Privacy.
Effective 5 October 2026
Postloom is operated by Arlow. For privacy enquiries, contact [email protected]. This notice describes our marketing website and invitation-based content workspace.
Information we handle
The workspace processes account details such as name and email, password hashes, login sessions, workspace membership and permissions, content drafts, media, schedules, comments, approvals, and information returned by the platforms you connect. Connected account credentials and SMTP passwords are stored encrypted. We also process technical information needed to serve and protect the service, such as IP addresses and request logs.
Why we use it
We use this information to authenticate users, provide client workspaces, collaborate on content, perform requested publishing and messaging, deliver account notifications, troubleshoot problems and protect the service. We do not sell personal information. We do not use connected-platform information for unrelated advertising.
Connections you authorise
When you connect a platform, its authorisation screen explains the permissions being requested. Depending on the platform and approval granted, Postloom may retrieve account identifiers, Pages, professional profiles, designs, media, posts, comments, messages or metrics needed for the selected features. Publishing or sending content transfers it to the selected provider and intended audience. Each provider has its own privacy terms.
Website enquiries and cookies
The marketing website does not currently include advertising trackers or analytics tools. The access-request form opens your email application and only sends an enquiry if you send that email. The app uses essential session cookies for authentication. Cloudflare processes technical information while providing network protection and delivery.
Infrastructure and service providers
Service data is stored in the Postloom PostgreSQL database and media storage. Encrypted backups support recovery. Account email is delivered using the configured Brevo transport. Cloudflare protects and delivers traffic. Connected providers receive the information needed to carry out actions you request. If writing assistance is enabled and you use it, the selected AI provider also processes the text sent for that request. These services may process information in other countries; a South Africa access restriction does not imply every provider processes data only in South Africa.
Access, retention and deletion
Workspace access is controlled by membership and permissions. Information is retained while needed to provide the service and for legitimate security, recovery or legal requirements. You can request access, correction or deletion by emailing us. We verify authority before acting; client workspace records can involve other people, so their ownership and access must also be considered. Removed information may remain temporarily in backups until those copies expire. Content already published to external platforms may need to be removed there separately.
Your choices
You can disconnect an account in Postloom and revoke access through the provider. Revocation stops future authorised access but does not automatically erase previously imported workspace records. See our data-deletion instructions to request removal.
Updates
We may update this notice as the service changes. The effective date above identifies the current version. Contact us with questions about a change or your information.