Privacy Policy

PostaraTrend Technologies Inc. · Effective: 6 May 2026 · Last updated: 6 May 2026

PostaraTrend Technologies Inc. ("PostaraTrend," "we," "us," or "our") respects your privacy. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, how long we keep it, and the choices and rights you have.

1. Who we are

PostaraTrend Technologies Inc. is a corporation incorporated under the Business Corporations Act (Alberta, Canada), with its registered office in Calgary, Alberta, Canada. We operate an automated, AI-powered social media content pipeline that helps brands publish trending short-form video content across major social platforms.

For the purposes of Canadian privacy legislation, the European Union General Data Protection Regulation ("GDPR"), and the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), PostaraTrend Technologies Inc. is the controller (or equivalent) of the personal information described in this Policy.

2. Scope

This Policy applies to personal information we collect through:

• our website at postaratrend.ca and any subdomains (the "Website");
• our software-as-a-service platform and content automation pipeline (the "Service");
• our applications registered with social media platforms (including, without limitation, the "PostaraTrend Publisher" application registered on Meta for Developers); and
• our communications with you by email, social media, or other channels.

This Policy does not apply to third-party websites, applications, or services that may be linked from our Website or Service. Those third parties have their own privacy practices, and we encourage you to review them.

3. Personal information we collect

3.1 Information you provide directly

• Contact and inquiry information — name, email address, phone number, company name, role, and any message content you submit through forms on our Website or by email.
• Account information — when you create an account on the Service, your name, email, password (stored as a salted hash), billing address, and time zone.
• Billing information — when you subscribe to a paid plan, payment information processed by our payment processor. We do not store full payment card numbers on our own servers.
• Customer support and communications — records of your communications with us, including emails, chat messages, and support tickets.

3.2 Information you authorise us to collect from third-party platforms

When you connect a social media account (for example, a Facebook Page, Instagram Business Account, TikTok Creator account, YouTube channel, or LinkedIn Page) to the Service, you grant us access — through that platform's official API and only within the scopes you approve — to information such as:

• account profile information (name, ID, profile image, account type);
• content you have published or are authorised to publish (posts, captions, media metadata);
• engagement metrics (impressions, reach, likes, comments, shares, saves, video views);
• access tokens issued by the platform, which we store securely and use only to perform the actions you have configured.

We access this information solely to operate the Service on your behalf. We do not sell access tokens. You may revoke our access at any time from your account settings on the relevant platform or by disconnecting the account from within our Service.

3.3 Information we collect automatically

• Usage and device information — IP address, approximate location derived from IP, browser type and version, operating system, device identifiers, pages viewed, links clicked, referring URL, timestamps, and similar technical information.
• Cookies and similar technologies — see Section 8 (Cookies).
• Service logs — when you use the Service, we log actions taken (workflow runs, content generated, posts published, errors encountered) for security, debugging, billing, and audit purposes.

3.4 Information about third-party content

To identify trending topics, the Service processes information from publicly available sources (for example, public Facebook Pages, public news feeds, and other public web content) using third-party data providers including Apify. The Service is configured to access only publicly available content and does not attempt to access content that is private, restricted, or behind authentication. We do not target, profile, or build datasets on individual private persons through this process.

4. How we use personal information

We use personal information for the following purposes:

• Service delivery — to create and manage your account, authenticate you, run automation workflows you configure, generate and publish content on your authorised platforms, and provide customer support.
• Billing and account administration — to process subscription payments, send invoices, and manage refunds, disputes, and renewals.
• Communications — to respond to inquiries, send service announcements, send transactional notifications (for example, publication failures or quota alerts), and, where permitted, send marketing communications. You can opt out of marketing communications at any time.
• Improvement and analytics — to understand how the Service is used, identify defects, measure reliability, and improve features. Where reasonable, we use aggregated or de-identified data for these purposes.
• Security and fraud prevention — to detect, prevent, and respond to abuse, fraud, unauthorised access, and other security incidents.
• Legal and regulatory compliance — to comply with applicable laws, respond to lawful requests from public authorities, enforce our Terms of Service, and protect our rights, property, and the safety of our users and others.

Under the GDPR, our legal bases for processing are: (a) performance of a contract with you, (b) your consent (which you may withdraw at any time), (c) compliance with legal obligations, and (d) our legitimate interests in operating, securing, and improving our Service, balanced against your rights and interests.

