PostlineEN

Privacy Policy

What data Postline processes, for what, with whom and for how long, and how you exercise your rights under the LGPD.

Last updated: October 12, 2026 · Draft awaiting legal review: this text describes what Postline does today and may change before the final version.

Who we are

Postline is operated by NZK TECNOLOGIA LTDA ("NZK", "we"). This policy applies to the site postline.com.br, the app at app.postline.com.br, the blogs Postline hosts, the CLI and the API.

For anything about your data, write to contato@postline.com.br.

Who decides about each piece of data

The LGPD separates who decides about data (the controller) from who processes it on another's behalf (the processor). Postline has both roles:

  • Your account and workspace data (name, e-mail, members, subscription): NZK is the controller.
  • Workspace content (brands, topics, articles, images and what your team records) and any personal data in it: the customer company is the controller, and NZK is the processor, handling that data only to provide the service and as the company instructs.

Data we process

  • Account: name, e-mail, photo and language. If you sign in with Google or Apple, we receive your name, e-mail and photo from them.
  • Workspace and team: workspace name, time zone, members, roles and invitations (with the invited e-mail).
  • Session and security: the IP address and browser (user agent) of each session, and a record of the actions taken in the workspace.
  • Brand and content: the business's URL and description, the public pages you choose for Postline to read, the editorial identity, topics, editorial plans, articles and their revisions, approvals, schedules, images and review comments.
  • Integrations: the destinations you connect (Next.js site, WordPress, Ghost, LinkedIn and others) and their credentials, stored encrypted; hosted blogs' domains; and, if you connect them, metrics from sources such as Google Analytics.
  • Artificial intelligence: the instructions and context sent to generate each text or image, and each call's usage (model and cost).
  • Payment: the Stripe customer id, the plan, the subscription status and the credits bought. Card details stay with Stripe; we never receive them.
  • Site and app usage: page views and usage events, as the Cookies section describes.
  • Ad click: if you arrive from one of our ads, the click's identifier (such as Google's gclid), the campaign's UTM tags and the page you landed on; and, when you create an account, whether that account came from an ad.

What we use it for, and on what legal basis

  • Providing the contracted service (performance of contract): signing in, generating, reviewing, scheduling and publishing content, and charging the subscription.
  • Security and fraud prevention (legitimate interest and legal obligation): sessions, usage limits and access logs, which the law (Marco Civil da Internet) requires us to keep.
  • Service e-mails (performance of contract): sign-in links, invitations, receipts and billing notices.
  • Improving the product (legitimate interest): usage metrics without name or e-mail. Those the browser sends can be turned off in the cookies.
  • Legal and tax obligations: invoices, payment records and requests from authorities.
  • Measuring our ads (legitimate interest, which you can turn off): telling Google Ads which of our ads led to an account, the first article and a paid subscription, so we stop paying for the ones that bring no one. Turn it off in the cookies.

We do not sell personal data. The only advertising use is measuring our own ads, as described above.

Artificial intelligence

To generate text, Postline uses the OpenAI API; to generate images, fal's, both in the United States. Any other model provider NZK hires will be listed in this policy.

We send these providers only what each generation needs: the brand's identity, the topic, the brief and excerpts of the chosen sources. NZK does not use your data to train models.

Who we share it with

We use suppliers that process data on our behalf (sub-processors), each only for its part of the service:

  • OpenAI and fal: the AI features described above.
  • Stripe: payments, subscriptions and the billing portal.
  • Resend: sending the service's e-mails.
  • Cloudflare (R2): storage of images and files, and database backups.
  • PostHog: site and app usage metrics (events without name or e-mail, with the source IP address).
  • Google Ads: if you came from one of our ads and advertising cookies are on, the conversions of your account (account created, first article ready, paid subscription with its amount), with the ad click's identifier and your e-mail as a SHA-256 hash (enhanced conversions), never the e-mail itself.
  • Google Analytics 4: if analytics cookies are on, the pages you see on our site (postline.com.br), the time and where the visit came from, so we understand where visitors come from. We do not send your name or e-mail.
  • Google and Apple: only if you choose to sign in with them.
  • Server provider: the servers where Postline and its database run.

