Version 17 September 2026

Privacy policy

Operator and scope

OneSand Postiz is operated by 一沙地产科技. This policy covers people using our website, contacting support, and accessing workspaces arranged by our team, including independent operators and creators. Public self-service registration is currently closed. Contact: wendudu2025@gmail.com.

Information processed

The workspace processes account email, password hashes, workspace membership, authentication cookies, authorized social account identifiers and profiles, access and refresh tokens, uploaded media, captions, publishing instructions, publication results, available analytics and operational logs. Registration and security records may include IP address and browser information. We use your email for account activation, password recovery and configured service notifications.

Purpose and platform permissions

Information is used to connect accounts, carry out confirmed publishing actions, display results and available statistics, provide support and protect the service. The TikTok integration requests access to profile information, account statistics, public videos, video uploads to the App inbox and direct publishing. These permissions do not grant private-message access.

We do not sell platform data or use it for advertising targeting or training general-purpose AI models. Future AI and messaging features require their own actual implementation and appropriate disclosure.

Storage and sharing

The self-hosted workspace is on a Hong Kong server. Selected media, metadata and requests are sent to the social platform chosen by the user. Relevant providers include TikTok, Meta, Google/YouTube and X. Tencent Cloud provides the Hong Kong hosting and transactional email service. Email delivery involves the recipient address, message content and delivery information, including activation or password-reset links where applicable. Our Gmail support mailbox is provided by Google. HTTPS protects public connections. Uploaded media may be accessible through a direct URL so social platforms can retrieve it; do not upload confidential material or assume a private publishing setting makes the source file private.

Access and support handling

Each operator is assigned a separate workspace. Workspace membership controls access to account connections and content. Service administrators may access information needed for operation and support. Support requests may require verification of account ownership; do not send passwords or complete access links.

Disconnection, revocation and deletion

You may revoke access through the social platform's connected-app settings and contact us for workspace data access, correction or deletion. Removing a workspace connection, revoking a platform token and deleting a published social post are distinct actions.

Requests are handled manually after verifying ownership. Account and service records are retained while needed to operate the workspace and address support, security or applicable retention obligations. Removing an item in the interface can hide its record without erasing the underlying file or stored token. Contact us for deletion of retained data and revoke authorization with the social platform. Automated complete erasure and a uniform backup-expiration period are not currently implemented; we will explain the scope and any remaining retention when handling a request.

Changes

Changes will be published on this page with an updated version date. Contact us at the address above with questions about processing, access, correction or deletion.