Legal

Postpeg Acceptable Use Policy

Last updated: 24 September 2026. Draft for legal review before publication.

Postpeg is a developer API for publishing, scheduling and managing posts on social networks through their official APIs. This policy applies to every account, API key and end user you connect through Postpeg. By using Postpeg you agree to it, and you are responsible for making sure your own users follow it too.

1. Follow each platform's rules

Every connected account remains subject to the platform's own terms and developer policies, including those of Meta (Facebook, Instagram, Threads), X, LinkedIn, TikTok, YouTube (Google), Pinterest, Bluesky and Google Business Profile. You must:

• only connect accounts you own or are authorised to manage, with the account owner's consent;
• show the end user what will be published before it is posted where a platform requires it (for example, TikTok's content preview and consent requirements);
• honour platform limits, and never attempt to work around them (rate limits, messaging windows, audience or age restrictions, content labels such as AI-generated or branded content).

2. What you may not do

You may not use Postpeg to:

1. Send unsolicited messages. No cold or bulk direct messages, automated outreach, lead generation campaigns or messages to people who have not contacted the account first. Direct messages may only be sent as replies within the window the platform allows (on Instagram, 24 hours after the person's last message).
2. Fake engagement or social proof. No buying, selling or automating followers, likes, views, comments, reviews or ratings; no fake testimonials; no review inflation.
3. Spam. No repetitive, duplicate or near-duplicate posting across accounts, keyword or hashtag stuffing, or misleading links.
4. Impersonate or deceive. No accounts pretending to be another person or brand, no undisclosed paid promotion, no coordinated inauthentic behaviour.
5. Circumvent rules. No evading a platform suspension, ban, paywall or restriction, and no using Postpeg to hide who is really operating an account.
6. Publish unlawful or harmful content, including content that infringes intellectual property, harasses or threatens people, promotes violence, exploits minors, or breaks the law where it is published or viewed.
7. Misuse data. Comments, messages and analytics you receive through Postpeg may only be used to operate the connected accounts. You may not sell, resell or share them, build profiles of individuals from them, or use them to train models without the data subjects' consent where the law requires it.
8. Abuse the service. No attempts to break security, probe other customers' data, exceed your plan by creating extra accounts, or resell Postpeg itself without a written agreement.

3. Enforcement

We may review usage when a platform, a user or our own monitoring reports a problem. If we believe this policy was broken we may, depending on severity, warn you, rate-limit or suspend API keys, disconnect affected social accounts, or close your account. Serious or repeated violations are closed without refund. Where a platform asks us to act, we follow its request.

4. Reporting

Report abuse to abuse@postpeg.com with the affected account and, where possible, links to the posts or messages concerned. We acknowledge reports within two business days.

5. Service providers

Postpeg publishes through the platforms' official APIs, directly or through a contracted publishing provider acting on our behalf. Your data is handled under our Privacy Policy, which describes these providers by category. The current list of sub-processors is available on request at privacy@postpeg.com.