POWER MED LLC • U.S. BASED • FOUNDED 2014

Policies and Procedures

Last Updated: November 2, 2026

This document describes PostZam's operational, security, and customer-protection policies. It applies to our websites, applications, personnel, vendors, and users of PostZam™, DropZam™, PromoZam™, TrackZam™, and Ghost (together, the "Service"), to the extent a feature is available to the user. It should be read with our Terms and Conditions and Privacy Policy.

1. How PostZam Operates

PostZam, operated by Power Med LLC, is a time-reclamation service delivered through software and AI-assisted workflows that helps users move, store, create, publish, and, where separately available, track video and image content. It does not provide legal or financial advice or guarantee reach, engagement, sales, platform approval, or other marketing outcomes.

PostZam collects payment for its own services. The standard self-service offering is not a marketplace, escrow service, pass-through payment processor, or authorization to buy advertising on a user's behalf. Any separately agreed managed campaign, marketing plan, or production service is governed by a written scope identifying deliverables, revisions, fees, rights, and publishing permissions. Advertising placement or spend requires specific agreement and authorization.

2. Product Family

Feature availability is described in the Service. A feature, model, or provider mentioned in documentation is not necessarily enabled for every account. Beta, preview, and coming-soon features are identified as such and are not represented as generally available.

Where typography controls are available, the user selects a font category, sees its usual uses and a static sample, and may give special styling instructions in the main request. Making or changing that selection does not generate a preview movie or start paid work. Customer logos, custom thumbnails, and permitted watermarking remain subject to user choices, media rights, and destination rules.

3. Accountability

Responsibility for trust, safety, and compliance is assigned to designated personnel covering:

Policies are reviewed periodically for changes in law, platform rules, processor requirements, and product functionality. Power Med LLC controls its platform developer accounts, app reviews, and credentials. Employees and contractors receive only the authorized access needed for their role; production access is not inferred merely from development access.

4. Account Security

5. Platform Compliance

PostZam uses authorized integrations and supported APIs for the publishing functions offered in the Service. Access depends on each platform's permissions, review requirements, account eligibility, and available features. Listing a platform does not promise that every API function, account type, or tracking capability is available.

PostZam does not scrape platforms, bypass safeguards, simulate user behavior, collect user passwords or session cookies, or enable prohibited automation.

Platform-specific posting functions are separated to limit the effects of an individual platform's failure. Shared-service incidents may still affect multiple functions. If a platform changes its policies or API access, PostZam may modify or disable the affected integration to maintain compliance.

Platform-specific rules applied in the product:

AutoPost applies platform-specific timing and delivery controls intended to reduce excessive posting and spam risk. The AI Caption Engine applies the destination's formatting and character-limit controls. These controls do not guarantee acceptance, uninterrupted delivery, or protection from a platform's account actions.

6. Automated Actions

7. AI Features and User Responsibility

Available AI Features assist with captions, hashtags, thumbnails, clips, ads, scripts, narration, music, video creation, and editing. They use the user's request, supplied materials, and selected options. Description-only video creation is supported where offered. Tracking recommendations are subject to the separate TrackZam scope described above.

AI Enhanced mode is the default for captions. Users may switch to User Created mode at any time to write their own captions.

Users must review Output before publishing, distributing, or otherwise using it externally; they may download it for review. Approval to create or edit is separate from permission to publish. PostZam does not guarantee that Output is accurate, original, appropriate, or compliant. Users remain responsible for required AI-content and commercial-content disclosures and everything published under their accounts.

PostZam does not use your Content, Output, or Ghost conversations to train general-purpose AI models and does not authorize its AI service providers to use those materials for that purpose. Providers process data under the applicable service terms and settings to supply the requested functions; they may also perform limited retention or processing for security, abuse prevention, safety, and legal compliance. A restriction on training does not mean that every provider offers zero retention.

Free preparation and approved execution

Planning a new video or a Library edit, selecting Continue, changing preferences, replanning, reviewing a quote, and choosing a font style or static font sample do not deduct or reserve Credits. A positive Credit balance is not required merely to prepare or save that plan. Planning costs are borne by PostZam and are not accumulated for later billing.

