How PostNimbo handles your data

Last updated 22 October 2026.

PostNimbo (postnimbo.com) is a tool for planning, publishing and measuring social media posts for one or more brands. It is operated by PINOYBITES LTD, a company registered in the United Kingdom, which is the data controller for the information described here.

What we collect

Your account: your name, email address, password (stored only as a one-way hash), optional two-factor settings, time zone and preferences, and the workspaces, brands and team members you create.
Connected social accounts: when you connect an account on Facebook, Instagram, Threads, TikTok, LinkedIn, X, Pinterest or another supported network, the network gives us access tokens for that account. We keep them in our database, which only the people who run PostNimbo can reach, and use them only to do what you ask. We never see or store your password for that network.
Account details from those networks: the account or page ID, name, username and profile picture, and for some networks the pages or boards you manage, so you can choose where to post.
Your content: the posts you write or schedule, with their text, images, videos, comments and settings, and the IDs and links the network returns once they are published.
Performance figures: the statistics the networks report about your posts and accounts, such as views, likes, comments and follower counts.
Engagement inbox: if you turn it on for an account, the comments, mentions, reviews and direct messages that people send to that account, so your team can read and answer them in PostNimbo.
About your business: right after you sign up we ask a few optional questions about your business (such as your industry, team size and how you found us) to improve the product; your answers are stored with your account and never sold.
Usage and security logs: sign-in times, IP addresses and error logs, kept to protect accounts and fix problems.

How we use it

Only to run the service you signed up for: publishing what you schedule, showing your calendar, analytics and inbox, sending you notifications you turned on, keeping your account secure, and supporting you when you ask. We do not sell your data, use it for advertising, or build profiles of the people who interact with your posts.

Data from the networks you connect

We use data received from each network only to provide PostNimbo's features to the account owner who connected it, and in line with that network's developer terms and policies. We do not transfer it to anyone else except the service providers listed below, who process it on our behalf.

Google and YouTube

When you connect a YouTube channel or a Google Business Profile, or sign in with Google, PostNimbo uses Google APIs, including the YouTube API Services. With your permission we read your channel's basic details, upload and update the videos you schedule, read and reply to comments when you use the inbox, and read your channel's analytics to show you reports. Sign in with Google only gives us your name, email address and profile picture.

PostNimbo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use this data to serve ads, we do not sell it, we do not let humans read it except with your permission, for security, or where the law requires it, and we do not use it to train AI models.

By connecting YouTube you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can remove PostNimbo's access at any time from your Google account's security settings or by disconnecting the channel in PostNimbo; we then delete the stored tokens, and on request any YouTube data we stored, within 30 days.

Who processes data for us

Our hosting provider, which runs the servers PostNimbo and its database live on.
Cloudflare, for DNS and for storing uploaded images and videos (Cloudflare R2, European Union jurisdiction).
OpenAI, only when you use an AI feature such as writing suggestions; the text you send to that feature is processed to produce the result.

How long we keep it

We keep your account data while your account is open. Disconnecting a social account stops our access to it immediately. When you delete your account, or ask us to, we delete your account data, tokens, posts, media and analytics within 30 days, except where the law requires us to keep a record for longer.

Your rights

Under UK and EU data protection law you can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and complain to the UK Information Commissioner's Office (ico.org.uk). See how to delete your data.

Security

Connections are encrypted with HTTPS, the database is not reachable from the internet, passwords are hashed, two-factor sign-in is available, and access to our servers is limited to the people who run PostNimbo.

Children

PostNimbo is a business tool and is not meant for anyone under 16.

Changes

If we change this policy in a way that matters, we will update the date above and tell account owners by email or in the app.

Contact

Questions or requests: hello@properslang.com.