Encrypted credentials
Social and CMS access tokens are encrypted at rest with AES-256-GCM and decrypted only when needed to publish. They are never stored or logged in plain text.
EncryptionSecurity is built into how the platform connects your accounts, keeps each brand’s data separate and controls who can do what. This page explains how.
You trust GoPostNow with access to your social accounts, your website and your content.
We protect that trust with encryption, isolation and access control at every step, from the moment you connect an account to the moment a post goes live.
Access tokens are encrypted at rest and only decrypted to publish.
Each brand lives in its own workspace, checked on every request.
Owners decide who sees what, who approves and what stays connected.
The safeguards built into the platform, from connecting an account to taking a payment.
Social and CMS access tokens are encrypted at rest with AES-256-GCM and decrypted only when needed to publish. They are never stored or logged in plain text.
EncryptionAccounts connect through each platform’s official OAuth flow with signed, single-use state, so no passwords are shared and connections cannot be hijacked.
AuthenticationEvery brand’s data lives in its own workspace, scoped to its account owner and access-checked on every request.
IsolationAdmin, Editor and Viewer roles are scoped to specific workspaces, with read, write and delete permissions per feature.
Access controlServer-side URL fetches are checked against private and internal addresses, and sensitive endpoints are rate-limited.
InfrastructurePayments are processed by Razorpay through tokenised checkout. We never see or store your full card details.
PaymentsTools every account owner can use to keep access tight, without asking us.
Remove any connected account or site whenever you want. Its tokens and synced profile data are removed, not just hidden.
Require an owner or admin to approve posts and articles from editors before anything is scheduled or published.
API keys act only on the workspaces you choose, and can be revoked at any time.
Teammates see and act only on the workspaces and features they are given.
The documents that govern how we handle your data, your account and your payments.
If you believe you have found a security issue, or have a question about how we handle your data, contact us and include as much detail as you can. We review every report.
Helpful to include
Our team is happy to walk you through how we handle your data, accounts and access.