PostMarshal™

Your data & security

Your accounts and your information, looked after properly

PostMarshal connects to your social accounts through each platform’s official, approved process — never your passwords — and you can disconnect at any time. The keys that let it post for you are encrypted and only ever shown to you as a status, never as text. We collect the minimum we need, we don’t sell your data, and you can export or delete it whenever you want. Respecting your data is a founding principle here — it’s what we’d want for our own business.

How connections work

When you connect a social account, you go through that platform’s own permission screen and choose to let PostMarshal post on your behalf. We never see or store your social passwords. That permission is yours to withdraw at any moment — from inside PostMarshal, or from the platform’s own settings — and posting stops immediately when you do.

The access keys that make posting possible are treated as live credentials: encrypted where they’re stored, and never displayed back as text to you, to us, or to anyone else. In your account you see whether a connection is healthy or needs reconnecting — the useful part — without the secret ever being exposed.

What we collect, and what we don’t

  • We collect the minimum needed to plan and publish your posts — your brand facts, your connected accounts, and what you’ve scheduled.
  • We don’t sell your data, and we don’t hand it to third parties for their own marketing.
  • Your business’s data is kept in its own separate scope — never mixed with another customer’s.
  • You stay in control: export your brand information any time, and delete your data when you choose.

Honesty about where we are

PostMarshal is in active build, and we’d rather be straight with you than dress things up. We build to UK data-protection law and to security-by-design principles from the start — but we’re an early-stage product, not a decade-old enterprise, and we won’t claim certifications we don’t yet hold. As the product matures, this page will say plainly what we’ve added. If you ever have a question about your data, a real person will answer it.

Common questions

Questions people ask about PostMarshal

Last updated: 12 July 2026

How does PostMarshal connect to my social accounts?

Through each platform’s official, approved connection process — the same “Connect” and permission screens you’d see anywhere. You grant PostMarshal permission to post on your behalf, and you can withdraw that permission at any time, either from inside PostMarshal or from the social platform itself. We never ask for your social passwords.

Where are my account connections stored?

The access keys that let PostMarshal post for you are encrypted where they’re stored, and they’re treated as live credentials — never shown back to you or anyone else as text. In your account you see the connection’s status (connected, healthy, or needs reconnecting), never the secret itself.

Do you sell or share my data?

No. We don’t sell your data or pass it to third parties for their own marketing. We collect the minimum needed to run the service, and your business’s data stays yours. Full detail is in our privacy policy.

Can I get my data out, or delete it?

Yes to both. You can export your brand information whenever you want, and you can delete your data. Our data-deletion page explains exactly how, and what happens when you do.

Is my data kept separate from other businesses?

Yes. Each business’s information is kept in its own scope, so one customer’s data is never mixed with another’s. Keeping your data separate and private is a founding principle of how PostMarshal is built, not an add-on.