Effective Date: September 1, 2026
This Privacy Notice explains how Posterchild, Inc. (“PosterChild,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal data in connection with our website and services.
This Privacy Notice does not address our practices relating to job applicants, employees, or other employment-related individuals, nor data that is not subject to applicable data protection laws (such as deidentified or publicly available information). This Privacy Notice is not a contract and does not create any legal rights or obligations not otherwise provided by law.
Data protection laws distinguish “controllers” (who determine the purposes and means of processing personal data) from “processors” or “service providers” (who process personal data on a controller’s behalf and under its instructions).
This Privacy Notice describes our practices where we act as a controller — for example, information about visitors to our website and the individuals who register for, administer, and use accounts.
Separately, our customers — nonprofit and community-serving organizations — upload content and information (“Customer Content”) that our platform uses to generate communications materials. Customer Content may include personal data about the organization’s donors, beneficiaries, staff, or community members. With respect to personal data contained in Customer Content, we act as a service provider/processor on the customer’s behalf, and we process it only to provide the services under our agreement with that customer and on the customer’s instructions. If you are an individual whose personal data appears in Customer Content, please direct your privacy requests to the organization that provided it; we will support that organization as required by law.
The categories of personal data we collect depend on how you interact with us. You may provide personal data directly (for example, when you register for an account, purchase a subscription, or contact us). We also collect certain data automatically when you use our services, and we may receive data from limited third-party sources.
• Contact Information, including first and last name, phone number, email address, mailing address, and communication preferences. We use this to respond to your requests, communicate with you, and send communications in accordance with your preferences.
• Professional Information, including job title, organization name, professional background, and the nature of your relationship with us. We use this to administer your account, provide the services, and support you.
• Account Information, including name, email address, phone number, account credentials or one-time passcodes, and the products or services you use. We use this to create and administer your account, provide the services, and support you.
• Customer Content, including files, documents, audio, video, images, data, and communications that an organization or its authorized users upload to the services. We use Customer Content to provide, maintain, secure, support, improve, and develop the services — including generating communications outputs at the organization’s direction. The organization owns its Customer Content and the outputs generated from it. See “How We Use AI” below.
• Payment Information, including billing details. We use a third-party payment processor (Stripe) to process payments. We do not store your full payment card number; that information is provided by you directly to our payment processor, whose use of it is governed by its own privacy policy.
• Feedback and Support Information, including the contents of messages you send us, support communications, and, where permitted by law, recordings of calls with us. We use this to respond to your inquiries and improve the services.
When you use our services, we and our service providers collect certain information using cookies and similar technologies:
• Device and Network Information, such as device type, operating system, IP address, browser type, and internet service provider.
• Usage Information, such as the pages and features you use, the actions you take, and whether you open our emails or click links in them, including through analytics tools that help us understand how our services are used.
• Approximate Location, such as the general geographic area derived from your IP address.
We use this information to operate, secure, personalize, analyze, and improve the services and to diagnose and fix technical problems. We do not use these technologies for advertising. For your choices, see “Your Privacy Choices” below.
We may receive personal data from the following limited sources:
• Single Sign-On: if you log in through a third-party account, we receive tokens that confirm your authentication and help identify you in our system; we do not receive your third-party login credentials.
• Your Organization or Employer: if you interact with us in connection with your organization, we may receive your contact and role information from that organization.
• Referrals and Other Customers: a customer may provide us your contact information, for example as part of a referral.
• Service Providers: our service providers (such as analytics and hosting providers) may provide us information collected while performing services on our behalf.
• Publicly Available Information: we may collect information that is publicly available, such as content that people or organizations post publicly on social media and other public sources, to provide and improve the services and to generate insights about effective communications. Where this information includes personal information, we take steps to de-identify and aggregate it, and we do not attempt to re-identify it.
