR): Request your data in a structured, machine-readable format.
  • Right to object (Art. 21 GDPR): Object to processing based on legitimate interests, including direct marketing.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at kontakt@postomat.eu. We will respond within 30 days.

You also have the right to lodge a complaint with the Polish data protection supervisory authority:

Urząd Ochrony Danych Osobowych (UODO)

ul. Stawki 2, 00-193 Warszawa
https://uodo.gov.pl
kancelaria@uodo.gov.pl

7. Cookies

7. Pliki cookies (Tłumaczenie)

Postomat uses cookies and similar technologies to operate the platform, remember your preferences, and analyze usage. We use:

  • Essential cookies: Required for authentication and platform functionality. Cannot be disabled.
  • Analytics cookies: Used to understand how users interact with Postomat. You may opt out.
  • Preference cookies: Remember your settings such as language and time zone.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent certain features from working correctly.

8. Data Retention

8. Retencja danych (Tłumaczenie)

We retain your personal data for as long as your account is active or as needed to provide the Services:

  • Account data: Retained for the duration of your account and up to 3 years after deletion to comply with legal obligations.
  • Content and scheduled posts: Retained until you delete them or close your account.
  • Usage logs: Retained for up to 12 months.
  • Billing records: Retained for 5 years as required by Polish accounting law (ustawa o rachunkowości).

Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

9. Data Security

9. Bezpieczeństwo danych (Tłumaczenie)

REBDI Sp. z o.o. implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure, including:

  • HTTPS encryption for all data in transit
  • Encrypted storage for sensitive data (passwords, tokens)
  • Access controls limiting data access to authorized personnel only
  • Regular security reviews of our infrastructure

While we take security seriously, no system is entirely secure. If you suspect unauthorized access to your account, please contact us immediately at kontakt@postomat.eu.

10. International Data Transfers

10. Międzynarodowe transfery danych (Tłumaczenie)

Postomat is operated from Poland (EU). Where we use third-party service providers located outside the EEA, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses (SCCs) approved by the European Commission — to ensure your data is protected to EU standards.

11. Data Deletion Request

11. Wniosek o usunięcie danych (Tłumaczenie)

You may request deletion of all your personal data at any time by:

  • Emailing kontakt@postomat.eu with the subject "Data Deletion Request"
  • Or by deleting your account from within the Postomat application settings

We will process your request within 30 days and confirm deletion by email.

If you connected Facebook or Instagram and wish to delete data stored by Meta separately, please use Meta's Data Deletion instructions.

12. Changes to This Policy

12. Zmiany w niniejszej polityce (Tłumaczenie)

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by displaying a prominent notice on the platform. The date at the top of this policy reflects the most recent update.

13. Contact

13. Kontakt (Tłumaczenie)

For any questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact:

REBDI Sp. z o.o.

ul. Ogrodowa 2, 89-422 Sypniewo, Poland
KRS: 0000658915 | NIP: 7393893405
Email: kontakt@postomat.eu
Website: https://postomat.eu