Privacy Policy
Last updated: 10 November 2026
Postzest ("we", "us") is a tool that lets you schedule and publish short-form videos to social media accounts you own or manage. This policy explains what information we collect, how we use it, and the choices you have. Contact us at privacy@postzest.com.
Information we collect
Account information. Your email address and a password, which is stored only as a one-way argon2 hash.
Content you upload. Videos, captions, titles, hashtags, and the schedule and per-platform settings you choose.
Connected social accounts. When you connect a TikTok, Instagram or YouTube account, the platform gives us access tokens and basic profile information (account ID, username, display name and avatar). We request only the permissions needed to publish on your behalf:
| Platform | Permissions requested | Why |
|---|---|---|
| TikTok | user.info.basic, video.upload, video.publish | Show which account is connected; upload and publish the videos you schedule. |
| instagram_business_basic, instagram_business_content_publish | Show which account is connected; publish the Reels you schedule. | |
| YouTube | youtube.upload, youtube.readonly | Upload the videos you schedule; read your channel details and the status of uploaded videos. |
Publishing records. Whether each scheduled post succeeded or failed, the platform's post ID or link, and error messages returned by the platform.
Technical data. Session cookies needed to keep you signed in, and server logs (IP address, timestamps, requests) used for security and debugging.
How we use information
- To publish your content to the accounts you connected, at the times you chose, with the settings you chose.
- To show you the status and history of your posts.
- To keep the service secure, prevent abuse, and fix problems.
- To contact you about your account or the service.
We do not sell your information, use it for advertising, or use your content or platform data to train AI models. We never publish anything you have not scheduled or approved.
Use of platform data
Data received from the TikTok, Instagram (Meta) and YouTube (Google) APIs is used only to provide the features you asked for, in line with those platforms' developer terms. Postzest's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. By using YouTube features you also agree to the YouTube Terms of Service; Google's processing is described in the Google Privacy Policy.
How we protect it
Platform access tokens are encrypted at rest. Passwords are hashed and never stored in readable form. Access to production systems is restricted, and data is transmitted over HTTPS.
Sharing
We share your content only with the platforms you direct us to publish to. We use infrastructure providers (such as hosting and email delivery) that process data on our behalf under contract. We may disclose information if required by law.
Retention
We keep your account data while your account is active. Uploaded video files are deleted after they have been published to every scheduled destination or the post is cancelled, and in any case within 30 days. Publishing records are kept for the life of your account so you can see your history. Server logs are kept for up to 30 days.
Disconnecting accounts and deleting your data
- Disconnect a social account: in Postzest, open Channels and choose Disconnect. We immediately delete that account's access tokens and cancel any posts still scheduled to it. You can also revoke access on the platform itself (TikTok: Settings → Security → Manage app permissions; Instagram: Settings → Apps and websites; Google: myaccount.google.com/permissions).
- Delete everything: email privacy@postzest.com from your account email with the subject "Delete my data". We will delete your account, content, tokens and publishing records within 30 days and confirm when it is done. Content already published to a social platform stays there until you remove it on that platform.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to certain processing. Email us and we will respond within 30 days.
Children
Postzest is not intended for anyone under 18, and we do not knowingly collect information from children.
Changes
If we make material changes we will update the date above and notify account holders by email.