Privacy policy
Solo Postiz is a small publishing tool I run for my own social accounts and a few accounts I manage, such as The Tip Shelf. It sends posts I have already written to TikTok, Instagram and Facebook Pages through their official APIs. It is not a public service: there is no sign-up, and only accounts whose owners connect them on purpose ever reach it. This page says what it keeps when an account is connected, and what it leaves alone.
What it stores
- Access tokens. When you connect an account, the platform gives the tool an access token (and on some platforms a refresh token). They let it post on that account's behalf. They are the only credentials it holds. It never asks for or sees your password.
- Basic profile details. The account or Page ID, its name and picture, as the platform returns them. They are used to show which account a post goes to.
- The posts it sends. The caption, the video or image, and the ID the platform returns once the post is delivered, plus the view and engagement counts the platform reports for those posts.
What it never does
- It never reads your direct or private messages.
- On TikTok it asks only for your basic profile and permission to upload and post videos. It does not read your watch history or other people's content.
- On Facebook it connects a Page, not a personal profile. It posts to that Page as the Page and reads the Page's own post insights. It never posts to or reads a personal profile, a friends list or a group.
- It does not sell, rent or share your data with anyone. Nothing goes to advertisers or data brokers.
- It does not post anything that was not approved first.
Where the data lives
The tokens and post records sit on a machine I control. The tool only runs while a post is being sent or an account is being connected. To deliver a video, the platform fetches it from a temporary link on a subdomain of codefolio.dev, which stops working once the post run ends. The only outside party that receives anything is the platform you connected, and it receives only the post sent to it.
How long it is kept
Tokens are kept while the account stays connected. Post records are kept so I can see what went out and when.
Disconnecting and deleting your data
You can cut off the tool's access at any time from the platform itself, and the tokens stop working straight away:
- TikTok: Settings and privacy, then Security, then Manage app permissions, and remove the app.
- Instagram: Settings, then Apps and websites, and remove the app.
- Facebook: Settings and privacy, then Settings, then Business integrations, and remove Solo Postiz.
To have the stored tokens, profile details and post records deleted as well, email support@codefolio.dev with the account or Page name. I delete them within 30 days and reply to confirm.
Changes and contact
If this policy changes, the date at the top changes with it. Questions or deletion requests: support@codefolio.dev.