Privacy Policy
This policy explains how postiz.chelintutorials.com (the "Service", "Chelin Postiz") handles information. The Service is a privately operated, self-hosted instance of the open-source Postiz social media scheduler. It is used to create, schedule and publish content to social media accounts owned by its operator. Public registration is closed.
1. Information we collect
- Account information: name, email address and password (stored hashed) for users of the Service.
- Connected social accounts: when a social media account (such as YouTube, Instagram or X) is connected, we receive from that platform the account ID, display name, username, profile picture, and OAuth access and refresh tokens.
- Content: post text, images and videos you upload, scheduling settings, and the publishing status and links returned by the platform.
- Technical data: server logs containing IP address, browser user agent, requested URLs and timestamps, used for security and troubleshooting.
2. How we use information
We use this information only to operate the Service: to authenticate users, publish and schedule content to the accounts you connected, show publishing status, and keep the Service secure. We do not sell personal information, use it for advertising, or share it with third parties except as described below.
3. Google and YouTube data
The Service uses YouTube API Services to upload videos and manage content on connected YouTube channels. By connecting a YouTube account you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.
The Service's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the publishing features you request, is not transferred to others except as necessary to provide those features or comply with law, is not used for advertising, and is not read by humans except with your consent, for security purposes, or as required by law.
You can revoke the Service's access at any time from your Google account permissions page.
4. Meta (Instagram) and X data
Data received from Instagram and X is used only to publish content and display account details within the Service, in line with the Meta Platform Terms and the X Developer Agreement. You can remove the Service's access from the apps and websites settings of your Instagram or X account.
5. Sharing
Content is sent to the social media platforms you choose to publish to. Information may also be disclosed if required by law. The Service is hosted on Amazon Web Services infrastructure, which stores data on our behalf.
6. Retention and deletion
- Uploaded media is automatically deleted from our server a few days after the post using it is published. Published content remains on the social platform under that platform's terms.
- OAuth tokens and account details are kept while the account stays connected and are deleted when it is disconnected or when access is revoked.
- Server logs are rotated and kept for a limited period.
- To request deletion of your data, email realms@limoncito.me. We will respond within 30 days.
7. Security
Data is transmitted over HTTPS, passwords are hashed, and access to the server is restricted. No system is perfectly secure, but we take reasonable measures to protect your information.
8. Your rights
Under Argentina's Personal Data Protection Law No. 25,326 you may request access to, correction of, or deletion of your personal data by emailing us. The Agencia de Acceso a la Información Pública, as the enforcement authority of Law 25,326, handles complaints and claims about breaches of personal data protection rules.
9. Children
The Service is not directed to children under 13 and we do not knowingly collect their data.
10. Changes
We may update this policy. The "Last updated" date above shows the latest version.
11. Contact
Questions or requests: realms@limoncito.me.