Privacy policy

Last updated: July 2026
In short: we collect only the information required to run the service, we do not sell it to third parties, and we protect it in accordance with the law.

1. Who we are

POSTEMA is a system for managing and publishing content on social networks, operated by Diagram ("the company"). You can contact us at any time at info@postema.co.il.

This privacy policy explains how we collect, use and protect your personal information when you use the service, in accordance with the Israeli Protection of Privacy Law, 5741-1981, and its amendments.

2. Information we collect

During registration and use of the service we may collect the following details:

  • Identifying details: full name, email address and an encrypted password.
  • Technical information: IP address, browser type, operating system and login times.
  • Usage information: actions performed in the system - posts created, groups added, schedules set.
  • Facebook account details: when you connect a Facebook account, we store only the session details required to publish on your behalf.
  • Cookies: for authentication, session management and improving the user experience.

We do not collect credit card numbers, national identity numbers or medical information.

3. How we use the information

  • Providing the service - publishing posts to your Facebook groups according to your settings.
  • Sending system messages - email verification, account updates and plan updates.
  • Improving the system - analysing anonymous usage data in order to develop and improve the service.
  • Meeting legal requirements - where there is a legal obligation to disclose information to a competent authority.

We do not sell, rent or share your personal information with third parties for marketing purposes.

4. Storage and information security

Information is stored on secured servers. Passwords are stored as an encrypted hash (bcrypt) and never in plain text. We apply reasonable security measures including traffic encryption (HTTPS), access restrictions and ongoing security updates.

That said, no digital system can be guaranteed to be absolutely secure. We recommend keeping a strong password and not sharing login details with others.

5. Retention of information

Your information is kept for as long as your account is active. After the account is deleted, the information is deleted within 30 days, except for information that must be retained by law (for accounting purposes, for example).

6. The leads service: information about people who comment in groups

Customers who have purchased the leads service receive an automatic collection of comments left on the posts they published in Facebook groups. This section sets out how that information is handled.

This is information about third parties - people who commented publicly in a Facebook group and are not users of the system. We treat it accordingly.

What is collected: the commenter's name as displayed on Facebook, a link to their public profile, the text of the comment, and the time it was posted. All of this is information the commenter published publicly in the group.

What is not collected: we do not access private messages, friend lists or information that is not publicly visible, and we do not contact commenters on your behalf. The service reads only - it does not comment, does not like and does not send messages.

What it is used for: displaying enquiries to the customer who published the post, so they can go back to the comment and reply themselves on Facebook. The information is not sold, is not passed to third parties and is not used for advertising.

Who it belongs to: the information belongs to the customer who published the post, and is deleted together with their account.

How long it is kept: collected comments are deleted automatically after 90 days.

Removal: a commenter who wants information about them removed can contact us at the address in the contact section, and the information will be deleted.

7. Your rights

Under the Protection of Privacy Law, 5741-1981, you have the following rights:

  • Access: to receive a copy of the personal information held about you.
  • Correction: to request correction of incorrect or inaccurate information.
  • Deletion: to request deletion of your account and all information relating to it.
  • Restriction: to request that use of your information be restricted in certain circumstances.

To exercise these rights, contact us at info@postema.co.il. We will handle your request within 30 days.

8. Data deletion (Facebook User Data Deletion)

In accordance with Facebook's requirements and our privacy policy, every user may request complete deletion of their data at any time.

What gets deleted:

  • Account details (name, email, encrypted password)
  • Facebook accounts connected to the system and their sessions
  • All groups, posts, drafts and schedules
  • Usage data and logs relating to the account

How to request deletion:

  1. Send a request to info@postema.co.il with the subject: "Data deletion request"
  2. State the email address registered to your account
  3. We will confirm receipt within 48 hours and carry out the deletion within 30 days at most

Alternatively, a registered user can delete their account directly from Settings → Delete account in the dashboard.

9. Cookies

9.1 Two categories

Essential cookies. Required for the service to work: authentication, keeping you signed in, and security. Without them it is not possible to log into an account. These cookies are always active and do not require consent, since they are essential to providing the service you asked for.

Measurement and statistics cookies. Used to understand how visitors reach and use the site, in order to improve the site and measure advertising effectiveness. These cookies load only after you have given explicit consent.

9.2 Consent - how it works in practice

On your first visit to the site, a banner is displayed with two equal options: "Essential only" and "Accept all".

  • Until you choose, no measurement tool is loaded. No script, no cookie and no network request to a third-party server. Closing the banner without choosing is also not treated as consent.
  • Choosing "Essential only" blocks the measurement tools entirely. The service works in full either way.
  • Refusing carries no cost, no restriction and no inconvenience of any kind.

9.3 Measurement tools we may use

Subject to your consent only:

  • Google Analytics 4 (Google Ireland Limited) - site usage statistics. The IP address is truncated (anonymize_ip) and is not stored in full.
  • Meta Pixel (Meta Platforms Ireland Limited) - measuring the effectiveness of advertising on Facebook and Instagram.

Each of these has its own privacy policy, and we recommend reading it. These services may transfer information outside Israel, including to the United States. We do not sell information to third parties and do not use it to determine creditworthiness.

9.4 Changing or withdrawing consent

You can withdraw your consent at any moment, as easily as it was given:

  • Through the "Cookie settings" link at the bottom of the site, which brings the banner back and lets you choose again.
  • Through your browser settings, where cookies can be blocked or deleted. Blocking essential cookies may prevent you from logging in.
  • Through Google's official opt-out add-on.

Withdrawing consent takes effect from the moment of withdrawal onwards, and does not delete information already collected by those services. To request deletion, contact us or the provider directly.

10. Third-party services

The service interfaces with external services, each of which has its own privacy policy:

  • Facebook / Meta - publishing takes place through the existing connection in your browser.
  • Google Gemini - content generation on plans that include AI. The text you enter in order to create a post is sent for processing.
  • Cloudflare R2 - storage for video files you upload.
  • Resend - sending email messages from the system.
  • Google Analytics and Meta Pixel - subject to your consent only, as set out in section 9.

11. Policy updates

We may update this policy from time to time. Material changes will be announced prominently on the site and/or by email. Continued use of the service after a policy update constitutes acceptance of the changes.

12. Contact

For privacy questions, complaints or exercising your rights, contact us:

Ready to start?

Join the businesses already saving hours every week.

We will not ask for a credit card