Privacy
The privacy and cookie policy of Mixpost.
This Privacy and Cookie Policy applies to Mixpost app (hereafter referred to as
"Mixpost app", the "App", or the "Software"), available at https://mixpost.app
("Website"), and operated by INOVECTOR DIGITAL S.R.L., registered in the Republic of Moldova with
number 1019600028867, hereafter referred to as "Inovector".
The Mixpost app is offered as
a hosted service at https://cloud.mixpost.app and as self-hosted software
available from https://mixpost.app. References to the "Mixpost app" in this Policy
cover both the hosted and self-hosted offerings.
You,
"your", "Customer",
"User", and "Data Contributor"
are kindly requested to read this Privacy Policy ("Policy") carefully because it contains
essential information about the processing of your data and the use of cookies by Mixpost app and
Inovector. Where the law requires your consent, for example for analytics and marketing cookies
in the European Economic Area, we ask for it separately and you can change your choice at any
time (see section 4). Using the Website does not mean you consent to those cookies.
1. The Information We Collect
a. When you visit our Website or use the Mixpost app
When you visit
the Website or use the Mixpost app, we collect information about your browser type and Internet
Protocol ("IP") address. When you register a Mixpost app account with us, we may collect personal
information from you. You must provide your name, password, business name, and other essential
information.
The information we receive upon purchase of a Mixpost app license may include
your name, e-mail address, phone number, and residence address. Please note that when you purchase
a paid Mixpost app license or subscribe to Mixpost Cloud, your credit card details and personal data are not transmitted to us
and are not stored in our system. The processing of payment details is managed
by our payment processor "Paddle" (our merchant of record). Paddle may collect
the user's email address, phone number, billing address, credit card details, and expiration date,
and may use your Payment Data in accordance with their Privacy Policy here.
When you create an account, we also save
how you found us: the page you first landed on, the website that referred you, and the campaign
tags in the link (UTM parameters). If you allowed marketing cookies, this includes the full
addresses of those pages, all campaign tags, the ad click identifiers added by Google or Meta
(such as gclid or fbclid), your browser's user agent, and the Meta browser cookies described in
section 4. Without that permission we only keep the referring domain, the landing page without its
parameters, and the main campaign tags (source, medium, and campaign name).
b.
Import Option
Through the Mixpost app's "import option", we may also
collect Personal Data or the email address of contacts that you choose to share with us. When you
provide us with personal information about your contacts, they are subject to your privacy policy
or your responsibility.
c. Support Chat
The chat window on
the Website runs on Chatwoot, which we host ourselves on our servers at Hetzner in Germany, so
this data is not shared with third parties. When you use the chat, we receive your messages, any
name or email address you give us, and technical details that help us answer: your browser and
operating system, the page you are on, the website that referred you, and your approximate
location based on your IP address. We use this data only to answer your questions and keep the
history of the conversation.
2. The Uses of Information Collected
a. Your Profile
When you register for the Mixpost app, you create
your profile and configure your privacy settings.
b. Legitimate Interests
under the GDPR
To the extent that Inovector's processing of your Personal
Data provided by you is subject to the General Data Protection Regulation ("GDPR") in the European
Union ("EU"), Inovector relies on its legitimate interests to process your data. This may include
keeping your information after you deactivate your Mixpost app account for the period needed for us
to pursue legitimate business interests, direct marketing purposes, conduct audits, comply with
(and demonstrate compliance with) legal obligations, resolve disputes, and enforce our
agreements. Our legitimate interest also covers counting Website visits without cookies (see
section 4) and keeping the limited record of how you found us described in section 1a.
Analytics and marketing cookies, and the data we send to advertising partners (section 3d), rely
on your consent where the law requires it: in the EU and the rest of the European Economic Area,
the United Kingdom, Switzerland, and the Republic of Moldova. In other countries they are on by
default and you can turn them off at any time in Cookie settings.
c. Website and Mixpost app
We use Navigational
Information alone or in combination with publicly available information about you to operate,
improve and personalize your experience on the Website and within the Mixpost app. We also use
Navigational Information, Personal Data you have provided, publicly available information about
you, or any combination of these to understand, operate, enhance, improve, research, and analyze
the usage trends and preferences for Mixpost app features and to create new features and
functionality.
d. Administration We will use your email address
to contact you for administrative purposes, customer service purposes, changes to the Mixpost app,
important notices, or rights of privacy.
e. Email Communications
We may use your email address to send you periodic emails, newsletters, and occasional business
announcements and updates about the Mixpost app. You can opt out of receiving these communications
at any time by following the unsubscribe instructions included in each email or by contacting us
directly.
