Ostuu is a social publishing and scheduling service. This policy describes the information Ostuu collects when you use the website and application at ostuu.com, how that information is used, and the choices you have.
This is a description of current product behavior, not a certification or a guarantee. If you have questions, use the contact form.
Information we collect
Account information
Ostuu uses Clerk to create and authenticate accounts. Depending on how you sign up, Clerk may collect your email address, name, profile photo, and authentication details (such as a password or a sign-in method you choose). Ostuu stores a corresponding user profile with your Clerk user id and, when available, email, display name, and avatar URL so we can operate your workspace.
Social network connections
When you connect a social channel, Ostuu stores the information needed to identify that destination and to act on your behalf. That can include:
- Facebook Page IDs, names, and related profile images, plus the Meta user id of the person who connected the Page
- Instagram Professional account IDs, usernames, names, profile images, and the linked Facebook Page id/name
- LinkedIn profile identifiers (including member URNs when provided), names, and profile images
- Bluesky handles, DIDs, and profile images
- Similar identifiers, names, handles, and metadata for other channels you connect now or in the future
OAuth access tokens, refresh tokens, Page tokens, Bluesky app passwords, and other channel credentials are stored encrypted at rest. Ostuu uses those credentials only to perform actions you authorize in the product—such as connecting a channel, listing destinations you can publish to, scheduling, or publishing.
Content you create
Ostuu stores drafts, scheduled posts, published post records, captions, links, campaign and brand details, media you upload (including alt text and file metadata), short-link settings, and related publishing history. Media files are stored in private object storage and are served through Ostuu rather than as public files.
Workspace and technical data
We also store workspace membership and settings, API keys you create (the secret is stored as a hash, not in plaintext), usage and audit records generated by the product, and cookies or similar tokens needed to keep you signed in, complete OAuth flows, and remember in-app preferences such as brand selection.
If product analytics is enabled, Ostuu may send limited browser events (for example, that the app loaded, or a summarized client error) to our analytics provider. If you use Ostuu’s optional AI writing features, the current post text and available brand context are sent to the configured AI provider only when you explicitly trigger an action.
How we use information
Ostuu uses this information to:
- Authenticate you and operate your workspace
- Connect, list, and manage social channels you choose
- Create, schedule, and publish posts to those channels
- Store media, optimize images when that setting is on, and attach media to posts
- Run scheduling infrastructure, including delayed publish jobs
- Provide support, diagnose failures, and maintain security
- Operate optional features you use, such as short links or AI writing
Ostuu does not sell personal information.
OAuth tokens and channel credentials
Tokens and other credentials are used only to perform actions you authorize. They are encrypted before being stored in Ostuu’s database. You can disconnect a social channel in Ostuu, which deactivates that channel so Ostuu will no longer publish to it and will cancel pending scheduled jobs for it. Disconnecting does not by itself delete stored credentials or the underlying connected-account record; request account deletion if you want Ostuu to remove stored tokens and related application data. You can also revoke Ostuu’s access from the social network itself.
Service providers
Ostuu relies on other companies to run the service. Depending on which features you use, that can include:
- Clerk, for authentication and account management
- Vercel, for application hosting
- Neon, for PostgreSQL database hosting
- Vercel Blob, for media file storage
- Upstash QStash, to deliver delayed scheduling/publishing jobs
- The social networks you connect (including Facebook, Instagram, LinkedIn, and Bluesky)
- RSI.gl, if you use Ostuu’s short-link features
- OpenAI, if you use AI writing
- CauseWise, if product analytics is enabled
- Formlyx, to receive messages submitted through the public contact form
Those providers process information on Ostuu’s behalf or, for social networks, as independent platforms under their own terms and policies.
Retention and deletion
Ostuu keeps account, channel, content, and related records while your account is active so the product can function. You can disconnect channels as described above. To request deletion of your Ostuu account and associated stored data, follow the instructions on the Data deletion page. Ostuu may retain limited information when we are legally required to do so, or for a short period as needed to complete a deletion request and keep the service secure.
Ostuu does not currently offer an in-app control that automatically deletes an entire account and all stored application data.
Security
Ostuu uses HTTPS, authenticated application access, encrypted storage of channel credentials, hashed API-key secrets, and private media storage. These are reasonable practices for this application; they are not a promise that information cannot be accessed, lost, or misused.
International processing
Ostuu and the providers above may process information in the United States and in other countries. If you use Ostuu from outside those locations, your information may be transferred to and processed in countries that may have different data protection laws than your own.
Changes
We may update this policy as Ostuu changes. The “Last updated” date at the top of this page will change when we do. Continued use of Ostuu after an update means you are using the service under the revised policy.
Contact
Use the contact form.
Related: Terms of Service and Data deletion.