Privacy Policy
Postuu Privacy Policy
Effective date: 13 October 2026
Last updated: 13 October 2026
Website: https://postuu.com
Contact: [email protected]
1. Introduction
Welcome to Postuu.
Postuu is a social media content management, video scheduling, and publishing platform designed for content creators, UGC creators, businesses, social media managers, and agencies.
Postuu allows users to connect supported social media accounts, upload and organize content, customize posts for different platforms, schedule publications, and manage publishing activities through a centralized dashboard.
This Privacy Policy explains how we collect, use, store, disclose, protect, and delete personal information when you visit our website, register for an account, connect third-party platforms, use our services, or communicate with us.
Postuu is operated by Justin Jun Jie Seeto, an Australian sole trader, ABN 25 319 037 030, based in New South Wales 2114, Australia.
In this Privacy Policy, "Postuu," "we," "us," and "our" refer to the operator of the Postuu service.
By using Postuu, you acknowledge that your personal information will be handled as described in this Privacy Policy. Where applicable law requires consent, we will request that consent separately.
This policy applies to our website, application, dashboard, integrations, and related services.
2. Who Is Responsible for Your Information
The operator responsible for the personal information collected directly through Postuu is:
Legal operator: Justin Jun Jie Seeto
Business structure: Australian sole trader
Australian Business Number: 25 319 037 030
Business location: New South Wales 2114, Australia
Website: https://postuu.com
Privacy contact: [email protected]
For applicable data protection laws, Postuu generally acts as a data controller for account registration, subscriptions, website operations, security, and customer support.
Where a business or agency uses Postuu to manage content and social media accounts on behalf of its clients, that business or agency may be the controller of certain client-related information, while Postuu processes that information to provide the service.
You may contact us using the email address above for privacy inquiries, access requests, corrections, deletion requests, and complaints.
3. Information We Collect
We collect information that is necessary to operate, secure, improve, and support Postuu.
3.1 Account and profile information
When you create an account or use Postuu, we may collect:
Your name or display name.
Email address.
Authentication and account identifiers.
Password authentication information, where password-based registration is supported.
Profile and workspace settings.
Subscription plan and account status.
Your preferences and communication settings.
Information you provide when contacting support.
Where passwords are used, they should be stored using appropriate cryptographic hashing rather than in readable form.
3.2 Connected social media account information
When you choose to connect a supported social media platform, we may receive information authorized by you and permitted by the platform, such as:
Social media account or channel identifiers.
Account names, usernames, and display names.
Profile pictures or channel images.
Connected Page, channel, or professional account details.
Permissions and authorization scopes granted.
OAuth access tokens and refresh tokens, where provided.
Token expiry and connection status.
Information needed to identify eligible publishing destinations.
Post identifiers, publishing status, and relevant error information.
The exact information depends on the social platform, permissions you grant, and features you use.
We do not receive your social media password through a standard OAuth authorization flow.
3.3 Uploaded and scheduled content
When you use Postuu to create or schedule posts, we may process:
Uploaded videos, images, thumbnails, and other media.
Video titles and descriptions.
Captions, hashtags, and other post text.
Selected publishing destinations.
Scheduling dates, times, and time zones.
Platform-specific publishing settings.
Drafts and content metadata.
Publication identifiers, status, and error logs.
Content organization and account group information.
This information is used to prepare, organize, schedule, and publish content according to your instructions.
3.4 Team and workspace information
If you use team or agency features, we may collect:
Workspace names and identifiers.
Team member names and email addresses.
Invitations and membership records.
Roles and access permissions.
Account groups and assignments.
Activity and audit records relating to workspace administration.
3.5 Subscription and billing information
When you subscribe to a paid plan, we may process:
Your selected plan.
Billing contact information.
Customer and subscription identifiers.
Payment status.
Billing history.
Invoices and transaction references.
Subscription changes and cancellation status.
Payments may be processed by Stripe. Payment card details entered through Stripe's payment interface are handled by Stripe in accordance with its own privacy practices.
We do not need to store complete payment card numbers or card security codes to operate ordinary Stripe-based subscriptions.
3.6 Technical and usage information
When you visit or use Postuu, we may automatically collect:
IP address.
Browser type and version.
Device and operating system information.
Approximate location derived from IP address.
Date and time of access.
Pages and features accessed.
Session identifiers.
Login and authentication events.
Diagnostic and error information.
Security and abuse-prevention records.
Cookie and similar technology information.
We use this information to maintain the service, troubleshoot issues, protect accounts, and understand how the application performs.
