Privacy Policy

Remood Ltd is the controller responsible for personal data processed through PostMentor.

PostMentor is a product of Remood Ltd.

Depending on how you use the product, we may collect:

• Account data: name, email address, account identifiers, and profile details from email signup, Google sign-in, or LinkedIn sign-in.
• LinkedIn connection data: LinkedIn profile identifiers, permissions granted, and the tokens needed to post or schedule content when you connect LinkedIn.
• Content data: drafts, saved posts, AI analysis results, voice profile settings, scheduled posts, and any content you submit to the public LinkedIn Post Checker.
• Billing data: plan, subscription state, payment processor identifiers, and invoice-related records. Card details are handled by our payment processor, not stored by us.
• Support data: support messages, topic, subject, current page URL, and optional screenshots or attachments you submit. Attachments are stored in a private bucket and accessed through time-limited signed links.
• Technical and usage data: IP address, browser type, device information, user agent, session and request identifiers, feature usage, error details, timestamps, and anti-abuse/rate-limit data.

We use personal data to provide and operate the service. Each purpose is listed below with its legal basis under UK GDPR:

• Create and manage your account, authenticate you, and keep the service available to you. (Contract)
• Generate drafts, analysis, scoring, comments, and other AI-assisted writing features. (Contract)
• Process subscription checkout, renewal, cancellation, invoices, and refund requests. (Contract)
• Enable LinkedIn posting, scheduling, and connection management when you choose to use those features. (Contract)
• Respond to support requests and review optional attachments you send us. (Contract / Legitimate interests)
• Protect the service, prevent abuse, enforce our terms, debug errors, and maintain logs needed for security and operations. (Legitimate interests)
• Run optional product analytics only when you consent to analytics storage and tracking. (Consent)
• Run optional affiliate referral and paid conversion attribution only when you consent to advertising storage and tracking. (Consent)
• Meet legal, tax, accounting, and regulatory obligations. (Legal obligation)

We do not sell your personal information. We share data only when needed to deliver the service, comply with law, protect the service, or when you choose to use a feature that requires sharing.

• Cloud infrastructure and database providers: hosting, authentication, database, storage, delivery, and application operations.
• Payment processors: subscription checkout, billing, invoices, payment methods, and customer portal services. Card details are handled by our payment processor, not stored by us.
• AI service providers: AI-assisted scoring, drafting, and analysis features. Draft text and related content are sent to our AI provider for processing via API. Our current AI provider processes data in the United States and does not use API inputs or outputs to train its models.
• Analytics providers: optional product analytics and session replay, activated only when you consent.
• Affiliate attribution providers: referral click and paid conversion attribution for our affiliate program, activated only when you consent to advertising storage and tracking.
• Email delivery providers: transactional emails such as support confirmations and account notifications.
• Security and anti-abuse providers: bot protection and abuse prevention on public forms.
• Social platform integrations: authentication, connection management, posting, and scheduling when you choose to connect a social account.
• Authentication providers: third-party sign-in when you choose to use it.

A current list of our named sub-processors is available on request by contacting privacy@postmentor.app.

If you create a feedback share link, anyone with the link can access that read-only feedback snapshot until you revoke it or the underlying content is removed.

In the event of a merger, acquisition, or sale of all or part of our assets, personal data may be transferred to the successor entity. We will notify affected users before their data becomes subject to a different privacy policy.

We use a consent-based model for optional storage and tracking. Optional analytics and affiliate attribution are off by default until you choose otherwise. Where required, we honour browser privacy signals such as Global Privacy Control.

Strictly necessary technologies

• Authentication, login session handling, and core service continuity.
• Consent preference storage and basic preference flags needed for your chosen experience.
• Security, rate limiting, bot protection, and fraud/abuse prevention controls.

Optional analytics

If you opt in, we use product analytics and session replay tools to understand product usage and improve the service. You can withdraw analytics consent at any time from Cookie Settings.

Optional affiliate attribution

If you opt in to advertising storage and tracking, we may use referral cookies or similar storage to attribute affiliate links and paid conversions. This helps us operate our affiliate program and calculate commissions without enabling it for users who reject advertising storage.

We also maintain server-side security and operational logs regardless of your analytics preferences. These logs support troubleshooting, rate-limit enforcement, and operational monitoring.

PostMentor uses AI models to score, analyse, and generate draft content. When you use these features, the text you submit is sent to our AI provider for processing and the results are returned to you.

AI outputs, including scores, suggestions, and generated text, are advisory only. They do not produce legal effects or similarly significant decisions about you. You remain responsible for reviewing and deciding whether to use any AI-generated content.

If you have questions about how automated processing applies to your data, or if you wish to contest an AI output, contact privacy@postmentor.app.

Some of our processors operate from, or may access data from, countries outside the United Kingdom. Where that happens, we use contracts and other recognised safeguards intended to protect transferred personal data.

We use technical and organisational measures designed to protect personal data, including encryption in transit, access controls, and regular review of our security practices. No method of transmission or storage is completely secure, but we work to maintain protections appropriate to the data we handle.

If we become aware of a personal data breach that is likely to result in a risk to your rights, we will notify affected users without undue delay and report to the relevant supervisory authority as required by law.

We keep personal data only for as long as it is needed for the purposes described above. Typical retention periods are:

• Account, content, and analysis data: kept until you delete them or delete your account.
• Billing and tax records: up to 7 years after the relevant transaction, in line with UK tax and accounting requirements.
• Security and server logs: up to 90 days, unless a longer period is needed to investigate a specific incident.
• Support records: up to 2 years after the request is resolved.
• Optional analytics data: follows our configured analytics provider retention settings while analytics consent is enabled.
• Optional affiliate attribution data: follows our configured attribution provider retention settings while advertising consent is enabled, and may be retained where needed for commission, billing, tax, or dispute records.

Account deletion removes core account content from our primary application systems, including saved posts, associated analysis, drafts, and your user record. Some billing, security, support, processor-side, and backup records may remain afterwards where we need them for legal, operational, or fraud-prevention reasons.

Depending on applicable law, you may have the right to:

• Access a copy of your personal data.
• Correct inaccurate or incomplete data.
• Request deletion of data in certain circumstances.
• Object to or restrict some processing.
• Request portability of data you provided to us.
• Withdraw consent for optional analytics, affiliate attribution, or other consent-based processing at any time.

To exercise these rights, contact privacy@postmentor.app. We aim to respond within one month. If we need more time, we will let you know and explain why.

You also have the right to complain to the UK Information Commissioner's Office (ICO). More information is available at ico.org.uk.

PostMentor is intended for adults and is not directed to children under 18. If you believe a child has provided personal data to us, please contact us so we can review and remove it where appropriate.

We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and post the revised policy here.

If you have questions about this policy or our data practices, contact us at:

Our full registered details are listed in Section 1.