Privacy Policy

Last updated: 2026-05-09

This Privacy Policy describes how Red Lateral ("we", "our", "us") collects, uses and stores information in connection with the self-hosted instance of Postiz we operate at social.redlateral.com ("the Service"). The Service is operated for the personal use of its single owner and is not offered as a product to third parties.

1. Who is the data controller

Red Lateral, contact email redlateral.lu@gmail.com.

2. Information we process

When you connect a TikTok, YouTube or other supported platform account to the Service via OAuth, we receive and store the following information from those platforms:

• An access token and refresh token issued by the platform.
• Public profile data of the connected account: identifier (e.g. open_id), display name, username, avatar URL, and where applicable bio, follower count and verification status.
• The list of videos previously published by the connected account, when the granted scope allows it (e.g. video.list), in order to display history and analytics inside the Service.

You also upload to the Service the video files and metadata (title, caption, tags, scheduled date/time, privacy level) that you intend to publish to your own connected accounts.

3. How we use the information

• To authenticate and identify the connected social media account inside the Service.
• To upload, schedule and publish the video content you have prepared, on the connected account, at the date and time you choose.
• To display in your own dashboard the history and basic performance of posts published through the Service.

We do not use the information for advertising, profiling, training of machine learning models, or any purpose unrelated to the operation of the Service.

4. Storage and security

Tokens and profile data are stored in a self-hosted PostgreSQL database that runs on infrastructure controlled exclusively by Red Lateral. Access tokens are stored encrypted at rest. The database is not publicly accessible and is reachable only from the Service application within a private network.

5. Sharing with third parties

We do not sell, rent or share the information with any third party, with the exception of the official APIs of the platforms you have explicitly connected (TikTok, YouTube, etc.), which we call solely to perform actions you have requested in the Service (publish a video, fetch your profile, list your videos).

6. Retention

Tokens and connected-account data are retained as long as the integration is active. When you disconnect a platform from the Service or delete your local user, the corresponding tokens and data are removed.

7. Your rights

You may at any time disconnect a platform from the Service (which revokes the stored tokens), revoke our application from the platform's own settings (e.g. TikTok or Google security settings), and request the deletion of any data we hold by emailing redlateral.lu@gmail.com.

8. Changes

This Privacy Policy may be updated. The "Last updated" date at the top reflects the effective date of the current version.

9. Contact

Questions or requests can be sent to redlateral.lu@gmail.com.