Our platform uses artificial intelligence, including third-party AI models, to transform the information you provide into communications content. We use Customer Content, and information about how content performs and how the services are used, to operate, secure, support, improve, and develop the services and the quality and effectiveness of the content our platform generates. We do not sell Customer Content, and we do not share it with third parties for their own purposes or to serve advertising.
In addition to the uses described above, we may use personal data to:
• Fulfill the purpose for which it was provided, including delivering the services and processing payments;
• Operate, maintain, secure, and improve the services, and diagnose and fix problems;
• Communicate with you about your account, the services, and service-related notices;
• Provide customer support and respond to inquiries or complaints;
• Verify identity and administer accounts, roles, and access;
• Detect, prevent, and investigate fraud, security incidents, and other prohibited or unlawful activity;
• Create aggregated or de-identified information that cannot reasonably be used to identify you — which we may use for internal analytics and to improve the services, and which we do not attempt to re-identify;
• Establish, exercise, or defend legal claims and enforce our agreements; and
• Comply with legal obligations.
We disclose personal data in the following ways:
• At Your Direction — Publishing to Third-Party Platforms: when you use the services to publish or distribute content (for example, posting generated content to social media, a content management system, or another third-party platform), you direct us to share that content, and the information necessary to complete your request, with those platforms. Your use of those platforms is governed by their own terms and privacy policies. Keep in mind that content you choose to publish may be reshared or redistributed by others.
• To Service Providers: we share personal data with third parties that perform services on our behalf (such as cloud hosting and payment processing), who may process it only to provide services to us and are required to protect it.
• For Legal and Safety Reasons: we may disclose personal data to comply with law or legal process, to establish or defend legal claims, to enforce our agreements, to detect or prevent fraud, or to protect the rights, property, or safety of PosterChild, our customers, or others.
• In a Business Transaction: we may disclose or transfer personal data in connection with a merger, acquisition, financing, or sale of assets. Any successor will be bound by the commitments in this Privacy Notice with respect to personal data transferred to it.
• With Your Consent or Direction: we may disclose personal data to other parties with your consent or at your direction.
We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (as amended) and other U.S. state privacy laws. We do not use your personal information, or Customer Content, to serve advertising. Where required by law, we treat a Global Privacy Control (GPC) or similar browser signal as a valid opt-out request.
Depending on where you live, you may have the right to: access or know the personal information we hold about you; correct inaccurate personal information; delete your personal information; obtain a portable copy; and appeal a decision on your request. We will not discriminate against you for exercising these rights.
To exercise these rights, contact us at admin@posterchild.ai. We will verify your identity before responding and will respond within the timeframes required by applicable law. An authorized agent may submit a request on your behalf with proof of authorization.
If your personal data appears in Customer Content that an organization uploaded, please submit your request to that organization; we act as its service provider and will assist it in responding. We may retain certain information where permitted or required by law, for example to complete a transaction, comply with a legal obligation, prevent fraud, or exercise or defend legal claims.
We retain personal information for as long as needed to provide the services and for legitimate business or legal purposes. For Customer Content, we retain it for the term of the customer’s agreement. On termination, or at the customer’s request, we return Customer Content and then delete it from our production systems; residual copies in backups are purged within our standard backup-retention window. A certificate of destruction is available to customers on request.
Our services are intended for organizations and for users who are at least 18 years old. We do not knowingly collect personal data from children under the age of 13. If we learn that we have collected personal data from a child under 13, we will promptly delete it. If you believe a child has provided us personal data, please contact us.
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal data, including encryption of data in transit and at rest and least-privilege access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Our services may link to, or interoperate with, third-party websites and services. This Privacy Notice does not apply to those third parties’ practices. Please review their privacy notices to understand how they handle your information.
We may update this Privacy Notice from time to time. When we do, we will revise the “Effective Date” above. If we make material changes, we will provide additional notice as appropriate, such as by email or by prominent posting on our website.
If you have any questions or requests regarding this Privacy Notice, please contact us at admin@posterchild.ai, or by mail at PosterChild, Inc., 2138 Seventh Street, Berkeley, California 94710.