Legal
Privacy Policy
Last updated: 15 October 2026
01 Who we are
Softimist ("we", "us") operates Softimist Postiz, a social media scheduling service at
postiz.softimist.com, built on the open-source application
Postiz and running on a server
Softimist controls.
This policy explains what we collect when you use the service, why, how long we keep it, and how to remove it. Contact: privacy@softimist.com
02 Information you give us
- Your account: your name, email address and a password, which we store only as a hash.
- Your content: the captions, titles, hashtags, images and videos you upload, the settings you choose for each post, and when you schedule it.
- Messages to us: anything you send to our support address.
03 Information from the platforms you connect
When you connect a social media account, you sign in on that platform's own page and it asks you to approve specific permissions. We receive only what you approve, and use it only to publish your posts and show you how they performed.
TikTok
| Permission | Why we request it |
|---|---|
| user.info.basic | Your TikTok display name and avatar, so you can see which account is connected and which account a post goes to. |
| user.info.profile | Your profile details (such as your username and profile link), to identify the connected account. |
| user.info.stats | Your follower, following, like and video counts, shown in your analytics. |
| video.list | Your public videos, so posts published through the service can be matched to the video on TikTok and their statistics shown. |
| video.publish | Publishing the video or photos you prepare, with the privacy, interaction and disclosure settings you choose. |
| video.upload | Sending a video to your TikTok inbox as a draft, when you choose to finish it in the TikTok app. |
Each time you open the post screen we also ask TikTok for your current posting options (which privacy levels you may use, whether comments, Duet or Stitch are turned off, and the longest video you may post), so the screen offers only what TikTok allows.
YouTube (Google)
Listing the channels you manage so you can pick one, uploading your videos to it, setting their title, description, tags, privacy and thumbnail, reading their analytics, and your Google name, email and avatar to identify the connected account.
Facebook and Instagram (Meta)
The name and identifier of the Pages and Instagram professional accounts you choose to connect, permission to publish to them, and insights for the posts you publish.
X and LinkedIn
Your profile name, handle and avatar, permission to publish posts to your account or Page, and statistics for those posts.
04 How we use it
- To publish your posts when and where you tell us to.
- To show you each post's status and how it performed.
- To keep your connections working, by storing and refreshing the access tokens each platform issues.
- To keep the service secure and to answer your questions.
05 What we never do
- We do not sell, rent or trade your data or anything we receive from a platform.
- We do not use platform data for advertising, profiling or audience targeting.
- We do not use your content or platform data to train artificial intelligence or machine learning models.
- We do not post anything you have not prepared and approved yourself.
- We do not add our own branding, watermarks or links to your posts.
06 Where it is stored, and who else sees it
Your data is stored on a server rented and controlled by Softimist, in a database that is not reachable from the public internet. Traffic is encrypted in transit with TLS.
We share data only with: the platforms you connect, when we publish to them on your behalf; Cloudflare, which carries traffic to the site; and our server provider, which hosts the machine. We disclose data otherwise only if the law requires it.
07 How long we keep it
- Access tokens are kept while the account stays connected and deleted when you disconnect it.
- Posts, media and statistics are kept while your account exists, unless you delete them first.
- Your account is kept until you delete it or ask us to. We then delete its data within 30 days.
08 Google API Services — Limited Use
Limited Use disclosure
Softimist Postiz's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Using the YouTube features means you also agree to the YouTube Terms of Service; Google's own handling of data is described in the Google Privacy Policy.
09 Your choices: disconnect, delete, revoke
- Disconnect an account in the app at any time; its access token is deleted.
- Delete posts and media in the app at any time.
- Delete your account by writing to privacy@softimist.com from the email address you signed up with.
- Revoke access at the platform: in TikTok, Settings and privacy → Security & permissions → Manage app permissions; in Google, Account → Third-party apps & services; in Facebook, Settings → Business integrations. Revoking stops all further publishing immediately.
You may also ask us for a copy of your data, or to correct it, at the same address.
10 Children
The service is not intended for anyone under 13, or under the minimum age a connected platform requires. We do not knowingly collect data from children.
11 Changes to this policy
If this policy changes we will update this page and the date at the top. If a change affects how platform data is used, it will be published here before it takes effect.
12 Contact
Questions, requests or complaints: privacy@softimist.com