Privacy Policy

Effective 6 August 2026

Pliny Group operates a self-hosted deployment of Postiz, an open-source social media scheduling tool, at post.plinygroup.com. This policy describes what that system stores and how it is handled.

Who this applies to

The system is single-operator. It is used by Pliny Group to publish to social media accounts that Pliny Group owns and controls. It is not offered to the public, does not accept registrations, and has no users other than its operator.

What is stored

• Access tokens issued by connected platforms (Instagram, Facebook, Threads, YouTube, TikTok, X) when an account is connected via OAuth. These authorise publishing on our own accounts.
• Basic account identifiers returned by those platforms, such as account name, ID, and avatar, used to label channels in the interface.
• Post content that we author and schedule, including text, images and video, along with scheduling times and delivery status.
• Operator login credentials for the scheduling interface itself, stored as a salted hash.

What is not collected

The system has no public-facing pages, no analytics, no advertising, and no third-party trackers. It does not collect data about visitors to this website, and it does not collect data about anyone who views or interacts with the posts we publish beyond the aggregate metrics that the platforms themselves return to us.

Where data lives

All data is stored on hardware operated by Pliny Group in the United States. It is reachable only over an authenticated connection through Cloudflare Tunnel; the application is not exposed directly to the public internet. Nothing is stored with a third-party hosting provider.

Sharing

Data is not sold, rented, or shared. Content is transmitted to a connected platform only when we publish to that platform, which is the purpose of the system. Cloudflare processes network traffic in transit as our infrastructure provider.

Retention and deletion

Access tokens are retained until the connected account is disconnected or the token is revoked, whichever comes first. Disconnecting a channel deletes its stored tokens. Scheduled and published post records are retained for our own recordkeeping and can be deleted at any time. Revoking access from within a platform's own settings immediately invalidates our stored token for that account.

Your rights

Because the system holds data only for accounts we ourselves own, there is no third-party personal data to access, correct, or erase. If you believe we hold data about you in error, contact us and we will investigate and delete it.

Changes

If this policy changes, the effective date above will be updated.

Contact

Questions about this policy: [email protected]