Legal
This policy explains what personal data Postbarrel collects, why, who we share it with, and the choices you have. Postbarrel is the data controller; our legal details are in the Contact section at the end. Questions: support@postbarrel.com.
| Data | Where it comes from | Why we use it |
|---|---|---|
| Email address and password | You, at sign-up. Passwords are stored only as a hash by our authentication provider; we cannot read them. | To create and secure your account, sign you in, and send account emails (confirmation, password reset, welcome). |
| Two-factor authentication secret | You, if you turn 2FA on. | To verify the code from your authenticator app. |
| Country | Chosen at sign-up, pre-filled from the country Cloudflare sees on your connection. | To show the right currency and taxes at checkout. |
| Your answers, topics, series names, saved ideas and generated scripts | You, as you use the product. | This is the product: to generate your scripts, keep them for you, and let later scripts in a series build on earlier ones. |
| Business profile (name, what you do) | You, if you fill it in. | To write business scripts about your business. |
| Feedback (thumbs up/down on scripts) | You, optionally. | To learn your style and improve your future scripts. Used for your account only. |
| Purchase and subscription records | Paddle, our payment provider, after you buy. | To credit your account, manage your plan, and handle refunds. We receive transaction and subscription identifiers and status, never your card details. |
| Support requests (name, email, message) | You, via the support form. | To reply to you. |
| Technical and security logs (IP address, request details, timestamps) | Automatically, when you use the service. | To keep the service running, detect abuse and fraud, and debug problems. |
| Usage events (that you viewed the front page, signed up, generated your first and second scripts, ran out of credits, opened checkout, paid or cancelled) and, where present, the link you arrived by (a referral or campaign code) | Automatically, first-party only. | To understand where people drop off and which creators or partners referred them, so we can pay referral partners and improve the product. Stored on our own systems, never shared with advertisers, and unlinked from your account when you delete it. |
We do not run advertising or analytics trackers, and we do not build profiles of you for marketing.
We use a small number of providers to run Postbarrel. Each only receives what it needs for its job, under a contract that restricts it to that job.
| Provider | Role | What they receive |
|---|---|---|
| Cloudflare | Hosting, network security, bot protection (Turnstile) and country detection | Your requests, IP address and technical data. |
| Supabase | Database and authentication | Your account data and everything you create in Postbarrel. |
| Anthropic | The AI model that writes your scripts | Your answers, topic and profile details for the script being written, and for a series, brief paraphrases of your earlier takes. Anthropic does not use data sent through its API to train its models. |
| Tavily | Web research for scripts that benefit from facts | The topic or subject text only, never your account details. |
| Paddle | Payments, merchant of record, taxes, refunds | Your email, country and payment details, which you give to Paddle directly at checkout. See Paddle's privacy policy. |
| Resend | Sending our emails | Your email address and the content of account emails. |
| Google Fonts | Typefaces for this website | Your IP address when the font files load. |
We do not sell your personal data. We may disclose data if the law requires it, or to protect the rights and safety of Postbarrel and its users.
Some providers process data in the United States or other countries outside the UK and EU. Where they do, transfers rely on appropriate safeguards such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses, and, where applicable, the provider's certification under the EU–US Data Privacy Framework.
Postbarrel sets no advertising or analytics cookies and loads no third-party analytics scripts. To keep you signed in, your session is stored in your browser's local storage by our authentication provider; it is removed when you sign out. Local storage also holds a random visit identifier and any referral or campaign code from the link you arrived by, so that a sign-up can be attributed to the right partner; this never leaves postbarrel.com. Cloudflare Turnstile, which protects sign-up and sign-in from bots, may set a cookie for that purpose.
Depending on where you live you can ask us to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on it. You can do most of this yourself: your scripts and settings are editable in the app, and account deletion is on the account page. For anything else, email support@postbarrel.com and we will respond within one month.
If you are in the UK you can complain to the Information Commissioner's Office; in the EU, to your local data protection authority.
Data is encrypted in transit, passwords are hashed, payment details never touch our systems, and you can add two-factor authentication to your account. No service can promise perfect security; if we become aware of a breach affecting your data we will tell you and the regulator as the law requires.
Postbarrel is for adults. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, contact us and we will delete it.
We will post any changes here and update the effective date. For material changes we will also tell you by email or in the app.
Fuad Laguda, trading as Postbarrel
Scotland, United Kingdom
Email: support@postbarrel.com