Privacy policy

One Point Ventures LLC, a Florida limited liability company trading as Pozy, is the controller for personal data about our website visitors, customers and their team members. You can reach us at support@pozy.ai. For data you process through Pozy about your own audience, you are the controller and we act as your processor under the data processing agreement.

Account data: your name, email address, password hash, two-factor settings and workspace membership.

Billing data: billing contact, invoices and payment status. Card details are handled by our payment processor and are not stored on our servers.

Usage data: API request logs (time, path, status, duration, IP address and user agent), webhook delivery logs and activity logs.

Connected account data: the profile details, posts, messages, comments, analytics and ad data of the accounts you connect, processed on your instructions.

Messages you send us, including support requests and questions to the support assistant.

Website forms: the name, email address, company, website, message and other answers you type into a form on this website, and, with each submission, the IP address and browser user agent it came from. We use the IP address and user agent to limit spam and abuse of the forms.

Referral data: if you arrive through a referral link, the referral code from that link. It stays in your browser until you create an account, as described in the cookie policy, and is then attached to your workspace so the person who referred you can be recognised.

To provide and secure the service (performance of our contract with you), to bill you (contract and legal obligation), to answer your requests (legitimate interest), to improve Pozy using aggregate usage (legitimate interest), and to send product emails you can opt out of (consent or legitimate interest).

Account data: for as long as your workspace exists. When a workspace is closed, its logs, events, webhooks, API keys, sessions and support history are deleted within 30 days. We keep a minimal record of the profiles and accounts it had connected (names and identifiers) for as long as needed to keep them disconnected and out of other workspaces. Logs expire on the schedule below, and billing records are kept as described next.

Billing records: invoices and payment history are kept for seven years, because tax and accounting law requires it.

API request logs and webhook delivery logs: 90 days.

Connected account data: until you disconnect the account or close the workspace.

Website form submissions, including the IP address and user agent stored with them: 12 months, or until you ask us to delete them.

Backups: deleted data can remain in database backups for up to 30 days before the backups expire.

Service providers that help us run Pozy, listed on our subprocessors page, under contracts that protect your data. The platforms you connect, when you instruct us to act on them. Authorities, when the law requires it. We do not sell personal data.

Pozy is based in the United States, and our subprocessors process data in the United States and the European Union. Where personal data from the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on the standard contractual clauses.

You can ask to access, correct, delete, restrict or port your personal data, and object to processing based on legitimate interest. Write to support@pozy.ai. We answer within one month. You can also complain to your data protection authority.

We will post changes here and, if they are significant, tell you by email before they apply.