Privacy Policy | PostBalloon

Effective date: August 28, 2026

PostBalloon is an unincorporated founder-operated business that provides business content production, content delivery, related account tools, and optional publishing services. This Privacy Policy explains how PostBalloon ("PostBalloon," "we," "us," or "our") collects, uses, discloses, and protects information when you visit our websites, create or use a PostBalloon account, submit a business application or request, purchase or receive a Drop or other service, communicate with us, or use related PostBalloon services (collectively, the "Services").

By using the Services, you acknowledge the practices described in this Privacy Policy. If you are using PostBalloon for a business or other organization, you are responsible for ensuring that you are authorized to provide information and materials to us on that organization's behalf.

1. Information We Collect

We collect information in several ways: information you provide, information generated through your use of the Services, information from service providers, and information from public business sources when needed to perform a service you request.

1.1 Account, identity, and contact information

Depending on how you use PostBalloon, we may collect: your name; email address; authentication identifiers and account IDs; business or organization name; role or relationship to the business; phone number if you choose to provide one or if a future workflow requests it; account preferences and account history.

Authentication is currently supported through Firebase Authentication. PostBalloon does not treat a browser-supplied email address by itself as proof of identity.

1.2 Business and Content Brain information

To understand and produce work for your business, we may collect and store: business name, description, website, social-media handles, and public business links; products, services, offers, audience information, locations, and business facts; brand voice, style preferences, colors, fonts, logos, and other brand information; customer-provided instructions, goals, restrictions, claims, and corrections; permissions and preferences concerning generated people, likenesses, locations, synthetic voice, or other generated media; information about people associated with your business where you provide or authorize that information; reusable production context accumulated through prior Requests and Drops.

PostBalloon may maintain this persistent business context as a Content Brain or Business Profile so returning customers do not have to re-enter the same information for every Request.

1.3 Customer materials and creative assets

You may provide or authorize us to use materials including logos and brand files; photographs and video; audio and voice recordings; product or service imagery; people, places, facilities, or event imagery; documents, captions, copy, creative references, and prior content; other files you upload or otherwise make available for production.

We may also create or store prompts, production plans, generated outputs, captions, thumbnails, previews, quality-control notes, and other production metadata associated with your work.

1.4 Public business information

When you ask PostBalloon to understand, research, or produce content for a business, we may review publicly available information from sources such as the business's official website, public social profiles, public listings, public posts, and other clearly relevant public sources. We use public sources to support the requested service, verify business context, and inform creative strategy. We do not treat unsupported public inference as authoritative private business truth.

1.5 Payment and transaction information

Payments are processed through Stripe or another payment provider identified at checkout. We may receive and store: product or offer purchased; amount and currency; payment, Order, Checkout, refund, and fulfillment status; billing contact details supplied through the payment process; limited payment-method metadata made available by the processor, such as card brand or last four digits.

PostBalloon does not need to receive your full payment-card number in order to process ordinary Stripe payments.

1.6 Communications and support information

We may collect and retain communications you send to us or exchange through PostBalloon, including in-product messages; support requests and tickets; email correspondence; feedback, ratings, corrections, approvals, complaints, and sales questions; records of transactional communications related to your account, Request, Drop, Order, or publishing service.

If you activate managed publishing or connect a social account, PostBalloon and its publishing providers may process information necessary to provide that service, such as connected platform/account identifiers; authorization or connection status; access tokens or provider-managed authorization credentials; scheduling and publishing instructions; post status and performance information made available by the connected platform or publishing provider.

You should use authorized connection flows where offered. Do not send us your social-media password unless PostBalloon specifically provides a secure, documented process requiring it.

1.8 Usage, device, analytics, and attribution information

When you use our websites or applications, we or our service providers may collect: pages and screens viewed; buttons or features used; timestamps and session activity; browser and device information; IP address and approximate location derived from it; referring page or source; campaign, UTM, and advertising-attribution information; application, checkout, Drop, and feature events; error, performance, and diagnostic information.

PostBalloon currently uses PostHog for behavioral analytics and may use advertising or attribution technologies in connection with campaigns, including Meta advertising, where configured.

2. Information We Do Not Want in the Ordinary Workflow

PostBalloon's ordinary content-production workflow is not designed to receive highly sensitive personal information. Unless we specifically establish an appropriate workflow and request it for a legitimate purpose, please do not provide: Social Security numbers or similar government identifiers; bank-account credentials or financial-account passwords; complete payment-card numbers outside the payment provider's secure checkout; patient medical records or protected health information; consumer financial records unrelated to the content service; login passwords; biometric templates; other highly sensitive information that is unnecessary to create or deliver your content.

If sensitive information is accidentally submitted, contact us so we can evaluate appropriate handling or deletion.

3. How We Use Information

We may use information to: provide, operate, maintain, and improve the Services; create and maintain Accounts, Business Profiles, and Content Brains; evaluate applications and Requests; research and understand a customer's business when requested; plan, generate, edit, quality-check, package, and deliver Drops and other creative work; maintain customer history and avoid unnecessary re-briefing; process Orders, payments, refunds, discounts, and commercial entitlements; provide managed publishing when separately authorized; authenticate users and protect account ownership; send transactional messages about Requests, Drops, Orders, account state, support, publishing, or security; respond to support, feedback, corrections, and customer communications; analyze acquisition, funnel, product, content, and operational performance; detect abuse, fraud, security issues, technical errors, or violations of our Terms; improve production workflows, quality controls, prompts, product features, and internal operating systems; comply with legal obligations and enforce our agreements; market PostBalloon where permitted by law and honor applicable opt-out choices.

