Privacy Policy
Prepost (“Prepost,” “we,” “us,” or “our”) provides a tool that compares the post drafts you write for X (Twitter) and predicts which one is built to win, before you publish. This Privacy Policy describes how we process personal information we collect through prepost.me and app.prepost.me, and our related marketing and support activities (together, the “Service”).
We are established in France and are the controller of the personal information described in this Privacy Policy for the purposes of the GDPR. If you are located outside the European Economic Area, UK, or Switzerland, we apply the same standard of protection to your personal information as a matter of policy, together with the additional rights described in the U.S. state privacy rights section below where they apply to you.
1. Personal information we collect
1.1 Information you provide to us
- Contact data, such as your name and email address.
- Account and profile data, such as your password, and, if you connect your X (Twitter) account, information from that connection (such as your handle and profile details) made available to us based on your account settings on X.
- Your content, such as the post drafts, variants, and any related text you submit to be compared and scored, and the results and history associated with them.
- Communications data, based on our exchanges with you, including when you contact us for support.
- Transactional data, such as your subscription plan, order history, and billing status.
- Marketing data, such as your preferences for receiving our marketing communications.
1.2 Information from third parties
If you sign in with, or connect, your X (Twitter) account, we receive the account information described above from X. If you complete a purchase, our payment processor shares limited transaction information with us (see How we share your personal information).
1.3 Automatic data collection
We and our service providers may automatically log information about you, your device, and your interaction with the Service, such as:
- Device data, such as your browser type and version, operating system, device type, screen resolution, language settings, and IP address.
- Online activity data, such as pages you viewed, how long you spent on them, referring and exit pages, and access times.
We do not knowingly collect your precise geolocation.
2. Tracking & other technologies
We use cookies and similar technologies for the following purposes:
- Essential — to keep you signed in and to operate core features of the Service, such as comparing your drafts.
- Analytics — to understand how the Service is used and to improve it, using privacy-friendly analytics tools.
- Preferences — to remember your settings between visits.
You can control non-essential cookies through your browser settings; blocking essential cookies may prevent parts of the Service from working. See Your choices below for more information.
3. How we use your personal information
We may use your personal information to:
- provide the Service, including running your drafts through our scoring model and maintaining your account and draft history;
- communicate with you about the Service, including service-related announcements, security alerts, and support;
- process payments and manage your subscription;
- understand your needs, personalize your experience, and remember your preferences;
- analyze usage, improve the Service, and develop new features;
- send you marketing communications, where you have not opted out (see Your choices);
- comply with applicable law, enforce these Terms, and protect the rights, safety, and property of Prepost, our users, and others; and
- create aggregated, de-identified, or anonymized data — for example, from drafts and their outcomes — which we may use to improve our own, in-house scoring and prediction models. We do not share your identifiable post drafts with third-party AI providers to train their models.
4. Retention
We generally retain personal information for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymize your personal information and draft content within a reasonable period, except where we are required or permitted by law to retain it for longer (for example, billing records).
6. Your choices
- Access or update your information. You can review and update your account information by signing in to app.prepost.me.
- Delete your content or account. You can delete individual drafts from your account, or close your account entirely, at any time from your account settings, or by contacting us.
- Opt out of marketing. You can opt out of marketing emails using the unsubscribe link in any such email, or by contacting us. You will continue to receive service-related emails.
- Cookies. Most browsers let you block or delete cookies through their settings. Blocking essential cookies may affect how the Service works.
- Do Not Track. We currently do not respond to browser “Do Not Track” signals. We do honor the Global Privacy Control (“GPC”) signal as a valid opt-out request where applicable, as described below.
7. Your privacy rights (GDPR)
If data protection law gives you these rights, you may ask us to:
- Access — provide information about, and a copy of, the personal information we hold about you.
- Correct — update or correct inaccuracies in your personal information.
- Delete — delete your personal information where there is no good reason for us to keep processing it.
- Restrict — restrict the processing of your personal information in certain circumstances.
- Port — receive a machine-readable copy of your personal information, or have it transferred to a third party.
- Object — object to our processing of your personal information where we rely on legitimate interests, including for direct marketing.
- Withdraw consent — where we rely on your consent, withdraw it at any time, without affecting processing that already took place.
To exercise these rights, contact us at hello@prepost.me. We may need to verify your identity before responding. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority, or with the French data protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL), 3 Place de Fontenoy — TSA 80715, 75334 Paris Cedex 07, France.
Our legal bases for processing
| Purpose | Legal basis |
|---|---|
| Providing the Service and your account | Performance of a contract with you |
| Payments and billing | Performance of a contract with you; legal obligation |
| Security and fraud prevention | Legitimate interests; legal obligation |
| Product analytics and improvement | Legitimate interests; consent, for optional cookies |
| Improving our in-house scoring models with aggregated/anonymized data | Legitimate interests |
| Marketing communications | Consent, or legitimate interests where permitted by law |
| Legal compliance, disputes, and enforcement of our Terms | Legal obligation; legitimate interests |
8. U.S. state privacy rights
If you are a resident of California, Colorado, Connecticut, Virginia, or another U.S. state with a comprehensive privacy law, you may have rights similar to those described above, including the right to know, access, correct, and delete your personal information, and the right to opt out of the sale or sharing of your personal information and of targeted advertising. As described above, we do not sell personal information, and we do not process it for targeted advertising or for automated decision-making that produces legal or similarly significant effects.
We honor Global Privacy Control (GPC) signals as valid requests to opt out of the sale or sharing of personal information, to the extent applicable. You can submit any other request under this section by emailing hello@prepost.me. We may need to verify your identity, and, if you use an authorized agent to submit a request, their authority to act on your behalf, before responding. California residents may also submit “Shine the Light” requests about disclosures for third-party direct marketing to the same address.
9. International data transfers
We are based in France, and personal information is primarily processed in the European Economic Area. Some of our service providers — for example, hosting and infrastructure providers — are located, or process data, outside the EEA, including in the United States. Where we transfer personal information outside the EEA, we use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, to ensure your information continues to receive an adequate level of protection.
10. Security
We employ technical, organizational, and physical safeguards designed to protect the personal information we collect. However, no method of transmission or storage is completely secure, and we cannot guarantee the security of your personal information.
11. Children
The Service is not intended for use by anyone under 18 years of age, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it in accordance with applicable law.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the effective date above and, where appropriate, by additional notice (such as an email or a notice on the Service). Your continued use of the Service after a modified Privacy Policy takes effect means you accept the changes.
13. How to contact us
Email: hello@prepost.me
Mail: Prepost, France