We also send content wherever your team directs: the connected sites and channels, webhooks and the API. Those destinations are the customer company's choice.

Otherwise, we share data only when the law or an order from a competent authority requires it.

Data from your Google accounts

If you connect the Google Search Console or Google Analytics 4 of a site of yours, Postline asks Google for read-only access (webmasters.readonly and analytics.readonly) and reads only that site's page numbers: clicks, impressions, CTR, position, sessions and conversions.

We use this data only to show you, inside Postline, how the published articles perform. We do not sell it, use it for ads, pass it to third parties or use it to train artificial intelligence models.

Postline's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect at any time in Integrations or at myaccount.google.com/permissions. When you disconnect, we delete the stored access and stop reading the data.

International transfers

Some suppliers (such as OpenAI, fal, PostHog, Google, Stripe, Resend and Cloudflare) may process data outside Brazil, mainly in the United States. In those cases, the transfer follows what the LGPD allows, such as performing the contract with you and contractual clauses with those suppliers.

Cookies

We use few cookies, all our own (first-party):

  • postline.session_token: keeps you signed in to the app. Necessary; lasts 7 days and renews with use.
  • postline.state: protects signing in with Google or Apple. Necessary; lasts a few minutes.
  • postline_ephemeral: holds temporary data while you create the workspace. Necessary; lasts a few minutes.
  • analytics_consent: stores your cookie choice. Necessary; lasts 180 days.
  • NEXT_LOCALE, theme and browser_tz: remember your language, theme and your browser's time zone.
  • ph_postline_ph: identifies the browser anonymously in usage metrics (PostHog). Analytics; lasts up to a year.
  • postline_ads_click: remembers the ad you arrived from (the click's identifier and UTM tags), so your sign-up can be credited to it. Advertising; lasts 90 days.
  • postline_ads_signal: carries that ad click through signing in with Google or Apple. Advertising; lasts 10 minutes.
  • Google tag (gtag.js), on the site only: with advertising cookies on, Google Ads cookies to measure our ads; with analytics cookies on, Google Analytics 4 cookies to count visits and page views. Set by Google; each only with its own category on.

Usage metrics and advertising cookies start on and you can turn each of them off at any time, in the cookie notice or in the cookie preferences below. Browsers that send Global Privacy Control or Do Not Track have both off. We do not record sessions' screens.

How long we keep it

  • Content, brands and integrations: while the workspace exists.
  • E-mail sign-in link: 15 minutes, single use.
  • Ad click and ad conversions: the click stays in your browser for 90 days; the conversions are offered to Google Ads for 90 days after they happen, then no longer. They are erased with your user account.
  • Payment and access records: for as long as the law requires.

The owner can ask for the workspace to be deleted at contato@postline.com.br: the data and files are erased, and backups expire on their normal cycle. To close your user account, write to the same address.

Security

All traffic uses HTTPS. Integration credentials are stored encrypted, and the platform's in a secrets vault. Each workspace is isolated from the others in the database, each member sees only what their role allows, and the database has continuous backups.

No system is infallible. If we notice an incident that may cause relevant risk or harm, we notify those affected and the ANPD as the LGPD requires. If you notice something, write to contato@postline.com.br.

Your rights

Under the LGPD, you may ask for:

  • confirmation that we process your data, and access to it;
  • correction of incomplete, inaccurate or outdated data;
  • anonymisation, blocking or deletion of unnecessary or excessive data, or data processed unlawfully;
  • portability of your data;
  • information about whom we share it with;
  • review of decisions made solely by automated processing;
  • withdrawal of consent, where processing depends on it.

Make the request at contato@postline.com.br. We may ask you to confirm your identity first. You may also complain to the National Data Protection Authority (ANPD).

Children and teenagers

Postline is a service for businesses and is not intended for anyone under 18.

Changes to this policy

When Postline starts collecting, keeping or sharing data differently, this policy changes with it, with a new date at the top. Relevant changes are announced by e-mail or in the app before they apply. See also the Terms of Use.

Contact

NZK TECNOLOGIA LTDA, responsible for Postline. E-mail: contato@postline.com.br. Requests about personal data, including to the data protection officer, go to the same address.