Postkey terms of service

1. Who we are and these terms

Postkey (postkey.pro) is run by Rabbithole LLC, 1666 Ponce de Leon Avenue, San Juan, PR 00909 ("Postkey", "we", "us"). These terms are a contract between you and us. They apply whenever you use Postkey.

By creating an account or using Postkey, you accept these terms and our privacy policy at postkey.pro/privacy. If you use Postkey for a business or for a client, you accept these terms for that business or client and confirm you are allowed to.

Last updated: October 19, 2026.

2. What Postkey does

Postkey is a social media scheduler and messaging tool for creators and small businesses. You connect your own social accounts. You then write posts, choose when they go out, and set up automatic replies to comments and direct messages.

Postkey publishes and sends through each network's official connection, either directly (X) or through our posting and messaging provider. We only act on accounts you connect, and only in the ways you set up.

Some features are optional and may not be on for every plan yet, for example Postkey AI replies, email, SMS, WhatsApp, Telegram and agent access for AI assistants. We may add, change or remove features. If we remove a paid feature you rely on, we will tell you first.

3. Your account

You must be at least 18, or the age of majority where you live if that is higher, to create a Postkey account. Postkey is not meant for children.

Give us true sign-up details and keep your password safe. You are responsible for what happens in your account, including what the team members and AI assistants you let in do there.

Tell us straight away at support@postkey.pro if you think someone else has used your account.

4. Connected social accounts

You may only connect accounts you own or are allowed to manage. When you connect one, you let Postkey act on it as you set up, within the permissions you approve on the network's own screen.

Each network has its own rules, and you must follow them: for example the X Rules, Meta's terms (including the Meta Platform Terms, https://developers.facebook.com/terms) and Instagram's Community Guidelines, TikTok's terms of service and the YouTube terms of service. You must not use data you get through Postkey from a network in a way those rules forbid. If a network suspends or limits your account, we cannot undo that.

You can disconnect an account at any time in Postkey. You can also remove Postkey's access in the network's own settings.

5. Posting to X

When you connect an X account, you sign in on X and approve the access Postkey asks for. Postkey publishes only the posts, threads and first comments that customer writes and schedules in Postkey, at the times they choose. Every post is previewed before it is scheduled.

Postkey does not like, follow, repost, reply to other people, send direct messages, read timelines or collect X data for analysis or resale. The same or nearly the same text cannot be sent to more than one X account.

Customers disconnect at any time, which revokes the token. Posting volume is capped per customer per month.

6. Acceptable use

You must not use Postkey to:

• send spam, or messages people did not ask for;
• post or send anything illegal, hateful, harassing, sexual content involving minors, misleading or that infringes someone else's rights;
• pretend to be someone else, or run fake or coordinated accounts;
• message or collect data from children;
• sell, rent or give away data about the people who message you, use it for advertising outside your own accounts, build profiles of them for others, or use it for surveillance or to decide anyone's eligibility for housing, jobs, credit or insurance;
• collect sensitive data (such as health, financial account or government ID numbers) through your automations;
• get around a network's limits, or Postkey's limits, or break a network's rules;
• attack, overload, scrape, copy or reverse engineer Postkey.

7. Messages you send: email, SMS and direct messages

You are the sender of every message your automations, sequences and broadcasts send. You decide who gets them and what they say. Postkey only delivers them for you.

You must have the consent the law and the network require before you message someone. For text messages in the United States this usually means prior express written consent under the Telephone Consumer Protection Act (TCPA). Marketing email must follow the CAN-SPAM Act and similar laws: say who you are, include your postal address, and give a working way to unsubscribe.

Stop messaging anyone who opts out, for example by replying STOP or unsubscribing. Keep proof of each consent and opt-out, and give it to us if we ask.

Text messages go out through your own Twilio account, under Twilio's terms with you. Direct messages must follow each network's messaging rules, for example Instagram's 24-hour reply window.

8. Your content

Your posts, media, automations and contacts stay yours. You give us permission to store, copy, resize and send them only to run Postkey for you.

You confirm you have the rights to everything you upload or post, and that sending it does not break the law or anyone's rights.

You are responsible for the content you publish and the messages your automations send, including replies written by Postkey AI or by an AI assistant you connected.

9. Data about your contacts: we process it for you

When people comment on or message your accounts, Postkey stores and uses their data for you. For that data you are in charge (the "controller" or "business"), and we are your processor or service provider. These terms, our privacy policy and the settings you choose are your instructions to us.

You must tell these people how you use their data, for example in your own privacy policy, and have a lawful basis to message them.

For that data, we will:

• use it only to run Postkey for you, never for our own purposes, and never sell it;
• make sure everyone at Postkey who can see it keeps it confidential;
• keep it secure (privacy policy, "Security");
• use only the providers listed in our privacy policy, under written terms that protect the data, and update that list before we add one;
• help you answer requests from your contacts. If a contact asks us directly to delete their data, we delete it and tell you, as the networks require;
• tell you without undue delay if a breach affects it;
• delete it when you delete it, or within 30 days of your request to close your account, unless the law makes us keep it;
• give you the information you need to show you follow the law.

