Privacy Policy
Last updated: June 15, 2026
About This Tool
This privacy policy describes the data practices of a self-hosted instance of Postiz, a social media scheduling application operated personally by Annette Thompson at postiz.annettethompson.com. This tool is used exclusively for Annette Thompson's own social media accounts. It isn't a public service, and it doesn't collect information from the general public.
Who This Policy Covers
This tool is a private, single-user scheduling application. The only "user" is Annette Thompson, the operator. There's no public signup, no accounts for third parties, and no data collected from visitors to this page.
Platform Connections and OAuth
Postiz connects to social media platforms through their official OAuth authorization flows. The platforms currently or potentially connected include:
- Facebook and Instagram (Meta)
- Threads (Meta)
- YouTube (Google)
- X (formerly Twitter)
When a platform connection is authorized, the platform grants an access token. That token allows Postiz to read basic profile information (name, profile photo, page/channel identifiers) and to publish content that Annette schedules through the tool.
What Data Is Accessed and Why
The tool accesses the minimum data each platform requires to schedule and publish posts:
- Profile information (name, avatar, account ID) to identify which account a post belongs to.
- Posting permissions so the app can publish content on the scheduled date and time.
- Page and channel lists where applicable (for example, Facebook Pages managed by the account) so Annette can choose the right destination for each post.
No other data is requested. The tool doesn't read private messages, followers lists, analytics, ad accounts, or any data not needed to publish the scheduled content.
How Access Tokens Are Stored
OAuth access tokens are stored only on Annette Thompson's own private server. They're never transmitted to, sold to, or shared with any third party. The server runs in a private, password-protected environment and isn't accessible to the public.
No Public Data Collection
This application doesn't collect, store, or process any data from people who haven't explicitly connected a social media account through it. Visitors to this privacy policy page aren't tracked, fingerprinted, or profiled in any way. There are no analytics scripts, advertising pixels, or third-party tracking tools on this page.
Data Retention
Scheduled post drafts and publishing history are stored on the private server for as long as the tool is in active use. Access tokens are retained until you disconnect the account or revoke access through the platform's own settings.
How to Revoke Access
You can revoke this app's access to any connected platform at any time through that platform's own settings. For example:
- Facebook/Instagram/Threads: Facebook Settings > Security > Apps and Websites
- Google/YouTube: myaccount.google.com/permissions
- LinkedIn: LinkedIn Settings > Data Privacy > Third-party applications
- X (Twitter): X Settings > Security and account access > Connected apps
Revoking access through the platform immediately invalidates the token stored on the server.
Children's Privacy
This tool isn't directed at children and doesn't knowingly collect information from anyone under 13. Since this is a private, single-operator tool, no such collection occurs.
Changes to This Policy
If the data practices of this tool change materially, this page will be updated with a new "Last updated" date.
Contact: Questions about this privacy policy can be sent to [email protected].