3. Disclosure to Third Parties
a. No Selling Of Your Personal Data
At Inovector, we are not in the
business of selling your information to any third party. We do share limited data with
advertising partners to measure our ads (see d. below). Some US state laws, such as the California
Consumer Privacy Act, may treat this as "sharing" or "targeted advertising". You can opt out at any
time by turning off marketing cookies in Cookie settings.
b. Your
Instruction
We will share, disclose, and update your Personal Data in
accordance with your instructions, including any applicable Agreement, Terms of Conditions, and
Terms of Use.
c. To Comply with Laws
We may be compelled to disclose Personal Data if
we reasonably believe such disclosure is [to protect our rights, protect your safety or the safety
of others] in accordance with or required by any applicable law, regulation, or legal process.
d. Advertising Partners
With your marketing consent (or, outside the
countries listed in section 2b, unless you opted out), we use the Meta Pixel to measure which ads
bring visitors and customers. When you create a Mixpost account or start a Mixpost
Cloud trial, our server reports this event to Meta through its Conversions API, together with your
email address and account ID (both hashed, so Meta can match them but not read them), your
browser's user agent, the Meta browser cookies, and the ad click identifier, if any. We do not send
your IP address, and we do not send these events for visitors who did not allow marketing
cookies.
4. Cookies
Cookies are small text files stored on your computer or mobile device. We group the cookies on the Website into three categories:
- Strictly necessary: sign-in, security, your country for prices, and your cookie choice. These are always on because the Website needs them to work.
- Analytics: Google Analytics, Matomo, and our on-site messages tool, to understand which pages are useful and improve the Website.
- Marketing: Meta Pixel, to measure our ads and show you relevant ones.
Your choice
In the EU and the rest of the European Economic Area, the
United Kingdom, Switzerland, and the Republic of Moldova, analytics and marketing cookies are off
until you allow them in the cookie banner. In other countries they are on by default. Everywhere,
you can change your choice at any time with the link at the bottom of every page. When you turn a category off, we delete its
cookies. You can also block or delete cookies in your browser settings.
Analytics without cookies
We use Matomo, an open source analytics tool
that we host ourselves, so this data is not shared with third parties. Matomo counts every visit,
but it only sets cookies if analytics cookies are allowed. Without them, it counts visits without
storing anything on your device. Matomo shortens your IP address (the last two parts are removed)
before storing it or using it to estimate your country.
On-site messages
Some pages show announcements and offers through
a tool we built and host ourselves on our servers at Hetzner in Germany. It records when a
message is shown, clicked, or closed, together with the page address and a random visitor ID. With
analytics cookies allowed, this ID is kept in your browser's local storage across visits. Without
them, it lasts only until you close the browser tab. The tool also stores which messages you have
already seen, so it does not show them again too often.
Google Tag Manager and Consent Mode
The Website loads Google Tag
Manager, which decides which of the tools above may run. It does not set cookies itself. Google
Analytics follows Google Consent Mode: without your consent they do not set cookies,
but they may send Google cookieless signals, such as the page address and the fact that consent
was not given. For more information, see the Google Privacy Policy and the Meta
Privacy Policy.
Cookies we use
| Cookie | Category | Set by | Purpose | Duration |
|---|---|---|---|---|
| mixpost_session, XSRF-TOKEN | Strictly necessary | Mixpost | Keeps you signed in and protects forms | 2 hours |
| c | Strictly necessary | Mixpost | Remembers your country for prices and the cookie banner | Up to 5 years |
| mixpost_consent | Strictly necessary | Mixpost | Stores your cookie choice | 1 year |
| cw_conversation, cw_user_*, cw_snooze_campaigns_till | Strictly necessary | Chatwoot (self-hosted) | Keeps your support chat conversation across pages | 1 year (snooze: 1 hour) |
| altin_session_id, altin_shown_*, altin_count_* | Strictly necessary | Mixpost (self-hosted) | Limits how often the same message is shown (browser storage) | Browser session, or until cleared |
| altin_visitor_id | Analytics | Mixpost (self-hosted) | Counts message views and clicks per visitor (browser storage) | Until cleared (only for the browser session without consent) |
| _pk_id, _pk_ses | Analytics | Matomo (self-hosted) | Recognizes returning visitors and visits | 13 months, 30 minutes |
| _ga, _ga_* | Analytics | Google Analytics | Distinguishes visitors and sessions | 1 year |
| _fbp, _fbc | Marketing | Meta | Identifies the browser and the Meta ad click | 90 days |
5. Correct, Update and Delete Information
The User is entitled at any time to independently edit the Personal Information in his/her Mixpost app account. The User is entitled to delete his/her Mixpost app account at any time.