3.7 Communications
If you contact us, we may collect your email address, message content, attachments, and correspondence history so that we can respond and provide support.
4. How We Collect Information
We collect information:
Directly from you when you register, upload content, configure your account, or contact us.
From third-party social media services when you authorize an account connection.
Automatically through your interactions with our website and application.
From payment providers in connection with subscription management.
From team administrators who invite you to a workspace or assign permissions.
We do not require you to connect a social media account merely to browse our public website.
Connecting a social media account is optional, although it is necessary to use publishing features for that platform.
5. How We Use Your Information
We use personal information for the following purposes:
Providing Postuu
Creating and maintaining user accounts.
Authenticating users.
Connecting and managing authorized social media accounts.
Uploading and storing content.
Scheduling and publishing posts.
Retrieving publishing results and error information.
Displaying calendars, account groups, and publishing history.
Managing workspaces and team permissions.
Operating the business
Processing subscriptions and billing.
Responding to customer inquiries.
Providing technical support.
Sending essential account and service notices.
Maintaining internal business records.
Security and reliability
Detecting unauthorized access.
Preventing fraud, spam, and abuse.
Diagnosing application errors.
Protecting connected accounts and credentials.
Monitoring operational reliability.
Improving the service
Understanding feature usage.
Improving usability and performance.
Investigating technical problems.
Developing features consistent with this Privacy Policy and applicable permissions.
We do not use private connected-account data for unrelated purposes simply because a user has authorized access to a social platform.
We do not sell personal information or social platform API data to data brokers or advertisers.
6. Legal Bases for Processing
Where the General Data Protection Regulation (GDPR), UK GDPR, or similar laws apply, we process personal information on one or more of the following legal bases:
Performance of a contract: To create your account, provide publishing features, manage subscriptions, and deliver the service you request.
Legitimate interests: To secure the platform, prevent abuse, troubleshoot errors, provide support, and maintain business operations, where those interests are not overridden by your rights.
Legal obligations: To maintain records or respond to lawful requests where required by applicable law.
Consent: Where required for optional cookies, marketing communications, or specific third-party account authorizations.
You may withdraw consent where processing depends on consent. Withdrawal does not affect processing that was lawful before withdrawal.
Connecting a third-party social media account also involves granting permissions through that platform's authorization process.
7. Google and YouTube API Services
Postuu may integrate with Google and YouTube to allow users to connect a YouTube channel and upload or publish authorized video content.
7.1 Google information accessed
Depending on the permissions requested and granted, Postuu may access:
The YouTube channel or account identifiers needed to associate a connection with a publishing destination.
Authorization tokens required to access permitted YouTube API functions.
Video information submitted by the user for uploading.
YouTube video identifiers and publication responses.
Upload status and error information.
Additional account information only where separately authorized and required by an implemented feature.
Postuu requests access only to Google API permissions reasonably necessary for the features it provides.
For YouTube uploading, this may include the following scope:
https://www.googleapis.com/auth/youtube.upload
Additional Google permissions will be disclosed through the Google authorization screen if required for future features.
7.2 How Google data is used
Google and YouTube data is used to:
Connect the YouTube account selected by the user.
Authenticate authorized API requests.
Upload videos the user has selected.
Apply supported publishing settings.
Return upload results, video identifiers, and relevant error information.
Maintain the connection and support authorized publishing operations.
Postuu does not access a user's YouTube account for unrelated activities.
We do not publish content without a user-initiated instruction or an existing scheduling instruction authorized by the user.
7.3 Storage and protection
Google OAuth tokens and associated account data are retained only as necessary for the authorized integration and legitimate operational requirements.
Access to these credentials must be restricted to authorized application components and protected through appropriate security controls.
We do not intentionally expose Google OAuth tokens to other Postuu users or use them for advertising.
7.4 Sharing Google data
Google user data may be transmitted to Google or YouTube as necessary to perform the actions requested by the user.
It may also be processed by infrastructure providers acting on our behalf where necessary to securely operate the service and subject to appropriate safeguards.
We do not sell Google user data, share it with advertising networks, or provide it to data brokers.
7.5 Google API Services User Data Policy
Postuu's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
In particular:
We use Google user data only to provide or improve user-facing features that are prominent in Postuu and appropriate to the permissions granted.
We do not transfer Google user data to third parties except where necessary to provide or improve authorized features, for security purposes, to comply with applicable law, or as otherwise permitted under the Google API Services User Data Policy.
We do not use Google user data for serving advertisements.
We do not permit humans to read Google user data except with the user's affirmative agreement, for security purposes, to comply with applicable law, or in other circumstances expressly permitted by Google's policy.
