GDPR & Data Processing

For account and billing data, PostRocket is the controller. For personal data contained in the content, contacts and messages you manage in the Service, you are the controller and PostRocket is your processor.

A Data Processing Agreement covering the processor relationship, including the standard contractual clauses where needed, is available on request. Email hello@postrocket.co with your company details.

We use carefully selected sub-processors for hosting, payments, email delivery, AI generation and social posting. We will publish the list and notify customers before adding or replacing a sub-processor, so you have the chance to object.

If your own customers ask to access or delete their data, you can export or delete content from within the Service. If you need help, contact us and we will assist within a reasonable time.

We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls and logging. If we become aware of a personal data breach affecting your data, we will notify you without undue delay.

Privacy and data protection questions: hello@postrocket.co.