Privacy Policy
Charlotte Lab Publishing Tool (self-hosted Postiz instance)
Last updated: 19 August 2026
1. Overview
This Privacy Policy describes how the Charlotte Lab Publishing Tool (“the Application”) handles information. The Application is a self-hosted, single-user instance of the open-source social media scheduling software Postiz, operated privately by its sole owner and operator (“the Operator”) on the Operator’s own server.
The Application is not offered to the public. It has no public sign-up, no other end users, and does not process data belonging to any third party. Its only purpose is to allow the Operator to schedule and upload the Operator’s own original content to the Operator’s own channels and accounts.
2. YouTube API Services
The Application uses YouTube API Services to upload videos to channels owned by the Operator.
By using the Application, the Operator is bound by:
The Operator may review and revoke the Application’s access to their Google account data at any time via the Google security settings page: https://myaccount.google.com/permissions.
3. Information the Application Handles
3.1 Google / YouTube authorisation data
When the Operator connects a YouTube channel, Google issues OAuth 2.0 access and refresh tokens. These tokens are stored in the Application’s database on the Operator’s own private server and are used solely to upload videos to the Operator’s own channels. They are never transmitted to any third party.
3.2 Content submitted by the Operator
Video files, titles, descriptions, tags, thumbnails and scheduling times entered by the Operator are stored on the Operator’s server until they are published, and are transmitted only to the relevant platform’s official API.
3.3 Data the Application does NOT collect
- No data belonging to viewers, subscribers or any other YouTube user
- No YouTube analytics or audience data about third parties
- No personal data of any individual other than the Operator
- No cookies, trackers or advertising identifiers
4. How Information Is Used
Information is used exclusively to authenticate with, and publish the Operator’s own content to, the Operator’s own channels. It is not used for analytics, profiling, advertising, model training, or any form of automated decision-making about individuals.
5. Sharing and Disclosure
No information is sold, rented, traded or shared with any third party. Data is transmitted only to the official APIs of the platforms the Operator has connected (currently YouTube, Facebook, Instagram and Threads), and only for the purpose of publishing the Operator’s own content.
6. Storage, Security and Retention
All data resides on a private virtual server controlled by the Operator, protected by password-authenticated SSH access and HTTPS/TLS in transit. Authorisation tokens are retained only while a channel remains connected and are deleted when the Operator disconnects that channel or revokes access through Google. Published content records may be retained as a scheduling history.
7. Data the Operator Controls
As the sole user, the Operator may at any time disconnect any connected channel, delete stored content and scheduling records, revoke the Application’s Google authorisation at Google account permissions, or shut down the Application entirely.
8. Children
The Application is a private administrative tool and is not directed to, nor accessible by, children. It does not knowingly handle any data relating to children.
9. AI-Generated Content Disclosure
Content published through the Application may include music and imagery that is generated or assisted by artificial intelligence. Such content is disclosed as synthetic on the destination platform in accordance with that platform’s policies, and the associated performer personas are clearly identified as fictional AI-generated characters rather than real individuals.
10. Changes to This Policy
This policy may be updated from time to time. The “Last updated” date at the top of this page reflects the most recent revision.
11. Contact
Questions about this Privacy Policy may be directed to the Operator at: caspon2@gmail.com