Our Site visitors have the following rights:
- To gain access or receive your Personal Information in a commonly used and machine-readable format
- To remove consent from being contacted by email, phone, and other means of communication
- To request for all Personal Data that was received from you to be deleted from all our records
- To request that we update, correct, or remove any omissions in your Personal Information that we store
- To opt out of all kinds of direct marketing and other communication
- To object or otherwise restrict Inovector from continuing to process your Personal Data To
exercise any of these rights, please email us at ask@inovector.com.
6. International Transfer
To perform our operations, we may transfer and access Personal Information from around the world, including the Republic of Moldova, the United States, the EU, and other countries. While transferring the data, we take the necessary measures to safeguard the activity in general, and the data subjects in particular to ensure an appropriate level of protection for their fundamental rights. The Privacy Policy shall apply even if Personal Information is transferred or accessed from other countries. Please refer to the List of data sub-processors for more information about why we use those third-party services, and where they are located.
- Hetzner Online GmbH | Cloud Infrastructure and Object Storage | Germany | https://hetzner.com
- BunnyWay d.o.o. (bunny.net) | Content Delivery Network | Slovenia | https://bunny.net
- DigitalOcean LLC | DNS Management only | USA | https://digitalocean.com
- Paddle.com Market Ltd | Payment Processor and Merchant of Record | United Kingdom | https://paddle.com
- Sentry by Functional Software, Inc | Server-Side Error Monitoring | USA | https://sentry.io
- OpenRouter, Inc. | AI Model Routing for Mixpost Cloud AI Features | USA | https://openrouter.ai
- Google Ireland Limited / Google LLC | Google Tag Manager and Google Analytics | Ireland, USA | https://policies.google.com/privacy
- Meta Platforms Ireland Limited | Meta Pixel and Conversions API (ad measurement) | Ireland, USA | https://www.facebook.com/privacy/policy
Media files you upload to Mixpost Cloud, such as images and videos, are stored with Hetzner in Germany and delivered through the bunny.net content delivery network. Both are European companies and process this data on our behalf under data processing agreements. When content is delivered through the CDN, bunny.net may briefly process visitor IP addresses and request headers at its edge servers in order to serve and secure the content. IP addresses in bunny.net's delivery logs are anonymized, so these logs do not contain identifiable personal data. Where edge servers outside the European Economic Area are used to cache content, these transfers are safeguarded by Standard Contractual Clauses.
Sentry is used exclusively for server-side (backend) error monitoring. It does not run any code in your browser and does not track visitors. When an error occurs on our servers, the error report may include technical details such as stack traces and request metadata, and is used solely to diagnose and fix the issue. These transfers to the United States are safeguarded by a data processing agreement that includes Standard Contractual Clauses.
Google and Meta only receive data from analytics and marketing cookies, and the events described in section 3d, as explained in section 4. Transfers of this data to the United States are safeguarded by Standard Contractual Clauses included in their data processing terms.
AI processing (text and image content generation): we use OpenRouter (USA) as a secure gateway to various artificial intelligence services and models. The text and requests you submit are transmitted via API exclusively to integrated providers with strict Zero Data Retention policies, such as Google (USA). This data is processed temporarily and in real time; storing it long term or using it to train AI models is prohibited. Content is only sent to these providers when you actively use an AI feature, and these transfers are safeguarded by a data processing agreement that includes Standard Contractual Clauses.
7. Security
At Inovector, we take the security of data very seriously and it is at the top of our priority. The
Mixpost app and the Website take appropriate precautions to protect Personal Data. Your Mixpost app
account information is located on a secured server behind a firewall. When you enter your personal
information, such as a password, we encrypt that information using secure socket layer
technology.
8. Changes and Notices
Inovector reserves the right to change this Privacy Policy from time to time (without notice), to
comply with laws, regulations, our business, and industry standards including security. Therefore we
advise you to review this Privacy Policy regularly. The latest version of the Privacy Policy is
always available on the Website. If you disagree with the changes or any part of this Privacy
Policy, you should deactivate your Mixpost app account immediately and refrain from using the
Mixpost app and the Website.
9. Retention of Personal Data
We reserve the right to retain any Personal Data, subject to:
- Fulfilling our obligations under our Agreement with you;
- Comply with applicable laws. Without limiting the generality of the foregoing, if you have an
account and wish to close your account, please visit your account settings. Upon your request,
we will close your account, and delete your contact information, history, and billing
information. After you close your account, you will not be able to sign in to your account.
After you close your account, please note that we may retain and use certain of your information
for analytical purposes and recordkeeping integrity where permitted by law to prevent fraud,
collect any fees owed, enforce our user agreements and terms, and comply with legal
requirements. If certain information is shared with third parties or you share with other users,
such content or information may still be available to those other users.
CONTACT DETAILS
For any additional questions or inquiries about the Privacy Policy, please send an email to ask@inovector.com.