The total is shown before “Approve & Create” or “Approve & Edit.” Only approval authorizes the required Credit reservation and execution. A hold reduces available Credits but is not a settled charge. Identical retries or double-clicks do not authorize additional jobs or charges. Changed paid scope or pricing requires a new disclosed approval. Internal retries must remain within the approved amount.

8. Content Safety

PostZam does not proactively review all user content. Users are solely responsible for content legality, rights clearance, and platform compliance, including for media they supply to PromoZam™.

Automated safety controls, including applicable provider filters, may evaluate submitted Content and requested Output for prohibited material. Coverage varies by feature and provider. We do not manually preapprove every file or guarantee that every prohibited item will be detected, and we do not represent that every upload is checked against a particular external hash-matching database.

Prohibited content

Enforcement

Enforcement actions may include warnings, feature restrictions, throttling, removal of access to specific integrations, account suspension, or termination.

When we obtain actual knowledge of facts or circumstances that trigger a reporting duty under 18 U.S.C. § 2258A, we report to NCMEC's CyberTipline and preserve the required material as the law requires. That provision does not itself require general monitoring or scanning of all user communications. PostZam also cooperates with other lawful requests and preserves evidence under applicable legal obligations.

9. Security Program Overview

PostZam's security program uses administrative, technical, and physical safeguards designed to protect systems and data. It is not a guarantee that every incident can be prevented. Safeguards include:

10. Access Control

Production access is restricted to authorized personnel, including contractors when their assigned duties require it, on a need-to-know and least-privilege basis. Access must be approved, logged as appropriate, reviewed, and removed when no longer needed. Developers use development or staging environments for routine work; access to production secrets is separately controlled.

11. Data Handling

PostZam processes account information, platform authorization data, Library media, generated Output, saved drafts and preferences, plan and approval records, Credit reservations and settlement records, and usage information needed for the Service. Ghost conversation records are used where continuity is enabled. TrackZam data is processed only within a separately enabled and authorized client service.

Sensitive secrets, including API keys and platform authorization tokens, are encrypted in storage and protected by access and redaction controls. Credentials must not be included in public code, customer-facing messages, or ordinary diagnostic output.

Primary application hosting and Library storage are based in the United States. Third-party providers and connected platforms may process data in other locations under their applicable terms and safeguards. The Privacy Policy explains these distinctions. PostZam does not sell personal data.

Original files retained in the Library may contain embedded metadata. Processing or publishing copies may have metadata removed or changed, depending on their format and the operation performed. We do not promise that every original or derivative is stripped of all location, device, or technical metadata. Review files before sharing them externally if embedded information is sensitive.

12. Library Storage and Retention

13. Subscriptions, Free Trial, and Cancellation

Current plan and top-up quantities and prices are shown on the Pricing page and at checkout. When included Credits change, eligible legacy subscribers keep their prior allocation on qualifying renewals before the cutoff date stated in their advance notice, subject to Terms §6. New purchases and plan changes use the new allocations; a transition does not itself remove existing balances.

14. Payment Security

Payments are processed by Authorize.net through PostZam's merchant account with Chase. PostZam does not store full card numbers, CVV codes, or magnetic-stripe data. Payment tokens, limited transaction details, and billing identifiers are retained as needed to operate and reconcile the account.

Billing events, credit purchase records, and transaction identifiers are retained for accounting, reconciliation, dispute management, and audit purposes.

Charges appear on user statements under: POWER MED, Power Med dba Post Zam, PostZam, or Power Med LLC.

15. Customer Transparency Controls

PostZam provides the following controls to help users avoid billing surprises and disputes:

16. Refunds and Disputes

PostZam's approach to billing disputes is transparent pricing, clear statement descriptors, and direct resolution. Disputes are reviewed against purchase records, job approvals, reservations, settlement and restoration events, publishing activity, and applicable trial, renewal, and Terms-acceptance records.

Users may contact billing@postzam.com before contacting their bank, but are not required to waive or delay legal or card-network rights. Errors reported within 7 days receive expedited review; that service target does not shorten applicable rights. Purchase refunds are generally restricted as described in the Terms, but erroneous or duplicate deductions are corrected and unused holds or failed-job Credits are released or restored when the applicable settlement rules require. Restorations are audited and protected against duplicate application; original financial records are retained.

