Privacy Policy

PostOrbit is a self-hosted platform, meaning all data is stored on your own infrastructure. We do not collect, store, or have access to: • Your contact lists and subscriber data • Email content and campaign analytics • User behavior and tracking data • API keys and credentials When you self-host PostOrbit, you maintain complete ownership and control over all data.

Security is built into PostOrbit's architecture: • All API keys are encrypted at rest using industry-standard encryption • Database connections use TLS/SSL encryption • Authentication uses secure session management • Webhook endpoints support signature verification • No data is transmitted to external servers (except your configured email provider)

PostOrbit integrates with email delivery services you configure: • Resend API - For sending emails (you provide your own API key) • Your chosen database provider (PostgreSQL recommended) We do not share any data with third parties. All integrations are configured and controlled by you.

PostOrbit is designed with GDPR compliance in mind: • Data portability - Export all data at any time • Right to erasure - Delete subscriber data completely • Consent management - Built-in unsubscribe handling • Data minimization - Only collect what you need • Transparency - Full visibility into data processing

You control data retention policies: • Set custom retention periods for analytics data • Automatically purge old campaign data • Manage subscriber data lifecycle • Export before deletion options Since you host the platform, you decide how long data is retained.

As a self-hosted solution, you have complete control: • Access - Full database access to all your data • Rectification - Modify any data directly • Erasure - Delete data at any time • Portability - Export in standard formats • Objection - You control all processing For questions about this policy, contact us at hello@etherlabz.com