What Postalyzer asks for, what it keeps, where, for how long, who can see it, and
how you get rid of all of it. Written for the person deciding whether to connect a
business account.
last updated · 2026-09-24
Every scope Postalyzer requests is a read scope. None permits publishing, scheduling, editing, deleting or messaging. Where a platform only offers a scope that bundles write access, Postalyzer does not connect to that platform.
When you connect through Facebook, the two Instagram scopes are requested on the same screen, for the Instagram account linked to your Page.
Your email address and name. For each connected account: the account ID, handle, display name and follower count. For each post in the last 90 days: its ID, format, timestamp, caption, hashtags, a small preview image and the metrics in the table above.
Captions are kept so we can show each post in your report and find the caption
habits that work for you. We keep a small preview image of each post. We read the
start of a video file to measure its length and shape; video files themselves are never
kept.
United States regions only, on managed cloud infrastructure. Encrypted in transit with TLS 1.2 or better and at rest with AES-256.
Post data is kept while the account is connected. When you disconnect an account you can choose to delete its data at the same time. Deleting your Postalyzer account removes everything from primary storage within 30 days and from encrypted backups within 90.
You, and anyone you send a share link to. Share links expire on their own: the share image after 12 hours, the PDF link after 24 hours. Postalyzer staff access is role-restricted, requires a support reason, and is logged. SocialTrend’s production team does not see your report unless you send it to them.
Access and refresh tokens are encrypted with keys held separately from the data they unlock, never sent to your browser, refreshed server-side, and deleted the moment you disconnect.
In the app: Settings → Account → Delete account. Deletion starts straight away and cannot be undone. Or write to privacy@postalyzer.com and we will do it within 30 days.