We apply the Limited Use requirements to the handling of Google user data throughout the service.
Google's policy is available at:
https://developers.google.com/terms/api-services-user-data-policy
7.6 Revoking Google access
You can disconnect a YouTube account through Postuu's account connection controls, where available.
You can also revoke Postuu's Google access directly at:
https://myaccount.google.com/connections
Revoking access prevents future authorized API activity using that connection once the revocation is processed. Scheduled posts that depend on the revoked connection may fail or require reconnection.
You may also request deletion of Google-related information held by Postuu by emailing [email protected].
Revoking access does not automatically delete videos already published to YouTube.
8. TikTok Integration
Postuu may offer TikTok integration in the future, subject to TikTok's developer approvals and applicable API access.
TikTok publishing is not currently represented as an available production feature unless and until it has been implemented and approved.
If TikTok integration becomes available, Postuu may process information authorized through TikTok's official authorization flow, potentially including:
TikTok user or account identifiers.
Display names and profile information permitted by the granted scopes.
Access and refresh tokens where supplied.
Information needed to determine authorized publishing capabilities.
Videos, captions, and settings submitted for publication.
Publishing status, post identifiers, and API error responses.
How TikTok information will be used
TikTok information will be used only for the features that users expressly authorize, such as connecting an account and submitting or publishing their selected content.
We will not use TikTok account information for unrelated profiling, unauthorized advertising, or sale to third parties.
We will request only the permissions necessary for the TikTok features actually implemented.
Disconnecting TikTok
If TikTok integration is enabled, users will be able to revoke access through the applicable TikTok authorization settings and request deletion of TikTok-related information held by Postuu.
Disconnecting a TikTok account will prevent further publishing through that connection once access is revoked or the connection is removed.
Content already published on TikTok remains subject to TikTok's own controls and deletion procedures.
9. Facebook and Instagram Integrations
Postuu may integrate with Meta platforms, including Facebook Pages and eligible Instagram professional accounts.
When you authorize a Meta connection, we may receive:
Account, Page, or professional profile identifiers.
Display names and profile information.
Authorized account and Page relationships.
Access tokens and associated permissions.
Content submitted for publishing.
Publishing status and relevant error information.
We use this information to identify your authorized publishing destinations, manage connected accounts, and carry out publishing instructions.
Postuu does not require your Facebook or Instagram password through official OAuth authorization flows.
Meta account data is not sold to advertisers or data brokers.
You can revoke permissions through the relevant Facebook or Instagram settings, disconnect the account within Postuu where supported, or contact us to request deletion of information stored by Postuu.
Removing an integration does not automatically remove content already published on Facebook or Instagram.
10. Social Media Publishing and Third-Party Platforms
When you schedule or publish content through Postuu, the selected content and necessary metadata are transmitted to the social media platforms you authorize.
Once content is published, the receiving platform processes it according to its own terms and privacy policy.
Depending on your publishing settings, published content may be publicly accessible, shared, downloaded, indexed, or otherwise processed by third parties outside Postuu's control.
You are responsible for reviewing the audience and privacy settings of the destination platform before publishing.
Postuu does not control how YouTube, TikTok, Facebook, Instagram, or their users handle content after it has been published.
If a scheduled publication fails, we may retain relevant technical information to identify the failure and help you retry or resolve the issue.
11. Cookies and Similar Technologies
Postuu may use cookies and similar technologies to support:
Login sessions and authentication.
Account security.
Remembering essential preferences.
Maintaining application functionality.
Measuring performance and diagnosing errors.
Optional analytics, where implemented.
Essential cookies are used where necessary to operate the service.
Where legally required, we will request consent before setting non-essential cookies or activating optional tracking technologies.
You may manage cookies through your browser settings and any consent controls provided by Postuu.
Blocking essential cookies may prevent certain features from working.
If we introduce additional analytics or advertising technologies, this policy and any required cookie notices will be updated to explain those practices.
12. Payment Processing
Postuu may use Stripe to process subscriptions and related payments.
When you purchase a subscription, relevant information may be shared with Stripe to:
Process payment transactions.
Create and manage customer billing records.
Issue invoices and receipts.
Manage recurring subscriptions.
Process refunds where applicable.
Detect and prevent payment fraud.
Stripe processes payment information according to its own privacy policy:
Postuu may receive payment confirmation, subscription status, billing identifiers, and limited payment method information necessary for account management.
We do not sell billing information to third parties.
13. When We Share Information
We may disclose personal information only where reasonably necessary for the following purposes.
