Legal

Privacy Policy

EYpost Ltd
Last updated: 9 May 2026

1. Who We Are

EYpost is a social media management platform designed specifically for UK nurseries and early years settings. We help nursery managers create, schedule and publish content to Facebook, Instagram and Google Business Profile using artificial intelligence.

EYpost is operated by EYpost Ltd ("we", "us", "our"). If you have any questions about this policy, contact us at: hello@eypost.co.uk

2. What Information We Collect

Information you give us

  • Your name and email address when you create an account
  • Your nursery's name, website, address and phone number
  • Your brand colours and tone of voice preferences
  • Notes and content you enter into Quick Notes or the post composer
  • Payment information (processed securely by Stripe - we do not store card details)

Information we collect automatically

  • Your IP address and browser type
  • Pages you visit within EYpost and how long you spend on them
  • Error logs and performance data to help us fix bugs

Information from third parties

  • Facebook Page name, Page ID and access tokens when you connect your Facebook account
  • Instagram Business account ID and username when connected
  • Google Business Profile location name and Google email when connected
  • Basic post engagement data from Facebook Insights (with your permission)

3. How We Use Your Information

We use your information to:

  • Provide and operate the EYpost service
  • Generate social media posts and images on your behalf using AI
  • Publish approved content to your connected social accounts
  • Send you account-related emails (confirmation, billing receipts, important updates)
  • Improve the product based on usage patterns
  • Respond to support requests
  • Comply with legal obligations

We do not:

  • Sell your data to third parties
  • Use your nursery content to train AI models beyond your own account
  • Send marketing emails without your consent
  • Share your data with advertisers

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

  • Contract - to provide the service you have signed up for
  • Legitimate interests - to improve and secure EYpost
  • Consent - for optional communications such as product updates
  • Legal obligation - where required by law

5. Social Media Integrations

When you connect Facebook, Instagram or Google Business Profile, you grant EYpost permission to publish content on your behalf. We store access tokens securely in our database to enable this.

We only access the permissions you explicitly grant during the OAuth connection flow. We do not access your personal Facebook profile, your followers' data, or any data beyond what is needed to publish posts and read basic engagement metrics.

You can disconnect any social account at any time from Settings - Social connections.

6. AI-Generated Content

EYpost uses Google Gemini to generate post captions, image descriptions and content suggestions. Your nursery notes and context are sent to Google's API to generate this content.

Google's use of this data is governed by the Google Cloud Privacy Notice. We do not share personally identifiable information about children or families with any AI provider.

7. Data Storage and Security

Your data is stored securely using Supabase (hosted on AWS in the EU). We use industry-standard encryption in transit (HTTPS/TLS) and at rest.

Access tokens for social media accounts are encrypted in our database. We limit access to your data to employees who need it to provide support.

8. Data Retention

  • Account data - retained for the duration of your subscription and deleted within 30 days of account closure upon request
  • Generated posts and notes - retained while your account is active
  • Social access tokens - deleted immediately when you disconnect an account
  • Billing records - retained for 7 years as required by UK tax law

9. Your Rights Under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data ("right to be forgotten")
  • Restrict how we process your data
  • Portability - receive your data in a portable format
  • Object to processing based on legitimate interests

To exercise any of these rights, email us at hello@eypost.co.uk. We will respond within 30 days.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

10. Cookies

EYpost uses essential cookies only - to keep you logged in and maintain your session. We do not use advertising or tracking cookies. No third-party cookies are placed on your device.

11. Children's Data

EYpost is used by nursery professionals to manage their business social media. We do not knowingly collect any personal data about children. Nursery staff should not enter personally identifiable information about specific children (names, photos, medical details) into EYpost.

12. Changes to This Policy

We may update this policy from time to time. We will notify you by email of any material changes. Continued use of EYpost after changes constitutes acceptance of the updated policy.

13. Contact Us

EYpost Ltd
Email: hello@eypost.co.uk
Website: eypost.co.uk