Privacy

The privacy and cookie policy of Mixpost.

This Privacy and Cookie Policy applies to Mixpost app (hereafter referred to as "Mixpost app", the "App", or the "Software"), available at https://mixpost.app ("Website"), and operated by INOVECTOR DIGITAL S.R.L., registered in the Republic of Moldova with number 1019600028867, hereafter referred to as "Inovector".

The Mixpost app is offered as a hosted service at https://cloud.mixpost.app and as self-hosted software available from https://mixpost.app. References to the "Mixpost app" in this Policy cover both the hosted and self-hosted offerings.

You, "your", "Customer", "User", and "Data Contributor" are kindly requested to read this Privacy Policy ("Policy") carefully because it contains essential information about the processing of your data and the use of cookies by Mixpost app and Inovector. Where the law requires your consent, for example for analytics and marketing cookies in the European Economic Area, we ask for it separately and you can change your choice at any time (see section 4). Using the Website does not mean you consent to those cookies.

1. The Information We Collect

a. When you visit our Website or use the Mixpost app
When you visit the Website or use the Mixpost app, we collect information about your browser type and Internet Protocol ("IP") address. When you register a Mixpost app account with us, we may collect personal information from you. You must provide your name, password, business name, and other essential information.

The information we receive upon purchase of a Mixpost app license may include your name, e-mail address, phone number, and residence address. Please note that when you purchase a paid Mixpost app license or subscribe to Mixpost Cloud, your credit card details and personal data are not transmitted to us and are not stored in our system. The processing of payment details is managed by our payment processor "Paddle" (our merchant of record). Paddle may collect the user's email address, phone number, billing address, credit card details, and expiration date, and may use your Payment Data in accordance with their Privacy Policy here.

When you create an account, we also save how you found us: the page you first landed on, the website that referred you, and the campaign tags in the link (UTM parameters). If you allowed marketing cookies, this includes the full addresses of those pages, all campaign tags, the ad click identifiers added by Google or Meta (such as gclid or fbclid), your browser's user agent, and the Meta browser cookies described in section 4. Without that permission we only keep the referring domain, the landing page without its parameters, and the main campaign tags (source, medium, and campaign name).

b. Import Option
Through the Mixpost app's "import option", we may also collect Personal Data or the email address of contacts that you choose to share with us. When you provide us with personal information about your contacts, they are subject to your privacy policy or your responsibility.

c. Support Chat
The chat window on the Website runs on Chatwoot, which we host ourselves on our servers at Hetzner in Germany, so this data is not shared with third parties. When you use the chat, we receive your messages, any name or email address you give us, and technical details that help us answer: your browser and operating system, the page you are on, the website that referred you, and your approximate location based on your IP address. We use this data only to answer your questions and keep the history of the conversation.

2. The Uses of Information Collected

a. Your Profile
When you register for the Mixpost app, you create your profile and configure your privacy settings.

b. Legitimate Interests under the GDPR
To the extent that Inovector's processing of your Personal Data provided by you is subject to the General Data Protection Regulation ("GDPR") in the European Union ("EU"), Inovector relies on its legitimate interests to process your data. This may include keeping your information after you deactivate your Mixpost app account for the period needed for us to pursue legitimate business interests, direct marketing purposes, conduct audits, comply with (and demonstrate compliance with) legal obligations, resolve disputes, and enforce our agreements. Our legitimate interest also covers counting Website visits without cookies (see section 4) and keeping the limited record of how you found us described in section 1a.

Analytics and marketing cookies, and the data we send to advertising partners (section 3d), rely on your consent where the law requires it: in the EU and the rest of the European Economic Area, the United Kingdom, Switzerland, and the Republic of Moldova. In other countries they are on by default and you can turn them off at any time in Cookie settings.

c. Website and Mixpost app
We use Navigational Information alone or in combination with publicly available information about you to operate, improve and personalize your experience on the Website and within the Mixpost app. We also use Navigational Information, Personal Data you have provided, publicly available information about you, or any combination of these to understand, operate, enhance, improve, research, and analyze the usage trends and preferences for Mixpost app features and to create new features and functionality.

d. Administration We will use your email address to contact you for administrative purposes, customer service purposes, changes to the Mixpost app, important notices, or rights of privacy.

e. Email Communications We may use your email address to send you periodic emails, newsletters, and occasional business announcements and updates about the Mixpost app. You can opt out of receiving these communications at any time by following the unsubscribe instructions included in each email or by contacting us directly.