Service providers
We may use providers for hosting, databases, media storage, authentication, infrastructure, security, email delivery, payment processing, and customer support.
These providers may process information on our behalf to deliver their services.
Connected social platforms
We share user-selected content and necessary account information with authorized platforms such as YouTube, Facebook, Instagram, and, if enabled, TikTok.
Workspace members
Information may be accessible to other authorized members of a shared workspace according to their assigned permissions.
Legal and safety purposes
We may disclose information where required by applicable law, lawful legal process, or where reasonably necessary to protect users, prevent fraud, investigate abuse, or defend legal rights.
Business transfers
If Postuu undergoes a sale, merger, restructuring, or transfer of business assets, relevant information may be transferred subject to applicable legal requirements and appropriate confidentiality protections.
We do not sell personal information, social media access tokens, or connected-account data.
14. International Data Transfers
Postuu is operated from Australia, but the services and infrastructure used to operate the platform may involve processing personal information in other countries.
Information may be transferred to countries where our hosting providers, payment processors, technical service providers, or connected social media platforms operate.
These countries may have different privacy laws from your country of residence.
Where required by applicable law, we use appropriate safeguards for international transfers, such as contractual protections, recognized transfer mechanisms, or other lawful arrangements.
For individuals in the European Economic Area or United Kingdom, transfers outside those jurisdictions will be handled using a lawful transfer mechanism where required.
Information submitted to a connected social media platform is also subject to that platform's international processing practices.
15. Data Security
We take reasonable technical and organizational measures designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure.
Depending on the systems involved, these measures may include:
Encrypted connections using HTTPS/TLS.
Access controls and authentication.
Role-based permissions.
Restricted access to production credentials.
Secure handling of API secrets and OAuth tokens.
Logging and monitoring of security-relevant events.
Software maintenance and security updates.
Reasonable procedures for responding to security incidents.
No internet-based service can guarantee absolute security.
You are responsible for maintaining the confidentiality of your account credentials and promptly notifying us if you suspect unauthorized access.
If a personal data breach occurs, we will investigate and provide notifications where required by applicable law.
16. Data Retention
We retain personal information only for as long as reasonably necessary to provide Postuu, fulfill authorized publishing activities, comply with legal obligations, resolve disputes, protect the service, and maintain legitimate business records.
Different types of information may be retained for different periods:
Account information: Generally retained while your account is active and for a limited period afterward where needed for legal, security, or operational purposes.
Uploaded media and drafts: Retained as needed to support your content management and scheduled publishing activities, subject to applicable deletion processes.
Social account credentials: Retained while the relevant connection remains authorized and required for the integration. Revoked or disconnected credentials should be invalidated or removed from active use.
Publishing records: May be retained to display your publishing history, troubleshoot failures, and maintain audit records.
Billing records: May be retained for periods required by tax, accounting, payment, or other applicable laws.
Security logs: May be retained for a limited period appropriate to fraud prevention, troubleshooting, and system security.
Backups: Deleted information may remain temporarily in backups until the relevant backup retention cycle expires, subject to legal requirements.
When personal information is no longer required, we will delete it, de-identify it, or securely dispose of it, unless continued retention is legally required or otherwise permitted.
Users may contact us for further information about the retention periods applicable to their data.
17. Account Deletion and Data Removal
You may request deletion of your Postuu account and associated personal information by contacting:
Include the email address associated with your Postuu account and state that you are requesting account deletion.
We may take reasonable steps to verify your identity before processing the request.
When an account is deleted, we will take appropriate steps to:
Disable access to the account.
Remove or invalidate connected social media credentials under our control.
Cancel or remove pending publishing tasks associated with the deleted account.
Delete or de-identify account information, uploaded media, drafts, and related records where deletion is required and technically feasible.
Retain only information necessary for legal obligations, dispute resolution, security, or other lawful purposes.
Remove remaining copies from backups according to applicable backup retention procedures.
We aim to acknowledge privacy and deletion requests promptly and process them within the period required by applicable law.
Deleting a Postuu account does not automatically delete content already published to external social media platforms.
To remove published content, you may need to use the destination platform's own deletion tools.
If you want to disconnect a social media account without deleting your Postuu account, you may use the available connection management controls or contact us.
18. Your Privacy Rights
Depending on your location and applicable law, you may have the right to:
Request access to personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of your personal information.
Request restriction of certain processing.
Object to certain processing.
Withdraw consent where consent is the legal basis.
Request portability of eligible personal information.
Lodge a complaint with an applicable privacy regulator.
Receive information about how your personal information is used.
