Privacy

I am Henry Pitman, a web developer based in the UK. I am the data controller for the personal data described in this policy. For any privacy question, or to ask me to correct or delete your data, email henry@henrypitman.com.

This policy covers the website henrypitman.com (including www.henrypitman.com) and my social-media scheduler at postiz.henrypitman.com. The scheduler is a private, self-hosted instance of the open-source Postiz application. It has no public sign-up and is used only to plan and publish content for social-media accounts that I own or manage.

Contact form: if you use the contact form, I receive the name, email address and message you enter, plus any optional enquiry details you choose to add. The message is emailed to me through Resend, an email delivery service, and is not stored in a database on the site. I keep the email as ordinary business correspondence for as long as I need it to reply to you and to keep a record of our conversation.

Spam protection: the contact form may use Cloudflare Turnstile to check that a submission comes from a person. When it does, Cloudflare processes technical details about your browser and network connection to make that check.

Hosting and logs: the site is hosted on Vercel, which keeps short-lived request logs (such as IP address, requested page, browser type and time of the request) in order to serve the site and protect it from abuse.

Analytics: the site uses Vercel Web Analytics and Vercel Speed Insights to count page views and measure page performance. These are cookieless and report aggregated figures only; I do not use them to identify individual visitors. The site does not use advertising trackers.

When I connect a social-media account to the scheduler at postiz.henrypitman.com, the platform (for example TikTok, LinkedIn, YouTube, Google Business Profile or X) asks me to sign in and approve the connection. The scheduler then stores the access and refresh tokens the platform issues, together with the account's identifier, display name, username and profile picture, so that it can show the account in the dashboard and publish on its behalf.

The scheduler also stores the posts, captions and media files that I write and upload for scheduling, the publishing settings I choose for each post, and the post and account statistics (such as view, like, comment, share and follower counts) that the platforms return, so that they can be shown in the scheduler's analytics view.

This data is stored on a server that I control. It is used only to publish the content I schedule and to show me the results. I do not sell it, share it with third parties, or use it for advertising. The only party each piece of data is sent to is the platform that the post is being published to.

The scheduler integrates with TikTok through TikTok Login Kit and the TikTok Content Posting API. TikTok data is used only to sign in to the connected TikTok account, to show that account's display name, profile picture and public statistics inside the scheduler, and to upload and publish the videos and photos that I schedule, with the privacy level, interaction settings and disclosure options I select for each post.

TikTok data held by the scheduler is deleted when the TikTok account is disconnected from it. You can also revoke the scheduler's access at any time from the TikTok app: Settings and privacy, then Security and permissions, then Manage app permissions.

Tokens and account data for a connected social-media account are kept until that account is disconnected from the scheduler or the scheduler itself is deleted; disconnecting removes them. Scheduled posts and their media are kept for as long as they are needed for scheduling and analytics, and are removed when they are deleted in the scheduler.

Contact-form emails are kept as ordinary correspondence. If you would like me to delete a message you sent, or any other personal data I hold about you, email henry@henrypitman.com and I will do so unless I have a legal reason to keep it.

Under UK data protection law you have the right to ask what personal data I hold about you, to have it corrected or deleted, to object to or restrict how it is used, and to receive a copy of it. To exercise any of these rights, email henry@henrypitman.com. If you are unhappy with how I have handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

If I change this policy, I will update the version and effective date shown at the top of this page.