JackOfAllPostsPrivacy Policy
Last updated 20 August 2026
How JackOfAllPosts, operated by Full Throttle Media, handles your data. Written to describe what the product actually does — if you find a difference between this page and the software, tell us and we will fix whichever is wrong.
What we collect
| What | Why we have it | Where it comes from |
|---|---|---|
| Your name and email address | To identify your account and email you when a post fails or a brand goes quiet | Your sign-in provider (Clerk) |
| Access tokens for the social accounts you connect | To publish on your behalf. Nothing else. | You, via each platform's own consent screen |
| The posts, captions, images and schedules you create | It is the product | You, or our AI at your request |
| Engagement counts on posts we published | The analytics screen | Each platform's API |
| Your subscription status and Stripe customer id | To know what your plan allows and to bill you | Stripe |
| A log of actions taken through the API | So you can see what an automation did in your name | Your own API keys |
We do not sell your data, we do not share it with advertisers, and we do not use the content you write to train AI models.
How your connected accounts are protected
Access tokens and app passwords are encrypted at rest with AES-256-GCM before they are stored. We never store them in plain text, they are never shown back to you or anyone else, and they are decrypted only in the moment a post is being published.
Disconnecting an account deletes our copy of its token immediately. You can also revoke our access from the platform's own settings at any time, which we recommend doing as well — it is the only action that is entirely in your hands.
Who else processes it
We use a small number of processors, each for one job. They receive only what that job needs.
| Processor | What it handles |
|---|---|
| Convex | The database, files and scheduling that run the product |
| Clerk | Sign-in, and your name and email |
| Stripe | Payments. Card details go to Stripe and never reach us. |
| Vercel | Serving the web app |
| Anthropic | AI caption generation, when you ask for it |
| fal.ai | AI image generation, when you ask for it |
| Resend | Sending the alert emails you opt into |
| Sentry | Error reports, so we can fix crashes |
| The platforms you connect | Meta, X, LinkedIn, Pinterest and Bluesky receive the posts you tell us to publish |
How long we keep it
- Your account data: until you delete your account.
- A deleted brand: removed within days, in batches. Its posts, images, schedules and connected accounts go with it.
- Access tokens: until you disconnect the account or delete the brand.
- Payment records: Stripe keeps these under its own retention policy, which we do not control and which tax law requires.
- Error reports and session replays in Sentry: kept under Sentry's retention settings, which are short.
Deleting your data
You can delete a single brand from its settings, or your whole account from Billing → Delete account. Both ask you to type DELETE, because neither can be undone.
Deleting your account removes your profile, your memberships, your API keys and any brand nobody else is in. A brand you share with colleagues is handed to one of them rather than destroyed — it is their work too — and your name is removed from the posts inside it. Any active subscription is cancelled.
If you connected Facebook or Instagram, you can also ask Facebook to send us a deletion request from its own settings. That removes what we obtained through Facebook — your Page and Instagram connections and the tokens behind them — and gives you a link to check that it happened. It does not close your JackOfAllPosts account, because revoking one integration is not the same as leaving.
Your rights
Depending on where you live, you may have the right to access, correct, export, delete, or restrict the processing of your personal data, and to object to it. Deletion is self-service; for anything else, email us at privacy@jackofallposts.app and we will respond within 30 days. We will not charge you for exercising a right and we will not treat you differently for having done so.
We do not sell or share personal information as those terms are defined under the CCPA, so there is nothing to opt out of.
Children
JackOfAllPosts is a business tool and is not directed at anyone under 16. We do not knowingly collect their data; if you believe we have, email privacy@jackofallposts.app and we will delete it.
Changes
If we change how we handle your data in a way that matters, we will update the date at the top of this page and tell account holders by email before it takes effect.
Contact
Questions, requests, or corrections: privacy@jackofallposts.app.