Privacy Policy

PostKara (“we”, “us”) is a Meta-only AI social media management service operated by Zargham Labs LLC. This policy explains what data we collect, how we use it, and your rights.

Data we collect

• Account data: email, name, authentication identifiers, billing references (Stripe customer IDs).
• Meta data you authorize via OAuth: Page/Instagram metadata, content you schedule, performance metrics, and (on Pro) comments/DMs needed to draft replies.
• Usage & cost telemetry for LLM calls (token estimates) to operate and bill the service.

How we use data

To generate and schedule posts, produce weekly reports, draft replies to engaged users, enforce messaging compliance (24-hour window, rate limits, disclosure), process payments, and improve product reliability. We do not sell personal data. We do not use Meta user data for advertising to third parties.

Meta platform data

Access tokens are encrypted at rest. Phase 1 (Starter) requests posting and insights scopes only. Messaging scopes are requested only when you use Pro inbox features. We retain performance, engagement, and report data for up to 12 months by default, then delete or anonymize it.

Lawful basis (GDPR)

Contract performance and legitimate interests in operating a secure SaaS. EU customers may request a data processing addendum and account/data deletion by emailing [email protected].

Subprocessors

Hosting VPS, PostgreSQL, Stripe, Anthropic (content generation), Resend (email), Meta Graph API.

Contact

Zargham Labs LLC · [email protected] · postkara.com