At a glance
Use Postocial to publish your own work and to talk with people who want to hear from you. Don't use it for illegal content, spam, fake engagement, messages people didn't agree to, or attacks on the service. Follow the rules of every network you connect. If you break this policy, we may remove content, turn off features or close your account.
Who this policy applies to
This policy applies to everyone who uses Postocial: account owners, team members, clients who use an invite or shared link, and anyone who uses the API, the MCP server or webhooks, including through an AI assistant. It's part of our Terms of Service. Account owners are responsible for how their workspace is used.
Illegal and harmful content
Don't use Postocial to create, store, publish or send content that:
- is illegal, or promotes illegal activity or the sale of illegal goods or services;
- sexually exploits or endangers children. We report this content to the authorities;
- harasses, threatens or bullies anyone, encourages violence, or attacks people because of their race, ethnicity, national origin, religion, disability, sex, gender identity, sexual orientation or another protected characteristic;
- is sexually explicit where the network or the law doesn't allow it;
- infringes copyright, trademarks, privacy or other rights, including music, images and video you don't have permission to use;
- is defamatory, fraudulent or deceptive, such as scams, fake giveaways, phishing, posing as another person or brand, or falsely claiming a connection with one;
- reveals someone's private information without their permission;
- contains or links to malware.
Spam and fake engagement
- Don't buy, sell or trade followers, likes, views, comments, reviews or other engagement, and don't use Postocial to sell them as a service.
- Don't use fake or coordinated accounts to manipulate conversations, trends or rankings.
- Don't post the same or nearly the same content across many accounts or communities to game reach, and don't flood hashtags, comment sections or subreddits.
- Don't post fake reviews, and don't offer rewards for reviews where a network forbids it.
- Use bulk posts, RSS campaigns and recurring posts only for content you have the rights to, and at a pace each network allows.
Rules of each network
Follow the terms, community guidelines and developer policies of every network you connect. Our Terms of Service link to the main ones. In particular:
- TikTok: post only original content you made or have the rights to. Don't use RSS campaigns, bulk posting or reposting to copy other people's content to TikTok, and disclose branded content.
- Meta (Facebook, Instagram, Threads and WhatsApp): don't use data from Meta to discriminate against people, to make decisions about eligibility for housing, jobs, credit, insurance, education, government benefits or immigration, or for surveillance. Don't sell or license it, build profiles of people without their consent, or try to re-identify anonymized data.
- YouTube: follow YouTube's Community Guidelines, including its rules on spam and deceptive practices.
- X: follow the X Rules and X's automation rules. Your X developer app and its keys are your responsibility.
- Reddit: follow the Reddit Rules and each subreddit's own rules, including its rules on self-promotion.
- LinkedIn: follow LinkedIn's Professional Community Policies.
- Google Business Profile: follow Google's guidelines for representing your business.
- Mastodon: follow the rules of the server you post from.
Messaging, automations and broadcasts
These rules apply to every message sent from your workspace, whether you, a teammate, an automation, a broadcast or an AI reply sends it.
- Consent first: message people only when they've contacted you first or agreed to hear from you. Don't buy, rent or scrape contact lists, don't import contacts who didn't agree to your messages, and don't send cold messages to people who never contacted you.
- Stop when asked: honor STOP, unsubscribe and similar requests right away, on every channel. A keyword automation with the Unsubscribe step can do this for you, and broadcasts skip contacts who opted out.
- WhatsApp: follow the WhatsApp Business Terms of Service, the WhatsApp Business Messaging Policy and the Meta Commerce Policy. Get opt-in before you start a conversation with someone. Reply freely only within 24 hours of the person's last message, and use templates WhatsApp approved after that. Pick the right template category and never put promotions in a utility template. Don't offer goods or services the Commerce Policy restricts, and if you sell in India, add the compliance details WhatsApp asks for. WhatsApp can limit a number whose quality rating drops.
- Messenger and Instagram: send standard messages only within 24 hours of the person's last message, and don't send promotions outside that window. The human agent tag, which allows replies for up to 7 days, is only for replies a person on your team writes, never for automated or promotional messages. Don't send automated messages to people who never contacted your Page or account, and follow Meta's limits on private replies to comments.
