Privacy Policy — Postiz Elsa

Last updated: 4 November 2026

1. Data controller

Elsa Léger — contact@elsa-leger.com — https://www.elsa-leger.com/contact

2. What the application is

"Postiz Elsa" is a private, self-hosted publishing tool used by a single person to post her own

content to her own social media accounts (TikTok, Instagram, Facebook, YouTube, LinkedIn).

3. Data we process

• **Account credentials and access tokens** for the operator's own social accounts, obtained

through each platform's official authorisation flow (OAuth). They are stored on the

operator's own server, encrypted at rest, and never shared with third parties.

• **Content** (videos, images, captions) uploaded by the operator for publication.
• **Technical logs** (timestamps, publication status) needed to operate the tool.

We do not collect data about visitors or about any other social media user. There are no

analytics, no advertising trackers, no cookies on public pages, and nothing is sold or rented.

4. TikTok data specifically

When authorised through TikTok Login Kit, the application accesses:

• basic account information (`user.info.basic`) to identify the connected profile,
• the ability to upload (`video.upload`) and publish (`video.publish`) videos to that same profile.

TikTok data is used only for these purposes and is never transferred to third parties.

Access tokens are stored locally, can be revoked at any time by the operator from TikTok's

settings, and are deleted when the integration is disconnected.

5. Retention

Tokens and content remain stored only as long as the tool is in use. Deleting a post or

disconnecting a channel removes the related data from the application.

6. Hosting and transfers

The application runs on a server controlled by the operator. Media is stored on a private

object-storage bucket. No data is transferred to third countries beyond what is required by the

social platforms' own APIs.

7. Your rights

Under the GDPR you may request access to, rectification of, or deletion of your data, and you may

object to processing. Write to contact@elsa-leger.com. You may also lodge a complaint with the

French supervisory authority (CNIL, https://www.cnil.fr).

8. Changes

This policy may be updated; the date at the top of this page indicates the latest revision.