3. Disclosure to Third Parties

a. No Selling Of Your Personal Data
At Inovector, we are not in the business of selling your information to any third party. We do share limited data with advertising partners to measure our ads (see d. below). Some US state laws, such as the California Consumer Privacy Act, may treat this as "sharing" or "targeted advertising". You can opt out at any time by turning off marketing cookies in Cookie settings.

b. Your Instruction
We will share, disclose, and update your Personal Data in accordance with your instructions, including any applicable Agreement, Terms of Conditions, and Terms of Use.

c. To Comply with Laws
We may be compelled to disclose Personal Data if we reasonably believe such disclosure is [to protect our rights, protect your safety or the safety of others] in accordance with or required by any applicable law, regulation, or legal process.

d. Advertising Partners
With your marketing consent (or, outside the countries listed in section 2b, unless you opted out), we use the Meta Pixel to measure which ads bring visitors and customers. When you create a Mixpost account or start a Mixpost Cloud trial, our server reports this event to Meta through its Conversions API, together with your email address and account ID (both hashed, so Meta can match them but not read them), your browser's user agent, the Meta browser cookies, and the ad click identifier, if any. We do not send your IP address, and we do not send these events for visitors who did not allow marketing cookies.

4. Cookies

Cookies are small text files stored on your computer or mobile device. We group the cookies on the Website into three categories:

  • Strictly necessary: sign-in, security, your country for prices, and your cookie choice. These are always on because the Website needs them to work.
  • Analytics: Google Analytics, Matomo, and our on-site messages tool, to understand which pages are useful and improve the Website.
  • Marketing: Meta Pixel, to measure our ads and show you relevant ones.

Your choice
In the EU and the rest of the European Economic Area, the United Kingdom, Switzerland, and the Republic of Moldova, analytics and marketing cookies are off until you allow them in the cookie banner. In other countries they are on by default. Everywhere, you can change your choice at any time with the link at the bottom of every page. When you turn a category off, we delete its cookies. You can also block or delete cookies in your browser settings.

Analytics without cookies
We use Matomo, an open source analytics tool that we host ourselves, so this data is not shared with third parties. Matomo counts every visit, but it only sets cookies if analytics cookies are allowed. Without them, it counts visits without storing anything on your device. Matomo shortens your IP address (the last two parts are removed) before storing it or using it to estimate your country.

On-site messages
Some pages show announcements and offers through a tool we built and host ourselves on our servers at Hetzner in Germany. It records when a message is shown, clicked, or closed, together with the page address and a random visitor ID. With analytics cookies allowed, this ID is kept in your browser's local storage across visits. Without them, it lasts only until you close the browser tab. The tool also stores which messages you have already seen, so it does not show them again too often.

Google Tag Manager and Consent Mode
The Website loads Google Tag Manager, which decides which of the tools above may run. It does not set cookies itself. Google Analytics follows Google Consent Mode: without your consent they do not set cookies, but they may send Google cookieless signals, such as the page address and the fact that consent was not given. For more information, see the Google Privacy Policy and the Meta Privacy Policy.

Cookies we use

Cookie Category Set by Purpose Duration
mixpost_session, XSRF-TOKEN Strictly necessary Mixpost Keeps you signed in and protects forms 2 hours
c Strictly necessary Mixpost Remembers your country for prices and the cookie banner Up to 5 years
mixpost_consent Strictly necessary Mixpost Stores your cookie choice 1 year
cw_conversation, cw_user_*, cw_snooze_campaigns_till Strictly necessary Chatwoot (self-hosted) Keeps your support chat conversation across pages 1 year (snooze: 1 hour)
altin_session_id, altin_shown_*, altin_count_* Strictly necessary Mixpost (self-hosted) Limits how often the same message is shown (browser storage) Browser session, or until cleared
altin_visitor_id Analytics Mixpost (self-hosted) Counts message views and clicks per visitor (browser storage) Until cleared (only for the browser session without consent)
_pk_id, _pk_ses Analytics Matomo (self-hosted) Recognizes returning visitors and visits 13 months, 30 minutes
_ga, _ga_* Analytics Google Analytics Distinguishes visitors and sessions 1 year
_fbp, _fbc Marketing Meta Identifies the browser and the Meta ad click 90 days

5. Correct, Update and Delete Information

The User is entitled at any time to independently edit the Personal Information in his/her Mixpost app account. The User is entitled to delete his/her Mixpost app account at any time.

