Yeetiz Privacy policy

Privacy policy

How Yeetiz processes personal data.

1. Data controller

Yeetiz is operated by Yeetiz, a sole trader (EI), SIREN 518 216 312, 173 rue de Courcelles, 75017 Paris, France. Full identity: Legal notice.

For any question about your data or this tool’s privacy practices, use the contact form.

2. Scope

Yeetiz is a social-media planning and publishing tool based on the open-source software Postiz and hosted by Yeetiz. It is used exclusively by Yeetiz to manage its own accounts. It is not open to public registration, and no third party has access to it.

This policy describes the data processed when a social-media account (“channel”) is connected to the tool.

It also covers the public website Yeetiz.com: data submitted via the contact form (name, email, message) is used only to reply to your request.

3. Data processed

  • OAuth access tokens (access token and, where applicable, refresh token) issued by the platform
  • Identifier, name, and profile picture of the connected account
  • Content of scheduled or published posts: text, images, videos, and publishing settings
  • Aggregated statistics returned by the platforms for those accounts and posts (views, impressions, reactions, follower counts)

The tool does not collect passwords, private messages, or any individual data about followers or people who interact with posts.

4. Data sources

Data comes from:

  • the official APIs of connected platforms (YouTube, LinkedIn, Instagram, Facebook, TikTok, X, and others), after explicit authorization by the account holder on each platform’s consent screen;
  • content entered in the tool;
  • for the website: information you submit through the contact form.

5. Purpose

Data is used only to connect accounts, draft, schedule, and publish content on those accounts, and to display statistics for those posts. For the website, contact data is used only to respond to inquiries.

It is not used for any other purpose: no profiling, advertising, resale, or training of artificial-intelligence models.

6. Legal basis

Processing is necessary to perform the service requested by the account holder when they connect the account (Article 6(1)(b) GDPR).

Technical security logs are based on the publisher’s legitimate interest in securing the tool (Article 6(1)(f) GDPR).

Website contact messages are processed on the basis of legitimate interest / pre-contractual steps (Article 6(1)(f) / 6(1)(b) GDPR).

7. Hosting and security

Data is hosted on a server located in France, with OVH SAS (2 rue Kellermann, 59100 Roubaix, France).

Access to the tool is protected by authentication and reserved to the publisher. Communications are encrypted (HTTPS).

8. Recipients

No data is sold, rented, or disclosed to third parties, or used for advertising purposes.

The only outbound flow is sending posts, at the account holder’s request, to the connected platforms. Once published, content is subject to those platforms’ privacy policies.

Website contact messages may be processed through the publisher’s email/SMTP provider, limited to delivering and receiving that correspondence.

9. Retention

  • Tokens, identifiers, and profile data: until the channel is disconnected or the account is deleted in the tool, then deleted within 30 days
  • Posts and media: until deleted in the tool or the channel is disconnected
  • Statistics: while the channel remains connected, refreshed from platform APIs
  • Backups: overwritten within 30 days
  • Technical logs: retained for 30 days
  • Website contact messages: retained for up to 12 months from the last exchange, unless a longer period is required by law

10. Cookies

The tool uses only an authentication cookie strictly necessary to maintain the session. It does not use advertising or audience-measurement cookies, and does not allow any third party to place or read cookies or trackers on your device.

The public website Yeetiz.com does not use any cookies or trackers subject to consent.

11. Use of YouTube API Services

Yeetiz uses YouTube API Services to publish videos to connected channels and to retrieve their statistics.

By connecting a YouTube channel, you agree to the YouTube Terms of Service.

Data is also subject to the Google Privacy Policy.

In addition to the deletion process below, you may revoke the tool’s access to your data at any time from your Google Account security page: https://security.google.com/settings/security/permissions.

12. Data from Facebook and Instagram (Meta)

Yeetiz uses Meta APIs (Facebook Graph API and Instagram API) to publish content to connected Facebook Pages and professional Instagram accounts, and to retrieve their statistics.

Data obtained via Meta: identifier, name, and profile picture of the Page and Instagram account; access tokens; aggregated statistics for posts and accounts.

Permissions requested: pages_show_list, pages_manage_posts, pages_read_engagement, instagram_basic, instagram_content_publish (aligned with the consent screen). They are used only for the purposes described in section 5.

Meta-sourced data is not sold, not transferred to data brokers, and not used for advertising, profiling, or surveillance. It is deleted when the channel is disconnected, upon request (see “Data deletion”), or if the tool ceases to be operated.

You may revoke access at any time:

  • from Facebook: Settings > Business integrations;
  • from Instagram: Settings > Apps and websites.

13. Your rights

You have the right to access, rectify, erase, restrict, object to, and port your data. To exercise these rights, use the contact form. You will receive a response within one month.

You may also withdraw the tool’s access from each platform’s “connected apps” settings.

If you disagree with how your data is handled, you may lodge a complaint with the CNIL (www.cnil.fr).

14. Data deletion

To delete your data:

  1. disconnect the channel in the tool; or
  2. use the contact form with the subject “Data deletion”, specifying the platform and the account name concerned.

Deletion is carried out and confirmed within 7 days, and at the latest within the one-month period provided by Article 12 GDPR. You may also use the data deletion page.

15. Changes

Any change to this policy is published on this page, with its updated date.