Privacy Policy
Last updated: August 22, 2026
This Privacy Policy describes how Post For My Business ("we," "us") collects, uses, and shares information when you use our website and publishing service (the "Service"). It describes what the Service actually does today, not a general template — if we start using a new category of tool (for example, an analytics product), we will update this policy before or when we do.
Information We Collect
We collect the following categories of information:
- Account information — your name, email address, and password (stored as a secure hash, never in plain text).
- Business profile information — the business details you submit, such as name, description, website, location, and category.
- Submitted article content — the text, headlines, and other content you submit for editorial review and possible publication.
- Images and uploads — featured images and business logos you upload, stored with our cloud storage provider.
- Payment and order information — records of what you purchased, order and subscription status, and billing metadata. We do not store your full card number; payments are handled by our payment processor, Stripe, which collects and processes card details directly.
- Support and contact messages — anything you send us through the Contact page or by email.
- Marketing preferences — whether you have opted in to promotional email, and when.
- Security and technical logs — information we log to keep accounts and the Service secure, including IP address and timestamps for login attempts and password-reset requests, used to detect and slow down abusive or automated activity.
- Session/authentication technology — cookies or similar technology needed to keep you signed in and to protect your session. We do not currently use advertising or cross-site tracking cookies.
- First-party acquisition and usage measurement — the first page you land on, the referring website (if any), and any utm_source/utm_medium/utm_campaign/ utm_content/utm_term values present in the link you followed; a randomly generated, first-party identifier stored in a cookie so we can recognize the same visitor across later visits; and a small set of business events (for example, account registration, business creation, starting checkout, a completed purchase, saving a draft, submitting an article for review, and publication) tied to that identifier and, once you register, to your account. See First-Party Analytics & Attribution below for full detail.
How We Use Information
- To create and operate your account and authenticate you securely;
- To process payments, issue article credits, manage subscriptions, and maintain order records;
- To operate the editorial review and publishing process, including reviewing submissions and displaying published articles;
- To detect, prevent, and respond to fraud, abuse, and security incidents (for example, rate-limiting repeated failed login or password-reset attempts);
- To send transactional communications — account, order, submission, and billing-related messages — which are not optional while you hold an account and are not "marketing" communications;
- To send marketing or promotional communications about Post For My Business only if you have explicitly opted in; you may unsubscribe at any time using the link in those emails or from your account preferences;
- To respond to support and contact requests;
- To understand which acquisition sources (for example, a search engine, a social platform, or a specific marketing campaign) lead to registrations, purchases, and published articles, so we can measure how the Service is actually performing and improve it; and
- To comply with legal obligations.
First-Party Analytics & Attribution
We use a small, first-party measurement system that we built and operate ourselves — we do not use Google Analytics, PostHog, Meta Pixel, LinkedIn Insight Tag, or any other third-party analytics or advertising pixel on the Service.
- Anonymous identifier / cookie — on your first visit, we set a cookie named
pfmb_aidcontaining a randomly generated id (not your name, email, or any other personal information). It lets us recognize the same browser across visits so we can tell how many distinct people arrived from a given source, rather than counting every page load as a new visitor. - First landing page, referrer, and campaign parameters — the first page you landed on, the referring site (if your browser sent one), and any UTM campaign parameters in the link you followed. These are captured once, on your first visit, and are not overwritten by later ordinary browsing — they stay as a record of how you originally found us.
- Linkage to your account — if you register, we link your existing anonymous record to your new account (once) so we can understand which acquisition source ultimately led to a registered customer. We never relink an anonymous record to a different account afterward.
- Business events — a small, fixed set of meaningful actions (account registration, business creation, starting checkout, a completed purchase, saving a draft, submitting an article, and publication), each recorded once by our own servers at the moment it happens — not a log of every click or page you view.
We use this information to understand how visitors find the Service, measure how well each stage of signup-to-publication is working, and improve the Service — not to build advertising profiles, sell data, or track you across other websites. If we ever add a third-party analytics or advertising tool, we will update this policy to describe it before or when we do.
Service Providers
We use the following third-party service providers to operate the Service. Each processes the information necessary to perform its function on our behalf:
- Stripe — payment processing, subscriptions, and billing.
- Resend — sending transactional and, where opted in, marketing email.
- Cloudflare R2 — storage for uploaded images (featured images, logos).
- Render — application hosting and our database.
These providers only receive the information necessary to perform their function and are not permitted to use it for their own independent purposes. We may add or change service providers over time as the Service evolves.
Data Retention
We generally retain account, order, and submission information for as long as your account is active and as needed to operate the Service, maintain financial and legal records, and resolve disputes. We do not currently offer an automated self-service account-deletion tool; contact us to request deletion or access to your information and we will respond as described below.
Your Choices
- Marketing email — opt in or out anytime from your account preferences, or use the unsubscribe link in any marketing email.
- Transactional email — cannot be turned off while you hold an account, as it relates to your orders, submissions, and account security.
- Account or data requests — contact us through the Contact page to ask about, correct, or request deletion of your information, subject to what we need to retain for legal, security, or financial record-keeping reasons.
Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will address it.
Geographic Scope
The Service is currently operated for a U.S. audience and our infrastructure and service providers may process information in the United States. We have not established international-transfer safeguards or certifications (for example, GDPR or CCPA compliance programs) at this time.
Security
We use reasonable technical and organizational measures — including password hashing, rate-limiting of authentication attempts, and access controls — to help protect your information. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify account holders.
Contact
Questions about this policy can be sent through our Contact page or to support@postformybusiness.com.
