1. Who we are
PostPilot is operated by Dissentral Ltd, company number 16416019, a private limited company registered in England and Wales. Our registered office is Cowran Estate, Pennington, Ulverston, Cumbria, United Kingdom, LA12 0JW. Our legal and privacy contact is [email protected].
Cowran Group is a customer publishing destination for PostPilot. Cowran Group is not the operator and its privacy notice is not the PostPilot notice.
2. Roles
This notice applies to the public website, application and interfaces used to connect destinations. Dissentral is responsible for the account, security, service-operation and legal information it determines. Where a customer decides why and how its people, customer information or publishing content is processed, that customer may be controller and Dissentral may be processor or service provider under the applicable agreement and data-processing terms.
3. Information handled
- Account and access data: name, email, invitations, workspace membership, role, timezone and security events.
- Workspace data: business or brand names, briefs, drafts, channel variants, approvals, comments, schedules, publication state and revision history.
- Media data: type, size, dimensions, duration, digest, accessibility fields, rights status and private storage location when media storage is enabled.
- Connected-destination data: provider, account or Page identifiers, scopes, connection state, expiry and revocation state. OAuth credentials are encrypted server-side when required and are not displayed to the browser.
- Provider receipts, publication identifiers, bounded reach or engagement results, follower or network observations and errors where available.
- Technical, diagnostic, fraud-prevention and security data; support, contract, billing or payment data only where the relationship or optional integration is enabled. Current billing is disabled.
4. Uses
- Authenticate users, send invitations or sign-in links, operate workspaces and enforce roles and tenant separation.
- Store and transform content and media; preserve revision and approval history; schedule work; transmit approved material; and reconcile receipts.
- Show provider or website analytics where permissions support them, without treating delivery as proof of engagement, revenue or other outcome.
- Prevent misuse, investigate incidents, diagnose failures, support customers, maintain recovery evidence and meet legal obligations.
- Operate optional agent, AI, billing or website-receiver features only when configured and authorised.
5. Social permissions and tokens
Customers grant provider permissions through the provider. PostPilot uses approved scopes for the selected workspace and destination, stores connection state and encrypted credentials where required, and records provider responses needed to operate or reconcile the connection. Disconnect in the application or request it through the data deletion page. Provider platforms have their own notices and controls.
Adapters exist for LinkedIn, Facebook, Instagram, Threads, Pinterest, YouTube, TikTok, Bluesky, Mastodon and a controlled website receiver. An adapter is not proof a provider is active; credentials, account connection, permissions and publication are separately gated.
6. Drafts, media, approvals and publishing
PostPilot keeps information needed for planning, channel drafting, evidence and rights checks, human approval, scheduling, delivery and receipt reconciliation. Later revisions do not silently replace prior approval or evidence. Media is private and signed for controlled access when enabled.
PostPilot does not decide that content is lawful, accurate, authorised or suitable. Customers and approvers remain responsible for content, rights, personal data, disclosures, platform rules and destination accounts.
7. Analytics
Where permitted, PostPilot may retrieve bounded account, publication or audience measurements and retain them with the workspace and destination. Metrics vary by provider, may be incomplete or withdrawn, and do not prove causation, revenue or a commercial result.
8. AI, agents and MCP-capable access
The current deployment has AI runtime disabled and no AI provider configured. The codebase includes optional guarded AI drafting and a scoped agent API for an authorised AI/MCP-capable client when an administrator creates a time-limited connection. Connections are business, workspace and role scoped, credentials are stored as digests, and agents do not receive provider secrets or approval/publication authority.
If optional AI is enabled, only permitted fields and public-safe extracts are sent to its configured provider. Output is an unapproved suggestion or draft, not a fact, approval or publication instruction.
9. Providers and subprocessors
Depending on deployment and enabled features, categories include DigitalOcean for compute, databases and private object storage; Cloudflare for tunnel, DNS or edge security; Microsoft Graph/Microsoft 365 for transactional email; customer-selected social and website destinations; Stripe only if billing is activated; and an AI provider only if optional AI is activated. Current billing and AI are disabled.
Providers may process information outside the UK. Appropriate contractual, technical and other safeguards are used. Request a current provider list or transfer detail from [email protected].
10. Retention
Information is retained while an account or relationship is active and as needed for its purpose, security, provider reconciliation, customer instructions, legal obligations, accounting, disputes or claims. There is no single period for every record: temporary OAuth state and agent credentials expire on configured timers; media and drafts follow workspace deletion; audit, security, publication and backup records may remain longer where justified. Information is deleted or anonymised when the purpose ends and no lawful reason remains.
11. Security
Measures include encrypted server-side token handling, hashed authentication and agent secrets, tenant-bound access checks, role capabilities, same-origin mutation protection, rate limits, private networks and controlled media URLs. This is not an ISO certification or guarantee that an incident can never occur.
12. Rights and requests
Depending on the circumstances, you may have rights to access, correct, delete, restrict or object to processing, and data portability. Email [email protected] or use the account and data deletion page. Identity may need to be verified and narrow records may be preserved for legal or security reasons. You may complain to the UK Information Commissioner's Office.
13. Cookies and changes
The application uses essential session and security technologies. Optional analytics will not be treated as enabled merely because the product can support them; where consent is required it will be obtained through the relevant experience. We may update this notice when service, providers or law changes. The version and date above identify the current notice.