Privacy Policy

Last updated: 7 May 2026

Who we are

PostKaro is an internal social media scheduling tool operated by TeamCXS for use by its team members. It is not a public-facing product. This policy describes how we handle the limited data the tool processes on behalf of our authorised users.

Data we collect

• Your name and email (used for sign-in to PostKaro).
• OAuth access tokens for the social platforms you choose to connect (Facebook, Instagram, LinkedIn, TikTok, YouTube). Tokens are encrypted at rest using AES-256-GCM.
• The text and media of any posts you compose and schedule through PostKaro.
• Server-side logs of API calls to platform endpoints, retained for at most 90 days for debugging.

How we use it

• Tokens are used solely to publish content you have explicitly composed and scheduled.
• We never read content from third-party accounts, scrape, or aggregate platform data beyond what is necessary to confirm a post was published.
• We do not run advertising or analytics on your behalf.

Sharing

We do not sell, share, or transfer your data to any third party. Data lives on infrastructure operated by TeamCXS (servers in Frankfurt, Germany).

Disconnecting and deletion

You can disconnect any social platform from PostKaro at any time. On disconnect, we delete the stored tokens and call the platform's revocation endpoint where supported. You can request deletion of your PostKaro account by emailing team@pinha.ai. All associated data is purged within 30 days.

Contact

Questions, complaints, or data requests: team@pinha.ai.