Herald (“Herald”, “we”, “us”) is a social-media publishing service that lets you connect your Instagram, Facebook, and LinkedIn accounts and publish content to them from one place. This policy explains what we collect, why, and your rights. If you have questions, contact privacy@leiritech.com.
Information we collect
- Account information — your name, email address, and workspace name, provided when you sign up.
- Connected-account data — when you connect a social account we store its public identifiers (e.g. account ID, username/page name) and the access token the platform issues, which lets Herald publish on your behalf.
- Content you create — captions, images you upload, and the posts and schedules you set up.
- Operational data — publish results (success/failure, the resulting post links) and basic logs needed to run the service. We do not log access tokens.
How we use it
- To publish the content you create to the accounts you connect, on your explicit instruction.
- To operate, secure, and support the service (authentication, showing your posts and their status).
We do not sell your data, and we do not use your content or tokens for advertising.
How your tokens and media are protected
- Access tokens are encrypted at rest (application-level encryption) and are never shown in the app, returned by our API, or included in logs.
- Media you upload is stored in object storage and served over HTTPS so the platforms can fetch it at publish time.
- All traffic is over HTTPS.
Third parties we share data with (subprocessors)
We share the minimum necessary to run the service:
- Meta (Instagram, Facebook) and LinkedIn — to publish your content to your connected accounts, per your instruction and their platform terms.
- Hosting & database — our cloud hosting and managed Postgres provider store your account and post data.
- Media storage (Cloudflare R2) — hosts images you upload so they can be published.
Data retention & deletion
- You can disconnect any account at any time, which revokes Herald’s ability to publish to it.
- You can delete your account/workspace; this removes your data, including connected accounts and posts.
- We retain data only as long as needed to provide the service or meet legal obligations.
Your rights (GDPR)
If you are in the EU/EEA you have the right to access, correct, export, and erase your personal data, and to object to or restrict processing. To exercise these, use the in-app controls or email privacy@leiritech.com.
Cookies
Herald sets only an essential first-party session cookie to keep you logged in. We do not use advertising or third-party tracking cookies, so no consent banner is required.
Changes
We may update this policy; material changes will be reflected by the “last updated” date above.
This document is a good-faith summary of our practices and a starting template — before relying on it for a regulated launch, have it reviewed by qualified legal counsel for your jurisdiction.