Privacy Policy | SetPostGo

01

Who we are

SetPostGo is a trading name of Lyrion Ltd, registered in England and Wales. We operate the website setpostgo.xyz and provide a social media content subscription service to professionals and businesses.

02

What data we collect

We collect the following categories of personal data:

Account data: name, email address, profession, password (hashed, never stored in plain text)
Billing data: payment information processed and stored by Stripe. We do not store card details on our servers.
Usage data: pages visited, posts copied, time on site, browser and device type
Communications: any messages you send to us via email or contact forms
Marketing data: email address and profession submitted via our sign-up form, with your consent

03

How we use your data

To provide and maintain your SetPostGo subscription
To deliver your monthly content packs to your dashboard
To process payments via Stripe
To send service communications (subscription confirmations, renewal reminders)
To send marketing emails where you have given consent (you may unsubscribe at any time)
To improve our platform using aggregated, anonymised analytics
To comply with our legal obligations

04

Legal basis for processing

We process your data on the following legal bases under UK GDPR:

Contract: processing necessary to deliver your subscription
Legitimate interests: analytics, security, fraud prevention, service improvement
Consent: marketing emails and optional cookies
Legal obligation: tax records, compliance requirements

05

Data sharing

We do not sell your personal data. We share data only with:

Stripe (payment processing), governed by Stripe's privacy policy
Supabase (database hosting), data stored in EU-based infrastructure
Resend (transactional email), email delivery only
Google Analytics (anonymised usage analytics), no personal identifiers shared
Regulatory authorities, if required by law

06

Data retention

We retain your account data for the duration of your subscription plus 2 years. Billing records are retained for 7 years as required by UK tax law. You may request deletion of your account data at any time.

07

Your rights

Under UK GDPR you have the right to: access your data, correct inaccurate data, request erasure, restrict or object to processing, and data portability. To exercise any right, email admin@setpostgo.xyz. We will respond within 30 days.

08

Cookies

We use essential cookies to operate the platform and optional analytics cookies. See our Cookie Policy for full details.

09

Security

We use industry-standard encryption (TLS 1.2+), hashed passwords, and role-based access controls. Our infrastructure is hosted on SOC 2-certified providers. We conduct regular security reviews.

10

Changes to this policy

We may update this policy from time to time. We will notify subscribers of material changes by email. Continued use of SetPostGo after notification constitutes acceptance of the updated policy.

11

Contact

For all privacy-related enquiries: admin@setpostgo.xyz

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.