5. How we share personal information

We do not sell personal information. We share personal information only in the following circumstances:

• Service providers (processors) — we share information with vendors who perform services on our behalf under written agreements that restrict their use of the information. Categories include cloud hosting and infrastructure, AI and content-generation providers (including Anthropic), media-rendering providers (including Creatomate), data and trend providers (including Apify), workflow automation infrastructure, payment processors, email and customer-communication providers, analytics providers, and security and monitoring providers.
• Social media platforms — when you authorise us to publish on your behalf, the relevant platform (for example, Meta, TikTok, YouTube, LinkedIn) will receive the content you instruct us to publish and associated metadata. Each platform has its own privacy policy.
• Legal, safety, and compliance — we may disclose information when we believe in good faith that disclosure is required by law, legal process, or governmental request, or is necessary to protect the rights, property, or safety of PostaraTrend, our users, or others.
• Business transfers — in the event of a merger, acquisition, financing, reorganisation, or sale of all or part of our business, personal information may be transferred as part of that transaction. We will notify you and provide choices where required by law.
• With your consent or at your direction — we will share personal information for any other purpose disclosed to you and with your consent.

6. International transfers

PostaraTrend operates in Canada and serves clients in multiple countries, including Nigeria, the United States, and New Zealand. Your personal information may be processed and stored in countries other than the country in which it was collected, including in Canada, the United States, and other jurisdictions where our service providers operate. Privacy laws in these countries may differ from those in your country.

Where required by applicable law, we put in place appropriate safeguards for international transfers — for example, standard contractual clauses with our service providers, or transfers to jurisdictions that have been recognised as providing adequate protection.

7. How long we keep personal information

We retain personal information only as long as is necessary for the purposes for which it was collected, to comply with our legal, accounting, and reporting obligations, and to resolve disputes and enforce our agreements. Specific retention practices include:

• Account information — for the duration of your account plus a reasonable period after closure to address any disputes, refunds, or legal matters.
• Billing and tax records — for the period required by applicable tax and corporate law (in Canada, generally six years).
• Service logs — typically up to 24 months, unless retained longer for security investigations or legal hold.
• Marketing inquiries — until you ask us to delete them or after a reasonable period of inactivity.
• Anonymised or aggregated data — may be retained indefinitely as it does not identify you.

You may request earlier deletion subject to our legal obligations — see Section 9.

8. Cookies and similar technologies

Our Website and Service use cookies and similar technologies (including local storage, session storage, and pixel tags) to operate, secure, and improve the user experience. We use:

• Strictly necessary cookies — required for core functionality such as authentication, security, and load balancing. These cannot be disabled in our systems.
• Functional cookies — to remember preferences such as language and time zone.
• Analytics cookies — to understand aggregate usage patterns and improve the Service.

You can control cookies through your browser settings. Disabling certain cookies may affect functionality. Where required by law, we will request your consent before placing non-essential cookies.

9. Your rights and choices

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — request that we correct inaccurate or incomplete information.
• Deletion — request that we delete your personal information, subject to our legal obligations.
• Restriction or objection — request that we restrict or stop certain processing, including direct marketing.
• Portability — request a portable copy of certain information you provided to us.
• Withdraw consent — where we rely on consent, withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
• Complain to a regulator — including the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner of Alberta, your applicable EU/UK supervisory authority, or the California Privacy Protection Agency.

To exercise these rights, contact us at inquiries@postaratrend.ca. We will respond within the timeframes required by applicable law. We may need to verify your identity before fulfilling certain requests.

California residents: we do not sell or share your personal information for cross-context behavioural advertising, as those terms are defined under the CCPA/CPRA.

10. Data deletion and account closure

You may close your account at any time from your account settings or by contacting us. Upon closure, we will delete or anonymise your personal information within a reasonable period, except where retention is required for legal, regulatory, accounting, security, or dispute-resolution purposes.

To request deletion of personal information specifically associated with social media authorisations you have granted to our applications, please email inquiries@postaratrend.ca with the subject line "Data Deletion Request" and indicate the platform and account concerned. You may also revoke our application's access from within the relevant platform's settings, which will prevent any further data access.

11. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorised access, use, disclosure, alteration, and destruction. These include encryption of data in transit, access controls, multi-factor authentication for administrative access, secure storage of credentials, audit logging, and routine security reviews. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

12. Children's privacy

The Service is not directed to, and we do not knowingly collect personal information from, children under the age of 18. If you believe we have inadvertently collected personal information from a child, please contact us and we will take steps to delete it.

13. Third-party services and links

The Service relies on or interacts with third-party services, including Meta (Facebook, Instagram), TikTok, YouTube, LinkedIn, Anthropic, Apify, Creatomate, and others. Your use of those services is governed by their own terms and privacy policies. We encourage you to review them.

14. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this Policy and, where required by law or appropriate, provide additional notice (for example, by email or a notice on our Website). Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

15. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of personal information, please contact us:

This Privacy Policy is provided in English. In the event of any conflict between translations, the English version prevails.