17. Support

18. Logging and Auditability

Operational logs support security, troubleshooting, abuse prevention, and billing reconciliation. They may include authentication events, authorization changes, publishing results, approved automated actions, provider responses, job settings, saved pricing versions, Credit holds, settlements, releases or restorations, and administrative changes. Free-planning costs may be recorded internally without a customer Credit charge.

Posting and paid-job records associate activity with the account, destination or operation, time, status, and applicable Credit events. A reserved amount is distinguished from a final settled charge.

Log access is restricted to authorized personnel.

19. Development and Vulnerability Management

PostZam follows secure development practices, including code review, dependency management, and environment separation. Each change is developed on its own branch, identified by commit, and accepted by PostZam's deployment gate before release to production. Security issues are prioritized and remediated based on risk. High-risk vulnerabilities may require immediate mitigation, patching, or feature limitation.

All code is version-controlled in private repositories with access restricted to authorized developers.

20. Incident Response

PostZam maintains an incident response process designed to contain and mitigate impact, assess scope and root cause, restore service, notify affected users and, where required, regulators and platforms, and document corrective actions. Incidents may include security events, data exposure risks, platform compliance issues, fraud events, or major service outages.

21. Business Continuity

PostZam maintains backups and reasonable recovery procedures. Capacity is reviewed and adjusted as needed; this policy does not promise automatic scale-up or scale-down, unlimited capacity, or a particular processing time.

While PostZam aims for high availability, uninterrupted service is not guaranteed. Planned maintenance may occur with advance notice where practicable.

22. Record Retention

Retention depends on the purpose, applicable law, platform rules, and any written customer terms. The following periods are PostZam's record-retention policy, not a claim that every category has a universal statutory minimum:

Where users request deletion of personal data, PostZam processes the request under the Privacy Policy, subject to legal obligations, security needs, and legitimate business requirements.

23. Data Deletion Procedure

Deleting PostZam copies does not automatically delete media already published to a platform. Requests involving derived transcripts, extracted text, indexes, summaries, and saved plans are handled with their source/account data where retained. Legally necessary records are restricted rather than used to continue an unauthorized service.

24. Vendors and Service Providers

Service providers receive only data needed for the assigned function, under applicable contractual, confidentiality, and security terms. Relevant categories include:

PostZam does not use your Content, Output, or Ghost conversations to train general-purpose AI models and does not authorize its AI service providers to use those materials for that purpose. Providers process data under the applicable service terms and settings to supply the requested functions; they may also perform limited retention or processing for security, abuse prevention, safety, and legal compliance. A restriction on training does not mean that every provider offers zero retention.

25. Enterprise, White Label, and Custom API

Enterprise plans, White Label arrangements, Custom API delivery, and managed creative or campaign services are provided under separate written agreements covering scope, fees, seats, service levels, rights, data handling, and permitted actions. Customer API credentials are confidential and subject to the agreed controls. Power Med LLC's platform approvals are not transferred to a partner merely by licensing access.

26. Legal Requests

PostZam may respond to lawful requests from courts, regulators, law enforcement, payment processors, banks, and platform partners, limiting disclosure to the applicable lawful purpose. Notice may be provided where permitted and appropriate. Reporting and preservation for suspected child exploitation follow the statutory triggers and process described in Section 8; other disclosures are limited to the applicable lawful purpose.

27. Copyright Complaints

PostZam responds to valid notices under the Digital Millennium Copyright Act. Notices and counter-notices are sent to admin@postzam.com with the information described in the Terms and Conditions. Repeat infringer accounts are terminated.

28. Updates to These Policies

These Policies and Procedures may be updated as practices, features, provider costs, or requirements change. Material changes are communicated through the Service or email with appropriate notice. Commercial changes follow Terms §6 and §7; privacy changes follow the Privacy Policy. A policy update does not itself authorize a new charge, data use, or automated action that requires separate consent.

29. Contact

PostZam — Where Time Comes Back.

Power Med LLC • 2020 Seven Springs Blvd, New Port Richey, FL 34655

U.S. Based • Founded 2014 • postzam.com

PostZam™ Policies and Procedures | November 2, 2026 | admin@postzam.com