Privacy Policy

Last updated: March 1, 2026

1. Overview

Postiz Khayru ("we," "us," or "our") operates a social media management platform. This Privacy Policy explains how we collect, use, and protect information when you use our Platform. We are committed to protecting your privacy and handling your data responsibly.

2. Information We Collect

We collect the following types of information:

• Account information: Email address and credentials used to access the Platform
• Social media tokens: OAuth access tokens from connected social media platforms (TikTok, Instagram, LinkedIn, Facebook) used solely to publish content on your behalf
• Content data: Posts, images, videos, and captions you upload or schedule through the Platform
• Usage data: Log data and analytics related to your use of the Platform
• Performance data: Analytics retrieved from connected social media platforms about your published content

3. How We Use Your Information

We use the information we collect to:

• Provide the social media scheduling and publishing service
• Publish content to your connected social media accounts at your direction
• Retrieve and display analytics on your content performance
• Maintain and improve the Platform
• Respond to support requests

We do not sell, rent, or share your personal information or social media account data with third parties for marketing purposes.

4. Social Media Account Data

When you connect a social media account (including TikTok), we receive OAuth access tokens and limited profile information as permitted by each platform's API. This data is used exclusively to:

• Authenticate your account with the social media platform
• Publish content that you have explicitly scheduled
• Retrieve engagement metrics for your published content

We do not access your social media accounts beyond the permissions you explicitly grant. Social media tokens are stored securely and never shared with third parties.

5. TikTok Specific Data

When you connect your TikTok account, we access only the permissions required for content publishing (video.publish, video.upload). We:

• Upload videos to TikTok only when you explicitly schedule a post
• Do not read your TikTok inbox or private messages
• Do not access your follower lists or following lists beyond what is required for publishing
• Retrieve only basic analytics on posts we have published on your behalf

6. Data Storage and Security

Your data is stored on secure servers. We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, or destruction. Social media tokens are encrypted at rest.

7. Data Retention

We retain your data for as long as your account is active. Upon account deletion, your data and social media tokens are permanently deleted within 30 days. Scheduled content that has already been published to social media platforms cannot be retracted by us.

8. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Disconnect any connected social media account at any time

9. Third-Party Services

Our Platform integrates with third-party social media APIs. Your interactions with those platforms are governed by their respective privacy policies. We encourage you to review the privacy policies of TikTok, Instagram, LinkedIn, and Facebook.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of significant changes. Continued use of the Platform after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or to exercise your rights, contact us at admin@khayru.com.