Privacy Policy

Garden of Grapes operates PostizGOG at postiz.gardenofgrapes.com, a self-hosted Postiz installation for preparing, scheduling, and publishing content to connected social accounts. This policy covers this installation. Garden of Grapes is its operator; the developers of Postiz and the connected social platforms operate their own separate services.

Information we process

• Account information, such as your email, name, organization, and login details. Local-account passwords are stored as hashes.
• Connected-account identifiers, profile information, authorization tokens, and permissions returned by platforms you authorize.
• Uploaded videos and images, captions, drafts, scheduling settings, publishing results, and available channel analytics.
• Technical information such as IP address, browser information, service logs, and cookies used for sign-in and preferences.

How we use information

We use this information to provide account access, display your connected channels, store and schedule your content, publish as you instruct, display supported analytics, and troubleshoot or secure the service. We do not sell personal information or use connected-account data for advertising.

TikTok and other connected services

When you connect TikTok, the requested permissions allow PostizGOG to read your basic profile, profile details, statistics, and public video list; upload content for you to finish in TikTok; and publish content to your profile, subject to TikTok permissions and app restrictions. Other platforms provide the information and actions described in their own authorization screens. Authorization tokens enable these connections; PostizGOG does not need your social-platform password.

Content and related information are sent to the platform you select when you request a publishing or upload operation. If you use an optional AI or other integration, the content needed for that action is sent to that service. Each external service handles received data under its own policies.

Storage and media access

Account and publishing records are stored in the installation's database. Uploaded media uses Cloudflare R2 storage. Media URLs may be publicly accessible to anyone who has the URL so that connected platforms can retrieve the files. Do not upload confidential material that must remain accessible only to signed-in users. Hosting, storage, and connected platforms may process data in the countries where they operate.

Retention and deletion

Account, connection, and publishing records remain while needed to operate the installation, unless removed by the operator. Published-media cleanup may remove eligible uploaded files when enabled. Deleting an item from the interface may hide a record without immediately erasing every stored copy. Copies can also remain in logs or backups until those copies are deleted. We do not promise a fixed automatic deletion period.

You can disconnect a channel in PostizGOG and revoke its authorization in the social platform's account settings. Revoking authorization does not itself erase previously stored records or posts already published to the platform. To request access, correction, or permanent deletion of your account, connected-account data, or uploaded media, email [email protected]. We may need to verify your identity before handling the request. Depending on applicable law, you may have additional privacy rights.

Cookies and optional services

Sign-in cookies keep you authenticated; preference cookies remember settings such as language. Analytics, error reporting, and other optional integrations may process usage or diagnostic data if configured by the operator. Blocking sign-in cookies can prevent account access.

Changes and contact

We may update this policy as the installation or its integrations change. The effective date above identifies this version. For privacy questions, contact Garden of Grapes at [email protected].