- Telegram: your bot can message only people who started a chat with it. Follow the Telegram Bot Platform Developer Terms.
- SMS: you're responsible for consent and opt-outs under the rules where your recipients live, such as the US TCPA and the CTIA messaging guidelines, Canada's CASL and the UK's PECR. Register your senders where it's required, for example for A2P 10DLC or toll-free messaging in the US through your provider, respect local quiet hours, and follow your provider's acceptable use policy, such as the Twilio Acceptable Use Policy or the Plivo Acceptable Use Policy.
- Comment automations: answer the people who commented. Don't use automations to spam comment sections, fake engagement or message people who never commented.
- Reply versions: rotate them to keep your wording natural, never to get around spam filters or a network's limits.
- No deceptive bots: don't present an automation as a person, and tell people they're talking to an automated assistant where the law requires it.
- Sensitive details: never ask people to send full payment card numbers, bank account numbers or government ID numbers in a chat. To take a payment, send a payment link from your own payment provider instead.
- Privacy: keep each conversation between you and the person you're talking with. Don't share one customer's messages with another customer.
Agencies and client accounts
- Connect only the profiles you're authorized to manage.
- Send clients a client invite link so they can connect their own profiles. Don't ask clients for their passwords.
- Use roles and approvals to control who can publish for each client.
- When a client relationship ends, disconnect that client's profiles from your workspace and remove any access you gave them.
Bio pages, links, QR codes and forms
- Don't use bio pages, short links, QR codes or forms for phishing, for collecting passwords or payment details under false pretenses, for misleading redirects or for selling illegal goods.
- Don't show visitors different content from what you show reviewers or networks to hide where a link really goes.
- If you add tracking pixels or collect form submissions, publish your own privacy notice and get consent where the law requires it.
- Use only custom domains you own or control.
AI features
- Don't use AI features to create content that is illegal, deceptive or infringes other people's rights, including realistic images of real people made without their consent.
- Label AI-generated content where a network or the law requires it.
- When your workspace uses its own AI provider key, follow that provider's usage policies too.
- If you use AI replies, check your prompts and knowledge sources, keep a handover to a person, and don't let AI make promises, give professional advice or collect sensitive data it shouldn't.
- Review AI output before you publish it.
API and MCP
- Stay within the rate limit of 60 requests per minute per API key, and don't use extra keys or accounts to get around it.
- Keep API keys, personal access tokens and webhook secrets private, and replace them if they're exposed.
- Don't resell, sublicense or share access to the API or the MCP server, or use them to build a competing service.
- Don't scrape the app or use interfaces we haven't documented.
- AI assistants you connect through MCP act with your permissions. Supervise what they do.
Security of the service
- Don't probe, scan or test Postocial for vulnerabilities, or try to get around its security or authentication.
- Don't reverse engineer the app, except where the law allows it.
- Don't overload the service with automated or excessive traffic, or interfere with other customers' use of it.
- Don't forge headers or sender details, or hide your identity to mislead people.
- Don't create accounts automatically or to get around a suspension.
If you come across a security issue, report it to hello@postocial.com, and don't use it to access data that isn't yours.
Reporting abuse
To report content or activity that breaks this policy, email hello@postocial.com. Please include:
- links to, or screenshots of, the content or activity;
- what's wrong and why, including the rule or law you think it breaks;
- for copyright or trademark complaints, the work or mark concerned and your authority to act for its owner;
- how we can contact you.
We review every report and may contact you for more information. When we act on someone's content or account, we tell them what we did and why, unless the law or someone's safety prevents it, and they can reply to ask us to look again.
Enforcement
Depending on how serious a problem is, whether it has happened before, and the risk to people, networks and Postocial, we may:
- remove content or stop it from being published;
- turn off features such as messaging channels, automations, broadcasts, bio pages or API keys;
- suspend or close the account;
- report illegal content to the authorities or the network concerned.
Serious violations can lead to immediate suspension. Networks may also act against your accounts on their own. When we close an account for breaking this policy, we don't refund fees.
Changes and contact
We may update this policy as Postocial, the networks and the law change, and we change the date at the top when we do. Questions? Email hello@postocial.com.