Jaison Publisher OS Privacy Notice
Effective 22 October 2026 · Version 1.0
1. Controller and contact
The controller of personal data relating to your account and use of Jaison Publisher OS is REVOLTO GROUP spółka z ograniczoną odpowiedzialnością, ul. Wita Stwosza 48 lok. 105, 02-661 Warsaw, Poland, KRS 0001074425, NIP 7123466389, REGON 527156234. For privacy matters, contact [email protected]. If a Data Protection Officer is appointed, their contact details will be published here.
2. Data we process
- account and login details and correspondence about access;
- the name, identifier and basic details of a connected channel;
- OAuth tokens needed to maintain a channel connection;
- text, files, dates and status of drafts or actions requested in Publisher;
- basic technical request data and security logs;
- if you use an AI generation feature, the prompt and materials needed to produce the result.
We do not ask for your TikTok or other social media password. Sign-in takes place on the relevant platform.
3. Purposes and legal bases
We use data to create and operate your account and the features you select (performance of a contract or steps before entering one); to maintain security and diagnose errors (the controller’s legitimate interests); to meet legal obligations; and, where required, on the basis of authorization you grant while connecting a social account. You can revoke OAuth authorization in the relevant platform’s settings.
4. Recipients and infrastructure
Data is shared only with providers needed for selected features: Oracle Cloud Infrastructure (Publisher server and storage, deployed in the Amsterdam region), Cloudflare (DNS, secure connection and traffic protection), the social platform you select (for example, TikTok), and OpenRouter only when you use an available AI feature. Postiz is software operated on the Provider’s infrastructure; using Postiz does not by itself send data to its developers. Providers may act as processors or independent controllers according to their role and terms.
Infrastructure providers may process limited technical data outside the European Economic Area. Where this occurs, we use transfer mechanisms required by applicable law and provider agreements. Social platforms also process data under their own terms.
5. Cookies and security
Publisher uses technical cookies or similar storage needed for sign-in, session continuity and security. The service does not use them for behavioral advertising. Access to data and tokens is limited to operating and supporting the service. Do not submit materials through Publisher unless you have the rights to them and are comfortable with processing through the integrations you select.
6. Retention and deletion
We retain account, connected-channel, draft and file data while you use the service. You can request deletion of your account, data and channel connections by emailing [email protected]. After verifying the request, we will delete data from the active environment without undue delay, normally within 30 days, except for data we must retain by law. Limited security logs are retained only as long as needed to protect and diagnose the service. Technical backups may remain until overwritten in the normal infrastructure cycle.
7. Your rights
You may request access to, correction, deletion or restriction of your data; object to processing; obtain a copy; and withdraw consent where processing is based on consent. Send requests to [email protected]. You may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO). The service does not make decisions producing legal effects solely by automated means.
8. Changes to this notice
If we materially change how personal data is processed, we will update this page and state the revision date.