Quick Summary
We collect very little about you. We do not sell your data. We do not show ads. We use your data only to make the tool work for you.
Who we are
AlphaPost is a free tool run by Naveed Ali Shah. The website is hosted at alphapost.io. You can reach us at contactalphapost@gmail.com.
What we collect
When you sign up and use AlphaPost, we collect this information:
Account information
- Your email address (used to log in).
- Your username.
- A password, which we store as a hash (not the real password).
- Your profile photo URL if you add one.
- Your bio and social links if you add them.
API keys and tokens
- Your Gemini API key (encrypted in our database).
- Your Blogger API key (encrypted in our database).
- Your Blogger OAuth tokens (encrypted in our database).
- Your GitHub access token if you connect GitHub (encrypted).
All API keys and tokens are encrypted before being saved. Only the tool can read them when it needs to use them for you.
Usage data
- The blog posts the AI made for you (title and word count, for stats).
- The time of each post.
- Errors and logs, if anything fails.
We do not read the content of your posts unless we need to debug a problem for you. Even then, only with your permission.
What we do NOT collect
- We do not track your browser across other websites.
- We do not use Google Analytics or Facebook Pixel.
- We do not collect your IP address for marketing.
- We do not buy or sell user data.
Why we collect this data
We collect data for only a few reasons:
- To run the tool. We need your API keys to connect to Blogger and AI services for you.
- To log you in. We need your email and password to keep your account safe.
- To fix bugs. We use error logs to find and fix problems.
- To send notifications. If something needs your action, we may send an email.
Who we share data with
We share data only with services that help the tool work. These are:
- Google (Gemini API and Blogger API): We send your prompts to Gemini using your key. We send your blog posts to Blogger using your key or token.
- GitHub: If you connect GitHub, we use your token to run scheduled jobs in your GitHub account.
- Hostinger (our hosting): Our servers are hosted on Hostinger.
We do not share data with advertisers, brokers, or any company that pays for it.
How we keep data safe
- All connections to the site use HTTPS (SSL) to keep data private in transit.
- All API keys and tokens are encrypted with AES-256 before being saved.
- Passwords are stored as bcrypt hashes, not the original text.
- Our database is locked down and only the app can talk to it.
- We do regular updates to fix any security issues.
Cookies
We use a few cookies to make the tool work. These are:
- Login cookie: Keeps you logged in. Goes away when you log out.
- OAuth state cookies: Used during sign-in flows. Last 10 minutes.
We do not use tracking cookies or third-party cookies.
Your rights
You can:
- Edit your data. Update your profile any time from the dashboard.
- Delete your data. Email us to ask for a full account delete.
- Take your data out. Ask for a copy of your data.
- Disconnect services. Remove your Blogger or GitHub connection any time.
To use any of these rights, email contactalphapost@gmail.com. We reply within 24 to 48 hours.
Children
AlphaPost is not for people under 13. We do not knowingly collect data from children. If you think a child has signed up, please email us and we will delete the account.
Changes to this policy
We may update this Privacy Policy from time to time. If we change anything important, we will tell users by email. The "Last updated" date at the top will also change.
Contact
Any questions about privacy? Email contactalphapost@gmail.com. We are happy to help.