Post Pip

Post more, pay less

Purchase

1. Introduction

Tercel Group (“we”, “us”, “our”) operates the PostPip social media post scheduler application (“the Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using PostPip, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please discontinue use of the Service immediately.

2. Information Controller

Data Controller: Tercel Group
Contact Email: Support@tercelgroup.com
Location: United Kingdom

3. What Information We Collect

3.1 Information Collected by Stripe (Our Payment Processor)

When you subscribe to PostPip, payment processing is handled by Stripe, Inc. Stripe collects:

  • Your email address (required for subscription management and license delivery)
  • Payment card information (processed and stored solely by Stripe, not by us)
  • Billing address information
  • Transaction details and payment history

We receive from Stripe only:

  • Your email address
  • Subscription status (active, cancelled, expired)
  • Payment success/failure notifications

Stripe’s handling of your payment information is governed by their Privacy Policy, available at https://stripe.com/privacy. Stripe is certified as a PCI Service Provider Level 1, the most stringent level of certification.

3.2 License Key Information

We generate and validate license keys that contain:

  • Your email address (in encrypted form)
  • License expiration date
  • Cryptographic signature for validation

License keys are stored locally in your web browser and validated through our Cloudflare Worker service every 7 days.

3.3 Information Stored Locally in Your Browser

PostPip stores all your content data locally in your web browser using:

  • LocalStorage: Application settings, preferences, channel configurations, tags, and license information
  • IndexedDB: Your social media posts (text, scheduling information) and uploaded media files (images, videos)

Important: All your post content, media files, and scheduling information remain exclusively on your device. We do not have access to, cannot view, and do not store any of this information on our servers.

3.4 Information We Do NOT Collect

PostPip does not collect:

  • Analytics or tracking data
  • Cookies for tracking purposes
  • Your social media posts or content
  • Your uploaded media files
  • Usage statistics or behavioral data
  • Device information or IP addresses
  • Location data

4. How We Use Your Information

We use the limited information we collect solely for:

  • Subscription Management: Processing your subscription payments and managing your account status
  • License Validation: Generating, delivering, and validating your monthly license keys
  • Customer Support: Responding to your inquiries and providing technical assistance
  • Service Communications: Sending subscription-related emails (payment confirmations, renewal reminders, license key delivery)
  • Legal Compliance: Fulfilling our legal obligations under UK law

5. Legal Basis for Processing (UK GDPR)

Under UK GDPR Article 6, we process your personal data based on:

  • Contract Performance (Article 6(1)(b)): Processing necessary to provide the subscription service you’ve purchased
  • Legitimate Interests (Article 6(1)(f)): Preventing unauthorized use of the Service and maintaining service security
  • Legal Obligation (Article 6(1)(c)): Complying with UK tax and financial regulations

6. Data Sharing and Disclosure

We share your personal data only with:

  • Stripe: For payment processing (required for subscription service)
  • Cloudflare: For license key validation via Cloudflare Workers (UK/EU data centers)

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We may disclose your information if required by law or in response to valid legal requests by public authorities.

7. Data Retention

  • Active Subscriptions: We retain your email address and subscription information for the duration of your active subscription
  • Cancelled Subscriptions: Data is retained for 6 years after cancellation to comply with UK financial record-keeping requirements
  • License Keys: Stored locally in your browser until you clear browser data or uninstall the application
  • Your Content: All posts and media remain solely in your browser’s local storage and are deleted when you clear browser data

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of Access (Article 15): Request a copy of the personal data we hold about you
  • Right to Rectification (Article 16): Request correction of inaccurate or incomplete data
  • Right to Erasure (Article 17): Request deletion of your personal data (“right to be forgotten”)
  • Right to Restriction (Article 18): Request limitation of processing of your data
  • Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format
  • Right to Object (Article 21): Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time (by cancelling your subscription)

To exercise any of these rights, please contact us at Support@tercelgroup.com. We will respond within one month as required by UK GDPR.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

  • Encryption: License keys use HMAC-SHA256 cryptographic signatures
  • Secure Communication: All data transmissions use HTTPS/TLS encryption
  • Access Controls: Strict access limitations to personal data
  • Regular Security Reviews: Annual rotation of cryptographic secrets
  • Data Minimization: We collect only the minimum data necessary for service provision

Your content data (posts, media) is stored exclusively in your browser’s local storage, which is protected by your browser’s security features and your device’s access controls.

10. International Data Transfers

As we operate in the UK and use service providers with UK/EU data centers:

  • Stripe processes payments in compliance with UK GDPR and maintains UK operations
  • Cloudflare Workers can be configured to process data within the UK/EEA
  • No personal data is transferred outside the UK/EEA without appropriate safeguards

11. Children’s Privacy

PostPip is not intended for use by individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete such information promptly.

12. Cookies and Tracking

PostPip does not use cookies for tracking or analytics purposes. The application uses browser LocalStorage and IndexedDB solely for storing your application data and preferences locally on your device.

13. Third-Party Links

Our Service may contain links to third-party websites (such as Stripe’s payment pages). We are not responsible for the privacy practices of these third-party sites. We encourage you to read their privacy policies.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

  • Updating the “Last Updated” date at the top of this policy
  • Displaying a notice within the application
  • Sending an email to your registered email address for significant changes

Your continued use of the Service after such modifications constitutes acceptance of the updated Privacy Policy.

15. Data Protection Officer

For questions regarding this Privacy Policy or our data protection practices, please contact:
Email: Support@tercelgroup.com
Response Time: Within 48 hours for urgent matters, within 5 business days for general inquiries

16. Complaints

If you believe we have not handled your personal data in accordance with UK GDPR, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
Telephone: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

17. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or your personal data:
Tercel Group
Email: Support@tercelgroup.com

This Privacy Policy is governed by UK law and complies with the UK GDPR and Data Protection Act 2018.