Postwik

Privacy policy

Postwik is run by Brass Lantern Studios Ltd, a company registered in England and Wales (company number 17208101). Our registered office is 71-75 Shelton Street, Covent Garden, London WC2H 9JQ.

In this policy "we" and "us" means Brass Lantern Studios Ltd. "You" means anyone who uses Postwik.

Last updated: 9 November 2026.

If you have a question about your data, email privacy@postwik.com.

What Postwik does

Postwik lets you plan social media posts and publish them at the times you choose. You connect your own social media accounts (TikTok, Instagram, Facebook and LinkedIn), write or upload a post, pick a time, and we publish it to the accounts you chose at that time.

We only publish what you have written and scheduled yourself. We never post, like, follow, comment or message on your behalf in any other way. The one exception is a "first comment": if you write one, we add it under your own post straight after it goes out.

What we collect and why

Your Postwik account

What Why
Your email address and name To sign you in and to contact you about your account.
If you sign in with Google: your Google account ID, name, email and profile picture To sign you in. We don't get access to anything else in your Google account.
Your brands, time zones, posting slots and labels To run your schedule.
Your posts: captions, hashtags, first comments, chosen times and settings per platform To publish them.
Photos and videos you upload To publish them. They are stored privately and only made reachable by the platforms you post to, through links that are hard to guess.
API keys you create We keep only a scrambled (hashed) copy, so we can't see the key after we show it to you once.
Basic technical logs (time of request, IP address, browser type, errors) To keep the service secure and fix problems.

Your connected social media accounts

When you connect an account, the platform asks you to agree to what Postwik can do. We then receive and keep:

What Why
Access keys (tokens) the platform gives us So we can publish for you at the time you chose. They are encrypted (AES-256) before they are stored, and are never shown to you, to other users, or in our web pages.
The account's ID, name and username or handle To show you which account is connected, so you can spot a wrong one.
Facebook only: the Pages you chose to connect, and an ID Facebook gives us for you To publish to those Pages, and to act on a removal request from Facebook.
LinkedIn only: the Pages you are an admin of So you can choose to post as yourself or as one of your Pages.
TikTok only: your posting settings (who can see your posts, whether comments, duets and stitches are allowed, your maximum video length), checked live each time you write a TikTok post TikTok requires us to show you these before you post. We don't store them.
For each post we publish: the platform's post ID, the link to the post, whether it worked, and any error message To show you what posted and fix anything that didn't.
For each post we publish: views, likes, comments and shares To show you how each post did. We only collect these for posts made through Postwik.

We do not collect your followers' details, your private messages, the content of comments other people leave, or your passwords. We never see your social media passwords: you sign in on the platform's own page.

Payments

Postwik is free while in early access. When paid plans start, payments will be handled by Stripe. Stripe collects your card details; we never see or store them. We keep your Stripe customer ID and whether your subscription is active.

Our legal reasons for using your data

Under UK data protection law we must have a reason for each use:

  • To provide the service you signed up for (contract): your account, brands, posts, media, connected accounts and post results.
  • Our legitimate interests: keeping the service secure, preventing misuse, and fixing faults (logs). We keep this to what is needed.
  • Legal obligation: keeping payment records for tax once paid plans start.

We don't use your data for advertising, we don't sell it, and we don't use your posts, photos or videos to train AI models.

Who we share it with

We share data only with the companies that run parts of the service for us, and only what they need:

Company What they do Where the data is held
Google (Firebase and Google Cloud) Hosting, sign-in, file storage, scheduled jobs London (UK) and the Netherlands (EU)
Turso (ChiselStrike Inc.) Database Ireland (EU), on Amazon Web Services
Stripe (once paid plans start) Payments See Stripe's privacy policy

And, when you schedule a post, with the platform you are posting to: we send your post (text, photos or video, and settings) to TikTok, Instagram, Facebook or LinkedIn. What happens to it there is covered by that platform's own terms and privacy policy.

Some of these companies are based in the United States. Where your data is reachable from outside the UK, we rely on the protections they offer for UK data (the UK International Data Transfer Addendum, or the UK Extension to the EU-US Data Privacy Framework).

We will share data with the police or a regulator only if the law requires it.

How long we keep it

  • Access keys (tokens): erased the moment you disconnect an account in Postwik, or the moment the platform tells us you removed Postwik from your account.
  • Everything else in your account (brands, posts, media, connected account details, post results): kept while your account is open. When you delete your account, we delete it within 30 days.
  • Photos and videos you remove from your library: deleted within 30 days unless a scheduled post still uses them.
  • Technical logs: kept for up to 30 days.
  • Payment records: kept for 6 years, because UK tax law requires it.
  • Backups: deleted data can stay in encrypted backups for up to 30 more days, then it is gone.

Posts that have already been published stay on the platform. Deleting your Postwik account does not delete them from TikTok, Instagram, Facebook or LinkedIn. You can delete them there.

Deleting your data

You can:

  1. Disconnect one account: go to Accounts, then Disconnect. Its access keys are erased straight away.
  2. Remove Postwik on the platform itself. We get told and erase the access keys:
    • Facebook: Settings, then Business integrations.
    • Instagram: Settings, then Apps and websites.
    • TikTok: Settings and privacy, then Security, then Manage app permissions.
    • LinkedIn: Settings, then Data privacy, then Permitted services.
  3. Delete your whole account: go to Settings, then Account, then Delete my account. Or email privacy@postwik.com from the email address you sign in with.

Full instructions: https://postwik.com/data-deletion

Your rights

You can ask us to:

  • give you a copy of your data;
  • correct anything wrong;
  • delete your data;
  • give you your data in a format you can take elsewhere;
  • stop or limit how we use it, or object to a use based on our legitimate interests.

Email privacy@postwik.com. We'll reply within one month. It's free.

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office: ico.org.uk or 0303 123 1113. We'd like the chance to fix it first, so please contact us.

Cookies

We use one cookie, to keep you signed in. It's needed for the service to work, so we don't ask for consent. We don't use advertising or tracking cookies.

Age

Postwik is for businesses and people aged 18 or over. We don't knowingly collect data from children.

Security

Access keys are encrypted before they are stored. All traffic uses HTTPS. Only Brass Lantern Studios can reach the systems that hold your data, and we use separate keys for each part of the service. If we find a breach that puts your data at risk, we'll tell you and the ICO as the law requires.

Changes

If we change this policy in a way that matters, we'll email you before it takes effect. The date at the top shows the latest version.

Contact

Brass Lantern Studios Ltd, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. Email: privacy@postwik.com