Privacy Policy

1. Introduction

Devworks Solutions SRL ("Devworks Solutions", "we", "us", or "our") operates the social media scheduling platform accessible at postiz.devworks.solutions. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it.

By using our platform, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect only the information necessary to provide our service:

• Account information: Your name and email address used to create a Postiz account on our platform.
• Social media profile data: When you connect a social media account (e.g. TikTok), we retrieve your public profile information such as username and profile picture, as permitted by that platform's API.
• Content you submit: Videos, images, captions, and scheduling data that you upload or create within the platform for the purpose of publishing to your social media accounts.
• Usage data: Basic technical information such as browser type, IP address, and pages accessed, used solely for platform security and performance monitoring.

3. TikTok API Data

When you connect your TikTok account, our platform uses the TikTok API to:

• Retrieve your TikTok username and profile picture (user.info.basic, user.info.profile)
• Upload video files to TikTok on your behalf (video.upload)
• Publish posts directly to your TikTok profile (video.publish)

We access only the scopes you explicitly authorize. We do not read your TikTok inbox, followers, analytics, or any data beyond what is listed above. TikTok data obtained through the API is used solely to deliver the scheduling and publishing functionality you have requested and is never sold, shared with third parties for advertising, or used for any other purpose.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the scheduling and publishing platform
• Authenticate your account and connected social media accounts
• Execute scheduled or immediate publishing of content to your connected platforms
• Send you transactional notifications related to your account (e.g. failed publish alerts)
• Monitor platform security and diagnose technical issues

We do not use your data for advertising, profiling, or any purpose other than delivering the service you have signed up for.

5. Data Storage and Security

Your data is stored on servers hosted within the European Union. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS/TLS), access controls, and regular security reviews.

Media files (videos, images) uploaded for publication are stored temporarily and deleted after successful delivery to the target platform, or upon your request.

6. Data Sharing

We do not sell your personal data. We do not share your data with third parties except in the following limited cases:

• Social media platforms: Content and publishing instructions are transmitted to platforms (e.g. TikTok) as part of the service you have requested.
• Infrastructure providers: We use hosting and cloud infrastructure services to operate the platform. These providers process data only on our behalf and under confidentiality obligations.
• Legal requirements: We may disclose data if required to do so by law or in response to valid requests by public authorities.

7. Data Retention

We retain your account data for as long as your account is active. If you disconnect a social media account from our platform, we delete the associated access tokens immediately. If you close your account entirely, we delete your personal data within 30 days, except where retention is required by law.

8. Your Rights

Under applicable data protection law (including the EU General Data Protection Regulation — GDPR), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Withdraw consent or disconnect social media accounts at any time
• Lodge a complaint with a supervisory authority (in Romania: ANSPDCP)

To exercise any of these rights, contact us at marius.rott@devworks.solutions.

9. Cookies

Our platform uses only essential session cookies required for authentication and platform functionality. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

10. Children's Privacy

Our services are not directed at individuals under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the platform after changes are posted constitutes your acceptance of the updated policy.

12. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: marius.rott@devworks.solutions
• Address: Calea Dudesti 188, Bucharest, Romania