PRIVACY POLICY

1. Information Collection Protocol

Erdem Castle ("we", "our", or "us") is committed to protecting your privacy. When you interact with our web infrastructure, applications, and scheduling systems, we collect specific analytical and operational data to ensure system stability, functionality, and security. This includes your IP address, browser type, operating system version, interaction logs, and timestamps of your access requests.

2. Software Telemetry & Authentication

Our custom software solutions and deployment environments may require network connectivity to authenticate your identity, synchronize accounts, or verify software configurations. During this process, we may collect cryptographic tokens strictly for authorization and operational purposes. We do not scan personal files or extract unauthorized data from your local storage.

3. Third-Party Integrations & API Services (Postiz Platform)

To provide core functionalities such as automated video uploads and content scheduling, our dedicated application (the Postiz Platform) utilizes API services provided by third parties, including Google and TikTok.

• YouTube API Services: The Postiz Platform uses YouTube API Services to authenticate users and manage video content on their behalf. By using our application to connect to YouTube, you agree to be bound by the YouTube Terms of Service and the Google Privacy Policy.
• TikTok API Services: The Postiz Platform integrates with TikTok for Business and TikTok Developer APIs. By connecting your TikTok account, you agree to the TikTok Terms of Service and TikTok Privacy Policy.
• Cloudflare & Analytics: We use Cloudflare for DDoS protection and edge-caching. We may also use analytics telemetry to monitor application performance.

4. Google User Data: Usage, Storage, and Strict Non-Disclosure

Because our Postiz Platform requests access to your Google and YouTube accounts via OAuth authentication, we adhere to the most rigorous standards regarding your Google User Data. This section explicitly defines our handling of such data:

• What Data We Collect: We request only the specific OAuth scopes required to function. This includes the ability to view your YouTube channel information, upload videos, and manage scheduled content. We collect and store OAuth access tokens and refresh tokens.
• How We Use The Data: The Google User Data accessed by our application is used exclusively to provide the requested automation features (e.g., uploading and scheduling your content directly to your authorized YouTube channel via the Postiz Platform).
• Strict Non-Disclosure & No Data Sharing: We firmly guarantee that we DO NOT share, transfer, disclose, sell, or rent your Google User Data to any third parties, advertisers, data brokers, or external entities under any circumstances. Your data remains strictly within the operational boundaries of our server to execute your automated tasks.
• Data Storage and Encryption: All Google OAuth tokens and related user data are encrypted at rest using industry-standard algorithms (AES-256) and transmitted exclusively over secure HTTPS/SSL protocols.
• Data Retention and Deletion: We retain your Google User Data only for as long as your account is active and the integration is enabled. If you request deletion, all associated access tokens and cached Google user data are permanently destroyed from our servers within 24 hours.
• Revoking Access: You maintain full control over your data. You can revoke our application's access to your Google account at any time by visiting the Google Security Settings page.

5. Google API Services Limited Use Disclosure

Our application's use and transfer to any other app of information received from Google APIs will strictly adhere to the Google API Services User Data Policy, including the Limited Use requirements. We affirm that data obtained via Google Workspace APIs is not used to develop, improve, or train generalized AI and/or machine learning models.

6. TikTok API & User Data Policy

To enable the Postiz Platform to automate and schedule video content directly to your TikTok account, we utilize the TikTok APIs. We uphold strict data security standards for all TikTok users:

• Data Collection & Purpose: We request access solely to authenticate your TikTok account and upload/schedule videos on your behalf. We collect necessary OAuth tokens and basic profile identifiers strictly to fulfill this service.
• No Third-Party Sharing: We DO NOT sell, rent, transfer, or disclose your TikTok data, tokens, or video metadata to any third-party advertisers, external services, or data brokers. The data is utilized exclusively for the core functionality of the Postiz Platform.
• Security & Storage: TikTok access tokens and user identifiers are secured with AES-256 encryption within our isolated database environments and are never publicly accessible.
• Revocation & Data Purge: You may disconnect your TikTok account from our platform at any time. Upon doing so, or upon a direct deletion request, all authorization credentials and cached TikTok data will be permanently purged from our infrastructure. You may also manage third-party access directly within your TikTok account settings.

7. Cookies & Local Storage

We use Cookies and HTML5 Local Storage to improve your browsing experience, maintain user sessions, and reduce server latency. For instance, we cache UI states in your browser's local storage to provide a faster, seamless experience. You can instruct your browser to refuse all cookies or clear local storage, but authenticated features of our infrastructure will fail to function properly.

8. Data Security Measures

The security of your infrastructure is paramount. Erdem Castle employs SSL/TLS encryption, secure reverse proxy configurations, and isolated backend deployment environments to protect data in transit. However, no method of transmission over the Internet or electronic storage is 100% secure. We employ commercially acceptable, enterprise-grade means to protect your information but cannot guarantee absolute immunity from zero-day vulnerabilities.

9. User Rights & Contact

You have the full right to request information about the data we hold regarding your sessions, integrations, or licenses. If you wish to execute a right to be forgotten, request the deletion of your telemetry data, or have any technical questions about this Global Data Protocol, you must reach out to the system administration directly through our official communication channels or the Erdem Castle Forum.