Privacy Policy.

1. Who we are

PostLux ("PostLux", "we", "us") is a mobile application that turns product photos into styled, platform-ready social media posts using AI. This policy explains what information we collect when you use the PostLux app and website, how we use it, and the choices you have.

If you have any questions, contact us at contact@postlux.app.

2. Information we collect

Account information. When you create an account we collect your name, email address and password (stored as a secure hash). If you sign in with Apple or Google, we receive the name and email address those services share with us.

Photos you upload. When you generate a post, the photos you select (up to three per generation) are uploaded to our servers so we can create your image.

Content you create. We store the posts, captions and hashtags generated for you so they appear in your history, along with any notes or direction you add to a generation.

Purchase information. Points purchases are processed by the App Store or Google Play. We receive purchase confirmations (product, price, transaction ID) but never your card number or billing details.

Usage and device data. We collect basic technical information — device model, operating system, app version, language, crash logs and feature usage — to keep the app working and to improve it.

3. How we use your photos

Your photos are the heart of the product, so we're specific about this:

• Photos you upload are used only to generate the posts you request. They are sent to our AI processing partners solely for that generation and are not used by us to train AI models.
• Generated images are stored in your account so you can revisit, download and share them.
• We never post anything on your behalf. Sharing to Instagram, TikTok or any other platform happens only when you tap share, through your device's share sheet.
• Deleting a post from your history deletes the stored images associated with it.

4. How we use other information

• To operate your account, maintain your points balance and deliver generations you request.
• To provide support and respond to your messages.
• To understand which templates and features are used so we can improve the library.
• To detect abuse, fraud and content that violates our terms.
• To send service messages (e.g. purchase receipts). Marketing emails are only sent with your consent and always include an unsubscribe link.

5. When we share information

We do not sell your personal information. We share it only with:

• AI processing providers that generate images and captions on our behalf, bound by agreements limiting use of your content to providing that service.
• Cloud infrastructure providers that host our servers and store data.
• App Store and Google Play for processing purchases.
• Analytics and crash-reporting services that receive technical usage data (never your photos).
• Authorities, if required by law or to protect the rights and safety of our users.

6. Data retention & deletion

We keep your data while your account is active. You can delete individual posts at any time from the app, or delete your entire account from Settings → Delete account. Account deletion permanently removes your profile, uploaded photos, generated posts and history within 30 days, except for records we're legally required to keep (such as purchase records).

7. Security

All traffic between the app and our servers is encrypted with TLS. Photos and generated content are stored on access-controlled infrastructure, and passwords are stored as salted hashes. No system is perfectly secure, but we design for the assumption that your product photos may be unreleased and confidential.

8. Your rights

Depending on where you live (including under the GDPR and CCPA), you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing. You can exercise most of these directly in the app, or by emailing contact@postlux.app. We respond to all requests within 30 days, and we never discriminate against you for exercising your rights.

9. Children

PostLux is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

10. International transfers

Our servers and service providers may be located outside your country. Where required, we rely on appropriate safeguards — such as standard contractual clauses — for those transfers.

11. Changes to this policy

If we make material changes, we'll notify you in the app or by email before they take effect, and update the date at the top of this page. Continued use of PostLux after changes take effect means you accept the updated policy.

12. Contact us

Questions, concerns or requests: contact@postlux.app.