Privacy Policy

PostFlow by BrainTop

Last updated: April 2026

1. Introduction and Consent

PostFlow, operated by BrainTop Ltd. ("the Company"), is committed to protecting user privacy. Use of the Service constitutes full consent to this Privacy Policy. If you do not agree — please refrain from using the Service.

2. Types of Information We Collect

2.1 Information Provided by You • Name, email address, and login credentials • Account details and user settings • Content created, uploaded, or sent through the system • Payment details (processed by an external provider only)

2.2 Information from External Accounts When connecting social networks, we may collect: • Account identifiers • Access permissions (tokens) • Information required for content publishing

2.3 Technical and Automatic Information • IP address • Device type and browser • Usage and behavior data • Activity timestamps and technical logs

3. Use of Information

Information is collected for the following purposes:

Operating the Service and providing functionality
Content creation and publishing
Improving the system and developing AI capabilities
Information security and detecting unusual activity
Statistical data analysis
Technical support

The Company may use information in anonymous form for research, improvement, and marketing purposes.

4. Use of Third-Party Services

The Service uses third-party services, including:

AI providers for content creation
Social networks (Facebook, Instagram, LinkedIn, TikTok)
Payment providers (YaadPay)
Hosting and server services

Use of these services is subject to their respective privacy policies.

5. Transfer of Information Outside Israel

Information may be processed and stored on servers outside Israel. Use of the Service constitutes consent to this data transfer. The Company is not responsible for the privacy policies of third parties.

6. Responsibility for External Accounts

When connecting social network accounts:

The user grants access permissions voluntarily
The user is responsible for all actions performed through their accounts
The Company is not responsible for breaches, unauthorized use, or account suspensions

7. Data Retention

Information will be retained as long as the account is active
After account deletion, information will be deleted within up to 30 days
The Company may retain anonymous or statistical data without limitation

The user is responsible for backing up their content.

8. Information Security

The Company employs reasonable measures to secure information, including:

SSL encryption
Password encryption (bcrypt)
Access control
Activity monitoring

However, absolute security cannot be guaranteed. The user acknowledges and accepts this risk.

9. Cookies

The system uses cookies for:

Login and session management
Saving user preferences
Proper operation of the Service

No advertising cookies are used without explicit consent.

10. Information Sharing

The Company does not sell personal information. Information may be shared in the following cases:

To service providers for operational purposes
In compliance with legal requirements
For legal defense purposes
As part of structural changes (merger/acquisition)

11. User Rights

In accordance with law, users have the following rights:

Access to information
Correction of information
Deletion
Objection to use

You may contact us to exercise these rights.

12. Limitation of Liability

The Company is not responsible for:

Loss of information
Use of content
Third-party activity
Breaches or unauthorized access

Use of the Service is at the user's sole responsibility.

13. Changes to Policy

The Company may update this policy at any time. Continued use constitutes consent to the update.

14. Contact

For questions, please contact us through the website.