Privacy Policy

Effective date: April 29, 2026

This Privacy Policy describes how the private self-hosted Postiz instance operated at https://postiz.wotaso.com handles data.

This service is intended for personal, single-user use by the operator. It is not offered as a public social media management platform.

Service Description

This service is used to connect the operator's own social media accounts, schedule and publish posts, upload media, and view basic post performance information.

Connected platforms may include TikTok, Instagram, YouTube, X, and other supported Postiz integrations.

Data Collected

• Account login information for the self-hosted Postiz user.
• OAuth connection data for connected social media accounts.
• Access tokens, refresh tokens, token expiration times, and granted scopes.
• Social account identifiers, profile names, and profile images returned by connected platforms.
• Uploaded media files, captions, post content, scheduling metadata, publishing status, and platform post IDs.
• Basic analytics and performance data such as views, likes, comments, shares, impressions, reach, and similar platform-provided metrics.
• Technical logs required to operate and troubleshoot the service.

How Data Is Used

• Authenticating the operator.
• Connecting the operator's own social media accounts.
• Publishing content with the operator's authorization.
• Uploading and storing media files.
• Retrieving post status and analytics.
• Maintaining, securing, and troubleshooting the service.

OAuth Tokens

OAuth tokens are used to access connected social media accounts only for actions authorized by the operator, such as publishing posts or reading basic account, post, or analytics information.

Tokens are stored by the self-hosted Postiz instance and are not sold or shared for advertising purposes.

Third-Party Platforms

When a social media account is connected, data may be sent to or received from the relevant platform, such as TikTok, Instagram, YouTube, or X. Each platform processes data according to its own privacy policy and developer terms.

Media Storage

Media files may be stored using Cloudflare R2 or another configured storage provider. Public media URLs may be used when required by social platforms to fetch uploaded content, such as TikTok's pull_from_url publishing flow.

Data Sharing

The operator does not sell personal data. Data is shared only when necessary to operate the service, publish content to connected platforms, store media, or comply with legal obligations.

Data Retention

Data is retained for as long as needed to operate this private service. The operator may delete connected accounts, uploaded media, posts, analytics data, and logs when they are no longer needed.

Security

Reasonable technical measures are used to protect the service, including HTTPS, access control, and restricted storage of credentials. No system can be guaranteed to be completely secure.

Account Disconnection and Data Deletion

Connected social media accounts can be disconnected from within Postiz. The operator may also delete stored media, posts, and related records from the self-hosted system.

For data deletion requests or privacy questions, contact: privacy@wotaso.com

Changes

This Privacy Policy may be updated from time to time. The effective date above will be updated when material changes are made.