Your ideas. Your information.

Who to contact

For privacy questions, access requests, corrections, exports, account deletion, or complaints, email info@growyourwebs.com. Use the email associated with your account so we can verify your request without asking you to send a password. Company information is available at growyourwebs.com.

Information the preview handles

• Account email, account identifier, sign-in details and, where a configured provider returns it, display name.
• Brand names, colors, voice preferences, language, timezone, calendar topics, dates, post captions, notes, approval status and Canva design links that you save.
• Necessary session information stored by the authentication service and in your browser, along with technical request, security and hosting logs.
• Support messages and the contact details you choose to share when you contact GrowYourWebs.

Calendar files are parsed in your browser. When you confirm an import, the selected calendar records are sent to the workspace database; the original file is not uploaded to Postlane storage by this import flow. Do not include passwords, payment-card information, sensitive personal records, or information you are not authorized to share.

Why we use it

We use this information to authenticate your account, save and display your workspace, provide drafts and approvals, respond to requests, prevent misuse, and operate and troubleshoot the service. Where local law requires a legal basis, the relevant basis depends on the purpose: providing the service you request, legitimate security and operational interests where permitted, compliance with legal obligations, or your consent where required. Optional marketing is not part of this preview.

Service providers and international processing

Postlane uses Supabase for authentication and its PostgreSQL database; the configured database is in the Mumbai region. The website is delivered through OpenAI Sites and its Cloudflare-based hosting infrastructure. Authentication, hosting, support, and operational processing may involve other countries. A database region is not a promise that every copy or category of information stays only in that country.

Canva links open Canva, which operates under its own terms and privacy notice. Instagram publishing, automatic Canva generation and live calendar synchronization are not connected in the current preview. We will update this notice before introducing materially different processing. Google sign-in is available only after its provider is configured; if used, it provides account identity information rather than access to your calendar or social media content.

AI images, API keys and payments

When you request an AI image, Postlane sends your prompt and selected brand name, industry, color and voice to OpenAI. You can choose a customer-owned OpenAI key or configured Postlane credits. Customer keys are encrypted in server-side Cloudflare D1 storage using authenticated encryption; the application displays only the final four characters. We decrypt a key only to make your requested provider call. It is not stored in browser local storage or returned by a settings API. Removing it from Postlane does not revoke it at OpenAI or stop an already-running request.

Generated images are stored in private Cloudflare R2 storage. Image prompts, request status, technical usage, credit balances and order records are stored server-side in D1 and tied to your Supabase account identifier. Image downloads require your authenticated account. You can delete generated images from history; used credits are not restored for deleting a successful image. Cloudflare services may process information internationally.

When payments are enabled, Dodo Payments receives your account email and an internal order reference to create checkout. Dodo collects payment and billing information in its hosted checkout; Postlane does not receive your full card details. Postlane retains order references, payment identifiers and credit records to deliver purchases, prevent duplicate grants and investigate refunds or disputes. BYOK requests are billed by OpenAI under your provider account terms. Contact support for account deletion, including AI and billing records; some transaction records may need lawful retention.

Cookies, storage, analytics and sharing

The application uses necessary authentication storage. Fonts are served with the website. We have not added advertising pixels or optional analytics to Postlane. Hosting providers may keep necessary operational records. See cookies and local storage. We do not operate a personal-data sale or advertising-sharing feature. Information may be disclosed to service providers needed to operate the product or where required by applicable law.

Retention and deletion

Workspace records remain until you delete them or GrowYourWebs processes a verified account or deletion request, subject to lawful retention needs. You can delete individual posts in the workspace and export the calendar. Full account deletion is currently handled through support; it is not an automatic in-app account-delete feature. Provider logs and backups may follow their own retention and deletion cycles. We will explain any applicable exceptions when responding to a request.

Your choices and rights

Depending on the laws that apply to you, you may have rights to access, correct, export, delete, restrict, or object to processing; withdraw consent where processing relies on it; and complain to an applicable supervisory authority. Contact us using the address above. We may need proportionate identity verification and will handle requests within applicable legal deadlines. Do not send identity documents unless specifically necessary and requested through an appropriate channel.

Business customers and other people’s data

If you manage a brand for a client, you must have permission to provide its content and any personal information. GrowYourWebs handles account administration for its own service; handling personal information within customer content may require a separate data-processing agreement. Contact us before using the preview for regulated or sensitive processing.

Children and changes

Postlane is intended for business users aged 18 or over, not children. Contact us if a child has provided information. We will update this notice when the product or its processing changes, with a new date and additional notice where required.