Our Site visitors have the following rights:

  • To gain access or receive your Personal Information in a commonly used and machine-readable format
  • To remove consent from being contacted by email, phone, and other means of communication
  • To request for all Personal Data that was received from you to be deleted from all our records
  • To request that we update, correct, or remove any omissions in your Personal Information that we store
  • To opt out of all kinds of direct marketing and other communication
  • To object or otherwise restrict Inovector from continuing to process your Personal Data To exercise any of these rights, please email us at ask@inovector.com.

6. International Transfer

To perform our operations, we may transfer and access Personal Information from around the world, including the Republic of Moldova, the United States, the EU, and other countries. While transferring the data, we take the necessary measures to safeguard the activity in general, and the data subjects in particular to ensure an appropriate level of protection for their fundamental rights. The Privacy Policy shall apply even if Personal Information is transferred or accessed from other countries. Please refer to the List of data sub-processors for more information about why we use those third-party services, and where they are located.

Media files you upload to Mixpost Cloud, such as images and videos, are stored with Hetzner in Germany and delivered through the bunny.net content delivery network. Both are European companies and process this data on our behalf under data processing agreements. When content is delivered through the CDN, bunny.net may briefly process visitor IP addresses and request headers at its edge servers in order to serve and secure the content. IP addresses in bunny.net's delivery logs are anonymized, so these logs do not contain identifiable personal data. Where edge servers outside the European Economic Area are used to cache content, these transfers are safeguarded by Standard Contractual Clauses.

Sentry is used exclusively for server-side (backend) error monitoring. It does not run any code in your browser and does not track visitors. When an error occurs on our servers, the error report may include technical details such as stack traces and request metadata, and is used solely to diagnose and fix the issue. These transfers to the United States are safeguarded by a data processing agreement that includes Standard Contractual Clauses.

Google and Meta only receive data from analytics and marketing cookies, and the events described in section 3d, as explained in section 4. Transfers of this data to the United States are safeguarded by Standard Contractual Clauses included in their data processing terms.

AI processing (text and image content generation): we use OpenRouter (USA) as a secure gateway to various artificial intelligence services and models. The text and requests you submit are transmitted via API exclusively to integrated providers with strict Zero Data Retention policies, such as Google (USA). This data is processed temporarily and in real time; storing it long term or using it to train AI models is prohibited. Content is only sent to these providers when you actively use an AI feature, and these transfers are safeguarded by a data processing agreement that includes Standard Contractual Clauses.

7. Security

At Inovector, we take the security of data very seriously and it is at the top of our priority. The Mixpost app and the Website take appropriate precautions to protect Personal Data. Your Mixpost app account information is located on a secured server behind a firewall. When you enter your personal information, such as a password, we encrypt that information using secure socket layer technology.

8. Changes and Notices

Inovector reserves the right to change this Privacy Policy from time to time (without notice), to comply with laws, regulations, our business, and industry standards including security. Therefore we advise you to review this Privacy Policy regularly. The latest version of the Privacy Policy is always available on the Website. If you disagree with the changes or any part of this Privacy Policy, you should deactivate your Mixpost app account immediately and refrain from using the Mixpost app and the Website.

9. Retention of Personal Data

We reserve the right to retain any Personal Data, subject to:

  • Fulfilling our obligations under our Agreement with you;
  • Comply with applicable laws. Without limiting the generality of the foregoing, if you have an account and wish to close your account, please visit your account settings. Upon your request, we will close your account, and delete your contact information, history, and billing information. After you close your account, you will not be able to sign in to your account. After you close your account, please note that we may retain and use certain of your information for analytical purposes and recordkeeping integrity where permitted by law to prevent fraud, collect any fees owed, enforce our user agreements and terms, and comply with legal requirements. If certain information is shared with third parties or you share with other users, such content or information may still be available to those other users.

CONTACT DETAILS

For any additional questions or inquiries about the Privacy Policy, please send an email to ask@inovector.com.