Privacy Policy

• We never ask for or store your social media passwords.
• We do not sell your data, use it for advertising, or share it with third parties for marketing.
• We use your connected accounts only to publish posts that you created.
• When you disconnect an account, its access token is deleted immediately.
• When you delete your account, your data is deleted with it.

We collect only what the service needs in order to work. By category:

Your account information

• Your email address — so you can sign in and we can send you a sign-in link.
• Your time zone — so scheduled posts go out at the right local time.
• When your account was created and last updated.

The social accounts you connect

• The platform name and your account identifier on that platform.
• Your display name and profile picture URL — so we can show you which account is connected.
• The access token the platform issues to you. It is stored encrypted and used only to publish your own posts.

Your content

• The post text you write.
• The images you upload.
• Which accounts a post goes to, and when it should be published.

Publishing records

• Whether a post was published, when, and its address on the platform.
• The error message returned by the platform when an attempt fails. We keep this so we can show you what went wrong and fix it.

We do not use advertising networks, tracking pixels, or third-party analytics tools.

To connect TikTok you are sent to TikTok’s own login screen. Your TikTok password stays there; it never reaches us.

What we receive from TikTok

• Your account identifier (open ID) — so posts go to the correct account.
• Your display name, username, and profile picture URL — so we can show you which account is connected.
• Permission to publish — used only to publish posts that you created.

What we do not do with your TikTok data

• We do not read your follower list, your messages, or your view statistics.
• We never publish content you did not create, and we do not follow, like, or comment on your behalf.
• We do not sell, advertise with, or share any information received from TikTok with third parties.
• We do not process your TikTok data for any purpose outside providing this service.

• Performance of a contract: to create your account, store your posts, and publish them to the platforms you choose.
• Legitimate interests: to keep the service secure, prevent abuse, and diagnose faults.
• Legal obligation: where the law requires us to retain information.

We do not sell your data. We share only what is necessary, and only with:

• The social platforms you publish to — only the posts and images you asked to publish, and only when you choose to publish them.
• Our infrastructure providers — the companies providing our database, file storage, and hosting. They host your data on our behalf and may not use it for their own purposes.
• Competent authorities — where we are legally required to do so.

• Your account information and content: until you delete it or close your account.
• A channel's access token: until you disconnect it. Disconnecting deletes the token immediately.
• Publishing records: until the related post is deleted.

• Access tokens for your social accounts are stored encrypted and are never sent to your browser.
• Each user can access only their own data; this is enforced at the database level, not merely in application code.
• Signing in uses a one-time link sent to your email rather than a password — there is no password to steal.
• All connections are encrypted in transit (HTTPS).

No system is perfectly secure. If a security incident affects your data, we will notify you and, where required, the relevant authorities.

You have the right to know whether we process your data, to request a copy, to have it corrected or deleted, to object to processing, and to receive a portable copy.

To exercise these rights, write to destek@postju.com. We respond within 30 days at the latest. You can also do most of this yourself right away — see the next section.

We use only the cookies needed to keep you signed in and to remember your language preference. We do not use advertising or tracking cookies. If you block session cookies, you will not be able to sign in.

The service is not intended for anyone under 18, and we do not knowingly collect data from children. If we learn that we have, we delete it.

We may update this policy from time to time. If a change is significant, we will tell you in the app or by email. The date at the top of this page shows the most recent update.

Data controller: Postju. For anything related to privacy, reach us at destek@postju.com.

You may also want to read our Terms of Service.