10. Postkey AI

If you turn on Postkey AI, it drafts or sends replies in your direct messages based on the instructions and knowledge you give it. AI can be wrong. Check what it says, and turn it off if it does not behave as you want.

Postkey AI uses Anthropic's Claude models. We send the conversation and your instructions to Anthropic only to write the reply. Under Anthropic's commercial terms, Anthropic does not train its models on this data.

Do not let Postkey AI pretend to be a human. If someone asks, it must say it is an automated assistant. You must also follow Anthropic's Usage Policy (https://www.anthropic.com/legal/aup).

11. AI assistants you connect (agent access)

You can connect your own AI assistant, such as ChatGPT, Claude or Grok, to Postkey. The assistant and the company that runs it are your choice and your provider, not ours. Their terms and privacy policy apply between you and them.

Before an assistant gets any access, you approve it on Postkey's consent screen and pick what it may do. When you approve, you tell us to share with that assistant and its company the data inside the access you picked. This can include your contacts' names, handles, email addresses, phone numbers, comments and direct messages. We keep a record of who approved which assistant, when, and with which access.

If you connect an assistant, you agree to:

• connect only an assistant you are allowed to use for your business data;
• where your assistant offers it, use a business plan or turn off the setting that lets its company train AI models on your conversations;
• use the data only to run your own accounts, and never sell it, use it for advertising outside your accounts, or build profiles of people for anyone else;
• follow each network's rules for that data, including Meta's Platform Terms for Instagram and Facebook data;
• check what your assistant sends. Anything it sends or publishes through Postkey is sent by you.

12. Turning agent access off

You can see and disconnect every assistant in Postkey under Agent & API. Disconnecting stops all access at once. Data the assistant already received is kept by its company under its own terms. Ask that company to delete it.

13. Plans, payments and trials

Postkey has a free plan and paid plans. The prices, limits and trial terms are on the pricing page at the time you subscribe. Prices are in US dollars and do not include taxes.

Paid plans renew automatically each month or year until you cancel. Payments are handled by Stripe. Usage beyond your plan's allowance, such as extra accounts or extra active contacts, is charged as shown on the pricing page.

You can cancel at any time. Your plan stays active until the end of the period you paid for. We do not refund partial periods, unless the law requires it or we stop providing Postkey to you for a reason that is not your breach of these terms. In that case we refund the unused part of your prepaid period.

If a trial needs a payment method and you do not cancel before it ends, your plan starts and you are charged.

We may change prices. We will tell you at least 30 days before a change applies to you, and it takes effect at your next renewal.

14. Other services

Postkey depends on services we do not control: the social networks, our posting and messaging provider, Stripe, Supabase, Vercel and the others listed in our privacy policy. If one of them changes or stops, a Postkey feature may change or stop too.

If you connect YouTube, you also agree to the YouTube Terms of Service (https://www.youtube.com/t/terms).

15. Ending your use

You can stop using Postkey at any time. To close your account and delete its data, write to support@postkey.pro (privacy policy, "Deleting your data").

We may suspend or close an account that breaks these terms or a network's rules, puts other people or Postkey at risk, or does not pay. Where we reasonably can, we will tell you first and give you time to fix it.

If we ever stop running Postkey, we will tell you at least 30 days before and give you a way to get a copy of your data.

16. Disclaimers and liability

We work hard to keep Postkey running, but it is provided as it is and as available, without warranties of any kind. We do not promise that every post will publish on time, that a network will accept it, or that Postkey will never be down.

To the extent the law allows, we are not liable for indirect, special or consequential loss, lost profits, lost revenue or lost data. Our total liability for all claims is limited to the fees you paid us in the 12 months before the claim, or US$100, whichever is more.

Nothing in these terms limits liability that the law does not allow to be limited, or rights you have under consumer law that cannot be taken away.

17. Claims caused by your use

If someone makes a claim against us because of your content, the messages you or your automations or assistants sent, or your breach of these terms or the law (for example a TCPA or anti-spam claim), you will cover our reasonable costs and losses from that claim. We will tell you about the claim promptly and let you take part in the defence.

18. Changes to these terms

We may update these terms. If a change matters, we will tell you by email or in the app at least 14 days before it applies, unless the change is needed sooner by law or by a network's rules. If you keep using Postkey after that, the new terms apply. If you do not agree, you can cancel before the change applies.

19. Governing law

These terms are governed by the laws of the Commonwealth of Puerto Rico, United States, without regard to its conflict of law rules. Courts in Puerto Rico have jurisdiction over any dispute, unless the law where you live gives you the right to bring a claim at home.

If any part of these terms cannot be enforced, the rest still applies. If we do not enforce a right straight away, we do not give it up. You may not transfer these terms without our consent. We may transfer them to a company that takes over Postkey.

20. Contact

Questions about these terms: support@postkey.pro. Post: Rabbithole LLC, 1666 Ponce de Leon Avenue, San Juan, PR 00909.