DATA & COOKIES POLICY

Technical Data Processing and Cookie Usage on Postflo

Effective: 26 March 2026 · Postflo (postflo.in) · Strux Digital Pvt. Ltd.

1. INTRODUCTION

This Data & Cookies Policy ("Policy") supplements the Privacy Policy of Strux Digital Private Limited and provides detailed information about how Postflo uses cookies, session identifiers, and similar tracking technologies on the Postflo website (postflo.in) and application (app.postflo.in). This Policy should be read alongside the Privacy Policy and Terms of Use.

2. WHAT ARE COOKIES AND SIMILAR TECHNOLOGIES

Cookies are small text files placed on your device by a website or application. They enable the platform to recognise your device, maintain sessions, store preferences, and collect usage information. Similar technologies include:

• Session identifiers: Server-side tokens that identify and maintain your authenticated session.

• Local and session storage: Browser-based storage for temporary data.

• Web beacons and pixel tags: Invisible image files embedded in pages to track interactions.

• CSRF tokens: Security tokens preventing cross-site request forgery.

3. CATEGORIES OF COOKIES WE USE

3.1 Strictly Necessary Cookies

These cookies are essential for the Service to function and cannot be disabled. They include:

• Session cookies: Maintain your authenticated state while you use the Platform. These expire when you log out or close your browser.

• Persistent login cookies: Extend session duration up to 7 days when persistent login is enabled.

• CSRF protection tokens: Prevent cross-site request forgery on all authenticated form submissions.

• Security and rate-limiting tokens: Support fraud prevention on login and sensitive endpoints.

No consent is required for strictly necessary cookies as they are essential for security and operation.

3.2 Functional Cookies

Functional cookies remember your preferences to personalise your experience, including:

• Active show profile selection.

• Language and interface preferences.

• Onboarding completion state.

• Notification read status.

3.3 Analytics Cookies

Postflo uses Google Tag Manager (GTM) to coordinate analytics and tracking. Analytics cookies help us understand how users interact with the Platform, identify performance issues, and improve features. Data collected is aggregated and anonymised where possible. You may opt out of Google Analytics at tools.google.com/dlpage/gaoptout.

3.4 Third-Party Cookies

Certain features involve third-party services that may set their own cookies:

• Google reCAPTCHA: Used on the demo booking form to verify human interaction.

• Payment gateways: May set cookies to manage payment session state.

Postflo does not control third-party cookies. Please review the cookie policies of these providers directly.

4. MANAGING YOUR COOKIE PREFERENCES

You can manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be alerted when a new cookie is set. Disabling strictly necessary cookies will prevent you from using the Service as they are required for authentication and security. Please consult your browser documentation for guidance.

5. DATA PROCESSING AND AI INFRASTRUCTURE

5.1 Transcript Processing Pipeline

When you submit a YouTube episode URL or transcript to the Platform, the transcript content is retrieved using the youtube-transcript-api library via Webshare rotating residential proxies, and transmitted to Anthropic's Claude AI API for processing. By submitting content, you consent to this processing pipeline. You are responsible for ensuring you have the necessary rights and permissions to process submitted content.

5.2 Third-Party AI Processing

Anthropic processes transcript data on Postflo's behalf to generate Outputs. Anthropic's processing is subject to Anthropic's own privacy policy and data processing terms. Transcripts sent to Anthropic are used solely for generating the requested Outputs for your session. Postflo ensures contractual data processing protections are in place with Anthropic.

5.3 Infrastructure and Hosting

The Service is hosted on Render's cloud infrastructure. Database storage uses PostgreSQL within Postflo's managed deployment environment, with data at rest stored in Postflo's dedicated infrastructure.

6. DATA WE DO NOT COLLECT

Postflo does not:

• Collect or store full payment card numbers — handled exclusively by payment processors.

• Collect biometric data, medical data, or government identification numbers beyond those required for GST compliance.

• Sell personal data to advertisers or third-party data brokers.

• Use personal data for fully automated decision-making that produces significant legal or similarly significant effects without human oversight.

7. RETENTION OF TECHNICAL DATA

• Session data: Deleted upon logout or session expiry.

• Server logs: Retained for 90 days.

• Analytics data: Retained per Google Analytics data retention settings (default 26 months).

8. NON-COMPETE NOTE ON DATA USE

Data collected through your use of the Service, including usage patterns, workflow interactions, tool engagement sequences, and Output formats, constitutes Confidential Information of Postflo. This data may not be used to inform the design, development, or operation of any Competing Product as defined in the Terms of Use. Any such use is a breach of both the Terms of Use and this Policy.

9. CHANGES TO THIS POLICY

This Policy may be updated to reflect changes in technology, legal requirements, or operational practices. Material changes will be communicated as described in the Privacy Policy.

Contact: legal@postflo.in

© 2026 Strux Digital Private Limited. All Rights Reserved.

Postflo is a product of Strux Digital Pvt. Ltd. · postflo.in · Hyderabad, Telangana, India