Privacy Policy

Last updated: October 31, 2026

1. Introduction

LefaPost ("we", "us") runs LefaPost, a service for scheduling and publishing posts to Threads, Instagram and Facebook Pages. This policy explains, in plain words, what information we collect, why, how we keep it safe, and the choices you have.

2. What we collect

  • Your account: your name, email address and password. We store the password in a scrambled form that nobody, including us, can read. If you sign in with Google, Google shares your name and email with us.
  • Your connected social accounts: your username and the permission you give LefaPost when you connect Threads, Instagram or a Facebook Page.
  • Your posts: the captions, links, photos and videos you schedule.
  • Post performance: numbers such as views, likes, replies and shares for posts you published, provided by the platforms.
  • Your plan: which plan you are on and whether it is active. Your card details go straight to our payment partner — we never see or store them.
  • Basic technical information: a cookie that keeps you signed in, a cookie that remembers your language, and short-lived records of visits that help us keep the service secure.

3. How we keep it safe

Your account connections are encrypted

The permissions you give us for your social accounts are stored encrypted, and we never show them in readable form.

Photos and videos you upload for posting are stored only temporarily and deleted automatically 7 days after they are published. Everything you send to LefaPost travels over a secure, encrypted connection.

4. What we do with your social accounts

We only ask for the permissions LefaPost needs:

  • Permission to post: used only to publish the posts you scheduled or asked us to publish.
  • Permission to see post statistics: used only to show how your posts are doing.

We will never sell your information, read your private messages, or post anything you did not ask for.

5. Who helps us run LefaPost

We share information only with trusted partners we need to run the service, and only what they need:

  • Threads, Instagram and Facebook — to publish your posts and show their results, as you choose.
  • Paddle — our payment partner, for checkout, payments, invoices and taxes.
  • Cloud storage and hosting providers — to run LefaPost and keep your uploads until they are posted.
  • AI providers — only the text and requests you send to our AI features, to write captions or create images and videos.
  • Google — only if you choose to sign in with Google.

6. How long we keep it

We keep your information while your account is open. When you disconnect a social account, we remove its connection. When you delete your account or ask us to delete your data, we erase it, except records we must keep by law (such as payment receipts).

7. Your choices

  • See or fix your information: update your details in the app, or ask us for a copy of your data.
  • Disconnect LefaPost: remove LefaPost from your Instagram, Facebook or Threads settings at any time; we disconnect that account automatically.
  • Delete your data: ask for deletion on the data deletion page or by emailing us.

Depending on where you live, privacy laws may give you more rights, such as objecting to how we use your data or taking it elsewhere. Just ask.

8. Information across borders

Some of our partners may handle information outside your country. When they do, we make sure it stays protected.

9. Children

LefaPost is not meant for anyone under 18, and we do not knowingly collect their information.

10. Changes to this policy

If we change this policy in an important way, we will tell you in the app or by email. The date above shows the latest version.

11. Contact us

Questions about your privacy: [email protected] (LefaPost, Indonesia).