PostPilot

Privacy Policy

Last updated: 24 September 2026

AIO Technologies ("we", "us") runs PostPilot at https://social.aio.co.tz, a service that lets you schedule and publish posts to your social media accounts. This policy explains what information we collect, why, and the choices you have. It is written to meet the Personal Data Protection Act, 2022 of Tanzania and the requirements of the social networks we connect to.

1. Information we collect

  • Account details: your name, email address, password (stored encrypted, we can't read it), timezone and, if you pay, your mobile money number.
  • Connected social accounts: when you connect Facebook, Instagram, TikTok, LinkedIn or X, that network gives us an access token and basic profile details (page or account name, ID, profile picture, username). We never see or store your social media passwords.
  • Your content: the posts, captions, links, photos and videos you create or upload, and the publishing results (for example the link to a published post or an error message).
  • Payments: the plan, amount, date, network and transaction reference. Payments are processed by AzamPay and your mobile network; we do not receive your mobile money PIN.
  • Technical data: log-in sessions, IP address and error logs, used to keep the service secure and working.

2. How we use it

  • To publish the posts you ask us to publish, at the time you choose, to the accounts you choose.
  • To run your account: log-in, plan limits, billing, receipts and reminders.
  • To keep the service secure, fix problems and answer your support requests.

We do not sell your data, use it for advertising, or read your social media messages. We only use access to your social accounts to publish the content you create in PostPilot and to show basic account details (name and picture) in the app.

3. Data from Facebook, Instagram, TikTok, LinkedIn and X

Information received from these platforms is used only to provide the features you request, in line with each platform's developer terms (including the Meta Platform Terms and TikTok Developer Terms). Access tokens are stored encrypted. You can remove our access at any time by disconnecting the account in PostPilot (Accounts page) or in the platform's own settings (for Facebook: Settings → Business integrations / Apps and websites).

4. Who we share data with

  • The social networks you publish to: your post content is sent to them when it is published.
  • AzamPay and the mobile money operators, to process your payments.
  • An AI provider, only when you use the AI caption helper: the text you type into it is sent to generate a caption.
  • Our hosting provider, which stores the service's data on our behalf.
  • Authorities, if the law requires it.

5. How long we keep it

We keep your data while your account is open. When you delete your account, we delete your profile, connected accounts and tokens, posts, uploaded media and usage records straight away. Server backups containing your data are overwritten within 30 days.

6. Your rights

You can see and change your details in Settings, disconnect social accounts at any time, and delete your account and all its data from Settings → Delete account. You can also ask us for a copy of your data or to correct or delete it by writing to us. See our data deletion instructions.

7. Security

We use HTTPS, encrypted storage for passwords and access tokens, and access controls on our servers. No system is perfectly secure, so please use a strong password and keep it private.

8. Children

PostPilot is for businesses and people aged 18 or older. We do not knowingly collect data from children.

9. Changes

If we change this policy we will update the date above and, for important changes, tell you by email or in the app.

10. Contact

AIO Technologies, Dar es Salaam, Tanzania. Email: support@aio.co.tz. Phone: 0754 500 541.