4. AI-Assisted Processing and Generative Media

PostBalloon is a human-directed, AI-assisted content-production business. We may use artificial-intelligence and generative-media systems in activities such as business and market research; production planning and ideation; writing and caption assistance; image, video, voice, audio, and other media generation where authorized; editing, transcription, quality review, and production assistance; software development and internal operations; support and workflow automation.

To perform these tasks, relevant portions of business information or customer-provided assets may be processed by authorized third-party AI or media providers. The exact provider can vary based on the work being performed. Current or recent providers may include services from Higgsfield, OpenAI, Anthropic, ElevenLabs, and other production vendors selected by PostBalloon.

We try to send only information reasonably needed for the task and to respect recorded customer permissions concerning likeness, synthetic voice, generated people, locations, and exact source assets.

PostBalloon does not intentionally use private customer source assets to train a public model for unrelated purposes. Third-party providers process information under their own contracts, account settings, and privacy terms. If PostBalloon later intends to use identifiable private customer source assets to train a proprietary model beyond ordinary service fulfillment, we will establish an appropriate contractual or legal basis and obtain any authorization required by applicable law before doing so.

We may use de-identified or aggregated operational information, correction categories, quality outcomes, service performance, feedback, and other non-confidential learnings to improve PostBalloon's systems and processes.

5. How We Disclose Information

We do not disclose customer information indiscriminately.

5.1 Service providers and subprocessors: hosting/auth/infrastructure such as Google/Firebase; media storage/delivery such as Cloudflare; payments such as Stripe; transactional email such as Resend; analytics such as PostHog; social authorization/scheduling/publishing/reporting such as Metricool and the underlying social platforms; AI/reasoning/image/video/voice/audio/transcription/production tools; internal documentation/collaboration including Notion; advertising/attribution/campaign measurement where configured.

5.2 At your direction, including publishing approved content to social-media accounts you authorize PostBalloon to manage.

5.3 Legal, safety, and protection purposes when reasonably necessary to comply with law; protect rights/safety/property/security; investigate fraud/abuse/security incidents; establish, exercise, or defend legal claims.

5.4 Business restructuring: merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to appropriate confidentiality and legal requirements.

6. Analytics, Cookies, and Advertising

PostBalloon and its providers may use cookies, local storage, SDKs, pixels, server-side events, or similar technologies to operate the Service, maintain sessions, measure performance, understand product usage, attribute advertising, and improve acquisition. We currently use PostHog. We also run advertising through Meta and may use campaign parameters, referral information, or advertising technologies where configured. When applicable law requires consent, notice, or an opt-out, PostBalloon intends to provide the legally required control.

PostBalloon does not sell personal information for money. We may disclose limited device, usage, referral, or attribution information to analytics or advertising providers when those technologies are enabled. Some U.S. state privacy laws use terms such as "sell" or "share" more broadly. You may contact bryton@postballoon.com to make a request. Where PostBalloon is legally required to recognize a browser-based opt-out signal such as Global Privacy Control, we will implement and honor that requirement.

8. Data Retention

We retain information as reasonably necessary for the purposes described, including account access, Content Brain, Drops, Orders, disputes, security, legal/tax/accounting, backups, and service improvement. Retention periods vary. We do not promise a universal fixed deletion period. When information is no longer reasonably needed, we may delete, de-identify, or aggregate it, subject to backup cycles and legal obligations.

9. Security

We use administrative, technical, and organizational measures intended to protect information. Current controls include authenticated customer access, server-side ownership checks, protected media delivery, provider-based payment processing, and access controls. No online service is completely secure. If you believe your account or information has been compromised, contact bryton@postballoon.com promptly.

10. Your Choices and Privacy Rights

You may contact us to request reasonable assistance with access, correction, deletion where available, portability where applicable, opt-out of certain marketing/advertising, revoking publishing authorization, and questions. Depending on jurisdiction, you may have statutory rights. Email bryton@postballoon.com. Authorized agents may make requests where applicable law permits, subject to verification.

11. Marketing Communications

Transactional communications may be necessary to operate the Services. Marketing recipients may opt out. Opting out of marketing does not prevent transactional messages.

12. Children's Privacy

PostBalloon is a business service and is not directed to children under 13. We do not knowingly seek to collect personal information directly from children under 13. If you believe a child under 13 has submitted personal information, contact bryton@postballoon.com. Customers are responsible for obtaining appropriate permission before providing photographs, recordings, likenesses, or other personal information relating to minors.

13. International Users

PostBalloon is operated from the United States. Information may be transferred to, stored in, or processed in the United States or other countries where service providers operate.

14. Third-Party Sites and Platforms

Third-party sites and platforms have their own terms and privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy. We will update the effective date when we make material revisions and will provide additional notice when required by law.

16. Contact Us

PostBalloon

Unincorporated founder-operated business

Email: bryton@postballoon.com

A formal business mailing address and dedicated privacy contact may be added as PostBalloon's legal structure and compliance program mature.