POST PORTAL

Privacy Policy

Last updated: November 14, 2026

This Privacy Policy explains how POST PORTAL ("we", "us", "the app"), available at post.sritcenter.com, collects, uses, stores and protects information when you connect your social media accounts and use the app to schedule and publish posts.

1. Who we are

POST PORTAL is a self-hosted social media scheduling tool. It lets an authorized administrator connect one or more social media accounts and publish or schedule content to them. We are the data controller for the information processed through this installation. You can reach us at support@post.sritcenter.com.

2. Information we collect

When you connect an account through a platform's official login (OAuth), we receive and store only what is needed to publish on your behalf:

  • Account identifiers & profile basics — your account/page/channel ID, name, username, and profile picture URL.
  • Access tokens — the OAuth access and refresh tokens the platform issues, which authorize posting. These are stored encrypted (AES‑256) and are never shown in the interface.
  • Pages, groups, channels and company pages you administer, so you can select them as publishing targets.
  • Content you create — the text, images, videos and schedules of the posts you compose in the app, and the delivery logs (success/failure) of each publish.
  • Account details you enter — your login email, name and optional profile photo for the app itself.

We do not collect your social media password. Authentication happens on the platform's own login screens.

3. Platforms we connect to

Depending on which accounts you connect, we process data through the official APIs of the following providers, subject to their platform terms and policies:

  • Meta Platforms — Facebook and Instagram (Facebook Login, Pages API, Instagram Graph API).
  • Google / YouTube — YouTube Data API via Google OAuth. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
  • TikTok — TikTok Login Kit and Content Posting API.
  • LinkedIn — LinkedIn Sign In and Share/Community Management APIs.
  • X (Twitter) — X API v2 via OAuth 2.0.

4. How we use your information

  • To authenticate you with each platform and keep your connection active (refreshing tokens automatically).
  • To publish and schedule the posts you create, to the accounts, pages, channels and targets you select.
  • To display your connected accounts, post history and delivery logs inside the app.
  • To optionally rewrite captions per account using an AI provider, only when you enable that feature.

We do not sell your data, use it for advertising, or share it with anyone except the platform you are publishing to and the service providers listed below.

5. AI caption rewriting (optional)

If you enable AI caption rewriting, the post text you submit is sent to our configured AI provider (Groq) solely to generate a reworded caption that is returned to the app. It is not used to train models by us. This feature is off unless you turn it on.

6. Data storage & security

Your data is stored in this installation's own database on post.sritcenter.com. Access tokens and client secrets are encrypted at rest. Access to the admin dashboard is protected by a password and CSRF protection, and traffic is served over HTTPS.

7. Data retention

We keep connected-account data and tokens until you disconnect the account or delete it in the app. Posts and delivery logs are kept until you delete them or clear the logs. When you remove an account, its stored tokens and profile data are deleted from our database.

8. Your rights & how to delete your data

You can disconnect any account at any time from Accounts → ⋮ → Remove, which deletes its tokens and profile data from our system. You may also revoke this app's access from within each platform's own settings (for example, Facebook Settings → Business Integrations, or Google Account → Security → Third‑party access). To request full deletion of your data, see our Data Deletion Instructions or email support@post.sritcenter.com.

9. Children

This app is intended for business use by adults and is not directed to children under 13 (or the minimum age required in your country).

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the latest revision. Continued use of the app after changes means you accept the updated policy.

11. Contact

Questions about this policy or your data? Email support@post.sritcenter.com.

Privacy Policy Terms of Service Data Deletion Home