01. Operator and scope
ThongNguyen Publisher is operated by Thong Nguyen, Hanoi, Vietnam. This policy covers thongnguyen.online and the self-hosted Postiz application at postiz.thongnguyen.online. Privacy contact: [email protected].
The workspace is deployed with access by invitation. Facebook Pages and Instagram Professional connections are being prepared for Meta App Review. Availability for external accounts depends on the required permissions and platform approval. TikTok and YouTube connections are not offered yet.
02. Website and workspace
- Public website: no registration forms, advertising pixels, third-party analytics scripts or social embeds. Fonts are hosted locally. The device preference
tn-themestores only your light/dark choice in localStorage. - Workspace account: email address, password hash, organization membership, account preferences and session data needed to authenticate you. The workspace uses authentication cookies; these are separate from the public website’s theme preference.
- Content: files you upload, captions, drafts, destinations, schedules, publishing results, post identifiers and available performance metrics.
- Support: your email address, message and any attachments you choose to send.
- Operations: request metadata, IP addresses and diagnostic/security logs needed to operate and protect the services. Cloudflare processes public website traffic under its own service configuration and policies.
03. Meta data and permissions
Connecting a channel is optional. Authorization happens on Facebook or Instagram, not by giving us your social account password. Only connect assets you are entitled to manage. Postiz stores OAuth tokens server-side to perform the actions you authorize, including scheduled actions when you are not signed in.
| Connection | Requested permissions | Data and purpose |
|---|---|---|
| Facebook Pages through Facebook Login | pages_show_list, business_management, pages_manage_posts, pages_manage_engagement, pages_read_engagement, read_insights | Identify the authorizing user and permitted Pages, including business-owned or assigned Pages; display Page details; publish user-selected content and comments; show available engagement and performance metrics. Facebook’s basic profile identifies the authorizing user. |
| Instagram Professional through Instagram Standalone | instagram_business_basic, instagram_business_content_publish, instagram_business_manage_comments, instagram_business_manage_insights | Identify the connected Business or Creator account, display its profile, publish selected media and comments, and retrieve available account/media insights. This connection does not require a linked Facebook Page. |
These are the permissions requested by the installed Postiz version, not a claim that Meta has granted Advanced Access. Provider consent and the app’s access level determine which data can actually be received. The review scope does not include advertising, private messaging, friends’ data or Instagram personal accounts. If a requested permission cannot be justified by an available feature, it must be removed from both the application request and the review scope before external onboarding.
04. Use and sharing
We use workspace and platform data to authenticate users, connect selected channels, store prepared content, perform authorized publishing, display results and respond to support or security issues. We do not sell personal data or use platform data for targeted advertising or training general-purpose AI models.
The public website runs on Cloudflare Pages. The application, database and uploaded media run on our Contabo VPS. Postiz is the self-hosted software used to provide the workspace; using it does not mean account data is automatically sent to Postiz’s hosted service. Email is processed by the sender’s and recipient’s mail providers. Infrastructure providers may process data outside Vietnam.
We send content and required account information to the platform you select. Uploaded media has a public HTTPS URL so publishing APIs can retrieve it; do not upload confidential files. Public URLs do not make draft captions or workspace credentials public. Access by the operator is limited to operating the service, requested support, security and lawful requests.
Any later Google/YouTube integration will be disclosed before use and must comply with the Google API Services User Data Policy, including applicable Limited Use requirements.
05. Retention and deletion
Retention is managed by the operator; not every deadline below is an automatic Postiz feature.
| Data | Retention |
|---|---|
| Theme preference | On your device until you change it or clear site data. |
| Account details, drafts, media and schedules | While your workspace is active and needed for the service; verified deletion requests target completion in active systems within 7 calendar days. |
| OAuth tokens and account data | While authorization is valid and needed. Stop further use after confirmed revocation or disconnection; remove affected data from active systems within 7 calendar days of a verified deletion request. |
| Support correspondence | Up to 90 days after resolution unless earlier deletion is requested or a specific legal duty applies. |
| Operational logs | Rotated by size. The operator targets removal of routine personal diagnostic data within 30 days; security records retained longer require a documented reason and expiry. |
| Encrypted backups | Daily, weekly and monthly rotation can retain historical copies for approximately 3 months. A shorter mandatory platform deletion deadline takes precedence and requires the operator to purge or sanitize affected archives, including off-server copies. |
Disconnection alone is not a complete erasure request. Backup rotation alone is also not sufficient to meet a shorter deletion deadline. We must track deletion requests through active systems and affected backups, prevent deleted data from being reintroduced during recovery, and explain any justified retention to the requester. See the Data Deletion Instructions.
If Google/YouTube data is processed in a future integration, requested deletion must be completed within 7 calendar days; authorization revocation must be handled within the applicable YouTube deadline, with a 7-day internal target. Applicable platform rules take priority over normal backup retention.
06. Security
Connections to the services use HTTPS. Application secrets and OAuth exchanges are handled server-side. Database and cache ports are private, administrative access is restricted, and backups are encrypted. No social account credentials are included in this public website.
We do not claim that every database field or uploaded file has separate encryption at rest. No system can guarantee complete security. Please report a concern to [email protected]; do not include passwords, tokens or secrets.
07. Your choices
You may decline a connection, stop using the workspace, revoke authorization in Facebook or Instagram settings, or email us to request access, correction or deletion. Verification is limited to the information necessary to establish ownership.
Removing authorization stops future platform access but does not itself erase stored workspace data or previously published content. Follow the deletion instructions for stored copies. Manage published posts directly on their platform when you want those posts removed.
08. Provider policies
Independent providers apply their own policies: Meta Privacy Policy, Meta Platform Terms, Cloudflare Privacy Policy and Contabo Privacy Policy.
Future YouTube use is also subject to the Google Privacy Policy and YouTube Terms of Service. Future TikTok use is subject to the TikTok Privacy Policy. Listing a provider is not an approval or endorsement.
09. Age and updates
The workspace is intended for adults aged 18 or older who are authorized to manage the accounts they connect. It is not directed at children. We will update this policy and provide appropriate notice before material changes in processing or enabling additional integrations.