Some rights are subject to legal limitations and exceptions.
To exercise your rights, email:
We may request reasonable verification before disclosing or deleting account information.
We will respond in accordance with applicable legal requirements.
19. Australian Privacy Rights and Complaints
Postuu is operated in Australia.
Where the Australian Privacy Act 1988 and Australian Privacy Principles apply to our activities, we will handle personal information in accordance with those requirements.
If you believe we have mishandled your personal information, please contact us at [email protected].
Explain your concern and provide enough information for us to investigate.
We will review the complaint, seek additional information if needed, and provide a response within a reasonable period.
If you are dissatisfied with our response, you may be able to contact the Office of the Australian Information Commissioner (OAIC), subject to its jurisdiction.
OAIC website:
20. European Economic Area and United Kingdom Users
If you are located in the European Economic Area or United Kingdom, you may have additional rights under the GDPR or UK GDPR, including rights of access, rectification, erasure, restriction, objection, and data portability.
You may also have the right to complain to your local data protection supervisory authority.
Where applicable, Postuu will provide information about the legal basis for processing and international data transfer safeguards.
If we are required to appoint an EU or UK representative or other local contact under applicable law, we will make the relevant contact details available.
21. California and Other United States Privacy Rights
Residents of certain United States jurisdictions may have additional rights under applicable state privacy laws.
Depending on the law and its applicability to Postuu, these may include rights to access, correct, delete, or obtain copies of personal information and to opt out of certain forms of data sale, sharing, or targeted advertising.
Postuu does not sell personal information or connected social media API data.
We do not use Google or TikTok account data for cross-context behavioral advertising.
If an applicable state privacy law grants you a right to make a request, contact us at [email protected].
We will handle verified requests as required by law.
22. Children's Privacy
Postuu is intended for adults and business users and is not directed to children under 18.
We do not knowingly solicit personal information from children under 18 or permit them to register as independent account holders.
If we become aware that we have collected personal information from a child contrary to applicable law, we will take appropriate steps to delete it.
Parents or guardians who believe a child has provided information to Postuu may contact us at [email protected].
23. Automated Processing
Postuu uses automated systems to carry out user-selected scheduling, publishing, subscription, security, and account management functions.
For example, a scheduled publishing task may automatically transmit content to a connected platform at the time selected by the user.
We may also use automated technical checks to identify errors, suspicious activity, or unauthorized access.
These functions are intended to operate the service rather than make decisions about individuals with legal or similarly significant effects.
If we introduce automated decision-making that materially affects individuals' rights or interests, we will provide any additional disclosures and safeguards required by applicable law.
24. Marketing Communications
We may send essential service communications about your account, subscriptions, security, publishing failures, or changes to Postuu.
These operational messages may be necessary to provide the service.
If we offer optional marketing emails, we will comply with applicable consent and unsubscribe requirements.
You may unsubscribe from optional marketing communications using the unsubscribe mechanism provided or by contacting us.
Unsubscribing from marketing does not prevent essential service or security notifications.
25. Third-Party Websites and Services
Postuu may contain links to third-party websites, payment processors, and social media platforms.
Those services operate under their own terms and privacy policies.
We encourage you to review the policies of any third-party service you connect to Postuu.
Relevant examples include:
Google: https://policies.google.com/privacy
YouTube: https://www.youtube.com/t/terms
TikTok: https://www.tiktok.com/legal/page/row/privacy-policy/en
Meta: https://www.facebook.com/privacy/policy/
Stripe: https://stripe.com/privacy
We are not responsible for the independent privacy practices of third-party platforms.
26. Changes to This Privacy Policy
We may update this Privacy Policy when:
We introduce new features or integrations.
Our data handling practices change.
We change service providers.
Applicable legal requirements change.
We improve the clarity of our disclosures.
The current version will be published at:
We will update the "Last updated" date when changes are made.
Where required by law, we will provide additional notice or obtain consent before implementing material changes.
Your continued use of Postuu after an updated policy takes effect does not replace any consent that applicable law requires us to obtain.
27. Contact Us
If you have questions about this Privacy Policy or want to exercise your privacy rights, request account deletion, revoke an integration, or make a complaint, please contact:
Postuu
Operated by: Justin Jun Jie Seeto
ABN: 25 319 037 030
Business location: New South Wales 2114, Australia
Email: [email protected]
Website: https://postuu.com
Privacy Policy URL: https://postuu.com/privacy
We are committed to handling personal information responsibly and providing clear information about how Postuu works with your data.
To disconnect your Facebook or Instagram accounts and request deletion of your data, see our Data Deletion page.