Legal
Privacy policy
What we collect, why we collect it, how long we keep it, and the choices you have. Last updated: July 13, 2026.
Who we are
AutoSchedulePost (“we”, “us”, “the Service”) provides tools for keyword research, AI-assisted content generation, and automated publishing to WordPress sites. This policy explains how we handle personal information across our website, dashboard, and publishing pipeline. By using the Service you agree to the practices described here; if you do not agree, please do not use the Service.
For any privacy question or request, email support@autoschedulepost.com.
Information we collect
Account information. When you create an account we collect your name, email address, and password (stored hashed, never in plain text). If you contact support we keep the correspondence.
Billing information. Payments are processed by our third-party payment provider. We receive and store only the transaction reference, plan, and billing status — full card numbers never touch our servers.
Connected site credentials. To publish on your behalf we store the site URL, username, and WordPress application password you provide. Application passwords are encrypted at rest, used only to publish and manage the content you schedule, and can be revoked from your WordPress profile at any time.
Content and keywords. Keywords you research, prompts and templates you configure, and content generated through your account are stored so the pipeline can run and so you can review your own history.
Usage and technical data. We record pipeline activity (schedules, generation runs, publish events, logs), plus standard technical data such as IP address, browser type, device information, pages visited, and timestamps. Some of this arrives via cookies — see our Cookie Policy.
How we use information
We use your information to operate the Service: authenticating you, harvesting the keywords you request, generating content through the AI providers you select, publishing to the sites you connect, showing you your audit trail, billing your plan, answering support requests, and sending essential service emails (receipts, security notices, material changes to terms).
Keyword inputs and generation prompts are sent to your chosen AI provider (such as Anthropic, OpenAI, or OpenRouter) solely to produce your content, and are subject to that provider’s terms and privacy policy.
We also use aggregated, anonymised statistics to understand performance and improve the product. We do not sell personal data, we do not share your data with advertisers, and we do not use your content or keywords to train AI models.
Legal bases
Where the GDPR or similar laws apply, we process your data on these bases: contract — to provide the Service you signed up for; legitimate interests — to secure, debug, and improve the Service; consent — for optional cookies and marketing emails, which you can withdraw at any time; and legal obligation — for tax and accounting records.
Sharing and third parties
We share data only with processors needed to run the Service: hosting and infrastructure providers, our payment processor, email delivery, error monitoring, privacy-respecting analytics, and the AI providers you choose. Each processor receives only what it needs and is bound by its own data-protection obligations.
We may disclose information if required by law, to enforce our terms, or to protect the rights, safety, or property of AutoSchedulePost, our users, or the public. If the business is sold or merged, data may transfer to the successor under this same policy.
Retention and security
Account data is retained while your account is active and deleted within 30 days of a verified deletion request. Pipeline logs are kept for up to 12 months for troubleshooting and audit purposes. Billing records are kept as long as tax law requires. Backups expire on a rolling schedule.
We protect data with encryption in transit (TLS) and at rest for credentials, access controls, and least-privilege practices. No online service can guarantee absolute security — you use the Service at your own risk — but if we learn of a breach affecting your personal data we will notify you as the law requires.
Your rights
Depending on where you live (including under the GDPR and CCPA/CPRA), you may have the right to access the personal data we hold about you, correct it, export it in a portable format, delete it, restrict or object to certain processing, and withdraw consent at any time without affecting prior processing. California residents will not be discriminated against for exercising their rights; we do not “sell” or “share” personal information as those terms are defined by the CCPA.
To exercise any right, email support@autoschedulepost.com from the address on your account. We respond within 30 days. You may also lodge a complaint with your local data-protection authority.
International transfers, children, and changes
Our infrastructure may process data in countries other than your own. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
The Service is not directed at children under 16 and we do not knowingly collect their data; if you believe a child has provided us data, contact us and we will delete it.
We may update this policy from time to time. Material changes are announced by email and on the changelog before they take effect; the “last updated” date above always reflects the current version.
