This Privacy Policy describes how Easy Post ("we", "us", "our"), available at easy-post.app, collects, uses, and protects your information when you use our platform.
Data Controller
The data controller for this website is:
TECH BUDDIES LTD
Registered in England and Wales
Company number: 15175545
Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Contact: hello@techbuddies.pro
1. Information We Collect
1.1 Account Data
- Name and email — obtained from your Google account when you sign in via Google SSO.
- Telegram chat_id and username — when you link your Telegram account to your profile for notifications.
- Subscription data — plan and subscription status from LemonSqueezy. We do not store payment card details.
1.2 Project and Channel Data
- Project names, channel settings, and configurations
- Bot tokens (BYO) — stored with restricted access
- Form and action configurations
- Webhook URLs configured by you to receive data
1.3 Submission Data
When users interact with your bot, we collect data submitted through forms:
- Text fields (names, descriptions, etc.)
- Photos and images
- Phone numbers
- Location data
- Ratings and button selections
1.4 Marketplace Data
If the marketplace addon is enabled: listing titles, descriptions, prices, photos, and seller contact information.
1.5 Logs and Analytics
- User activity logs (actions within the platform)
- Action execution logs
- Content moderation logs
- Content generation tasks and results
2. How We Use Your Data
- Providing and maintaining the platform
- Processing submissions and publishing content to channels
- Sending notifications about new submissions via Telegram
- Processing payments and managing subscriptions
- Monitoring service health and troubleshooting errors
- Improving the platform based on usage patterns
3. Third Parties
We share data with the following third-party services solely to operate the platform:
- Telegram Bot API — sending and receiving messages, publishing content, notifications
- Google — authentication via Google SSO (name, email)
- LemonSqueezy — payment processing and subscription management
- n8n webhooks — content generation, if you have configured workflows
- Custom webhooks — submission data is sent to URLs you configure in actions
We do not sell your data to third parties. We do not use advertising or tracking services.
4. Data Security
- All traffic is encrypted via HTTPS/TLS
- Billing webhooks are verified via HMAC-SHA256
- Role-based access control (admin, owner, member, user)
- Bot tokens are stored with restricted access
- OAuth tokens have limited scopes (read/write)
- MCP API is protected by bearer authentication and plan checks
5. Data Retention
- Account data is retained until you delete your account
- Submissions and posts are retained until the channel or project is deleted
- Content generation tasks are automatically cleaned up after 30 days
- Deleting a project or channel cascades to remove all associated data
- Activity logs are retained for operational auditing
6. Your Rights
You have the right to:
- Access — view your data through the dashboard
- Deletion — delete projects, channels, and all associated data via the UI. Cascade deletion ensures complete removal
- Unlinking — unlink your Telegram account at any time via profile settings
- Export — contact us to request an export of your data
- Opt-out — disable notifications by unlinking your Telegram account
7. Cookies
We use only session cookies (Laravel) required for authentication and platform functionality. We do not use advertising, tracking, or analytics cookies.
8. Bot Users
When someone interacts with a Telegram bot connected to Easy Post:
- We store their Telegram chat_id and username for bot functionality
- Form data is saved as submissions
- Photos and media are stored for submission processing
- The channel owner decides whether to approve or reject the submission
- Approved submissions may be published to the channel or sent to webhooks
Bot users do not create an account on Easy Post. Their data is managed by the channel owner.
9. API and MCP
If you use the MCP API or OAuth integrations:
- OAuth tokens have limited scopes (mcp:read, mcp:write)
- API access is gated by your subscription plan
- All API requests are authenticated
- You are responsible for securing your tokens
10. Children
Easy Post is not intended for individuals under 16 years of age. We do not knowingly collect data from children. If you believe a child has provided us with data, contact us to have it removed.
11. International Data Transfers
Your data may be processed on servers located outside your country of residence. By using Easy Post, you consent to such transfers. We take reasonable steps to protect your data in accordance with this policy.
12. Changes to This Policy
We may update this policy. For material changes, we will notify you via the platform or email. Continued use after changes are posted constitutes your acceptance of the updated policy.
13. Contact
For privacy-related questions:
- Email: hello@techbuddies.pro
- Telegram: @grulx
- Platform: easy-post.app