Privacy Policy
This Privacy Policy explains how Hebeyos ("we", "us", "our")
handles information in connection with our self-hosted instance of
Postiz, an open-source social
media scheduling application, operated at smm.hebeyos.com (the "Service").
The Service is a private, internal tool. Public sign-up is disabled and it is used only by authorized members of our team to schedule and publish content to social media accounts that we own or are authorized to manage. We do not offer the Service to the general public and do not process the personal data of unrelated third parties.
1. Information we process
- Account information — the email address and password (stored only as a secure hash) of authorized users of the Service.
- Connected social accounts — when a user connects a social media account via that platform's official OAuth flow, we receive and store the access and refresh tokens, the account/channel ID, username, display name and profile picture returned by the platform, strictly to operate the Service.
- Content you create — the text, images, videos, links and scheduling metadata of the posts prepared through the Service.
- Analytics returned by platforms — publishing results and basic performance metrics that a connected platform returns for content we publish on your behalf.
- Technical logs — standard server logs (timestamps, IP address, request paths) used for security and troubleshooting.
2. How we use information
We use the information solely to: authenticate authorized users; connect to social platforms you have explicitly authorized; publish and schedule content to those accounts on your instruction; display the results and analytics returned by the platforms; and keep the Service secure and functioning.
3. Third-party platforms
When you connect an account, we access that platform's API only within the permissions (scopes) you grant during authorization, and only to perform actions you request (such as publishing a video you scheduled). This includes, where connected: TikTok, Meta (Facebook, Instagram, Threads), Google (YouTube), LinkedIn, X, and others. Your use of each platform, and each platform's handling of your data, is governed by that platform's own terms and privacy policy — for example TikTok, Google/YouTube and Meta. Data obtained from a platform's API is used only to provide the Service and is not used for advertising, profiling, sold, or shared with any unrelated party.
4. Data sharing
We do not sell personal data and do not share it with third parties, except with the social media platforms that are strictly necessary to carry out an action you request (e.g. sending your video to TikTok so it can be published to your own account).
5. Storage, security and location
The Service is self-hosted on infrastructure we control. Data is transmitted over HTTPS/TLS. Access tokens are stored only as needed to operate the Service and access to the server is restricted to authorized administrators.
6. Retention and deletion
Access tokens for a connected account are retained until you disconnect that channel, after which the stored tokens are removed and the platform authorization can be revoked from the platform's own settings. You may delete posts, connected channels or your account at any time; deleting them removes the associated data from the Service. We retain technical logs only for a limited period for security purposes.
7. Your choices
You may disconnect any social account, delete content, or request deletion of your Service account at any time by contacting us or using the in-app controls. Because this is a self-hosted internal tool, requests are handled directly by our administrators.
8. Children
The Service is a business tool and is not directed to, or intended for use by, children.
9. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date above reflects the latest version.
10. Contact
For any question about this policy or your data, contact us at hebeyos.ua@gmail.com.