Postiz

Open-source post scheduler, self-hosted at postiz.ntv-app.com and used only with the operator's own accounts.

Integrations

• FacebookactiveOne Facebook integration connected.
• Instagramactive
• XpendingCredentials not yet configured.
• LinkedInpendingCredentials not yet configured.
• TikTokpendingPlanned integration; requires approval of the policies published on this site.
• Other networksnot used

Article 1.- Purpose

Postiz is an open-source social media post scheduler, self-hosted at https://postiz.ntv-app.com. It is for the operator’s private use, on pages and accounts the operator owns or administers. No third party connects their accounts.

Article 2.- Integration status

Facebook and Instagram are active, with one Facebook integration connected. X and LinkedIn are pending because their credentials are not configured. TikTok is pending and is a planned integration that requires approval of this site’s policies. No other network is used.

Article 3.- Data stored

On the operator’s server it stores: the operator account, OAuth tokens of connected integrations, scheduled and published posts, uploaded media, the comments and messages tables built into the tool, and notifications.

Article 4.- Infrastructure

All data, including media files, resides on the operator’s own server.

Article 5.- Deletion and revocation

To request data deletion see the data deletion page. You can also revoke access from the Facebook or Instagram settings.

Article 6.- How the TikTok integration works

Purpose. The operator uses Postiz to schedule and publish content to the brand and business accounts the operator administers. No third party can register or connect accounts: public sign-up is disabled.

Login with TikTok (Login Kit). The operator authorizes an account through TikTok’s OAuth flow. The scopes used are user.info.basic (open ID, display name and avatar of the connected account), user.info.profile (username and profile link) and user.info.stats (account statistics such as follower and video counts). They are used only to identify the connected account inside the scheduler.

Display API. The scope video.list lets the connector read the list of the connected account’s own videos.

Content Posting API. The operator composes a video post in the scheduler and selects the connected account. The scope video.upload uploads the video as a draft and the scope video.publish publishes it to the connected account at the chosen date and time.

What it does not do. It does not read other users’ data, offers no sign-up to third parties, and does not sell or share TikTok data. Tokens are kept on the operator’s server and can be revoked from TikTok’s permission settings. Data deletion is requested through the data deletion page. See also the privacy policy and the terms of use.

Status. The TikTok integration is pending approval of TikTok’s app review; it is described here to document how it will operate.