Last updated: November 12, 2026
This Privacy Policy explains how OOHA Studio ("OOHA", "we", "us", or "our") handles information when the account owner uses OOHA Studio's tools to prepare, schedule, publish, and manage content on connected social media accounts, including Facebook Pages and Instagram professional accounts.
Who this service is for: OOHA Studio is currently an owner-operated publishing workflow. It is not a public social network, and this policy does not describe a service for collecting information from viewers of published posts.
1. Information we process
Depending on enabled features and approved permissions, OOHA Studio may process:
- Social account and Page identifiers, account names, usernames, profile details, and connection status returned by Meta.
- Authentication tokens and authorization information needed to keep an authorized account connected.
- Videos, images, captions, thumbnails, scheduling details, and publishing status supplied by the account owner.
- Page, account, post, or engagement information made available through permissions authorized by the account owner, where those features are used.
- Basic technical and diagnostic information needed to operate, secure, and troubleshoot the publishing workflow.
We do not intentionally request or collect Facebook or Instagram passwords. Authentication is handled through Meta's authorization process.
2. How we use information
Information is used as needed to connect selected social accounts; prepare, schedule, publish, and manage the owner's content; display publishing results and authorized account information; maintain security and troubleshoot errors; and meet applicable legal obligations.
We do not sell personal information or use connected social account information for targeted advertising.
3. Meta platforms
When the account owner connects Facebook or Instagram, Meta processes information under Meta's own terms and privacy policies. OOHA receives information made available through the permissions the account owner approves and uses it for the purposes described here. The account owner can remove the app's access through Meta account settings.
See the Meta Privacy Policy.
4. Hosting, storage, and service providers
The publishing application is operated in an owner-managed environment using Postiz. Media intended for publishing may be temporarily placed in Cloudflare R2 object storage so Meta's systems can retrieve the media from a public media URL during publishing.
The configured R2 lifecycle rule is intended to delete uploaded media objects three days after upload. Public media URLs may be accessible to anyone who obtains the URL while the object exists. The account owner should upload only content intended for publication. The three-day lifecycle is a storage cleanup setting; it does not delete copies already downloaded by Meta or content already published on a social platform.
Cloudflare may process technical information to provide its services. See Cloudflare's Privacy Policy.
5. Sharing
Information is shared only as needed to provide the requested workflow, including with Meta when content is submitted for publication and with infrastructure providers such as Cloudflare when their services are used. We may also disclose information where required by law or to protect service security. We do not sell or rent personal information.
6. Retention
- Temporary media in R2: configured for automatic deletion three days after upload. Actual deletion timing may depend on provider lifecycle processing.
- Connected account information and authorization tokens: retained while the account remains connected or as needed to operate the workflow. They should be deleted when the account is disconnected and associated data is removed from the application.
- Application records and diagnostics: retained in the owner-managed Postiz environment as needed for operation, security, troubleshooting, or legal requirements.
- Published content: content already published to Facebook or Instagram is subject to the respective platform's retention and deletion controls.
7. Your choices and deletion requests
To request deletion of information held in the OOHA Studio environment, email ngr3444@gmail.com from the email address associated with the request. Include the social platform and account username. Do not send passwords, access tokens, or secret keys.
You can also revoke the app's access in your Meta settings. See our Data Deletion Instructions. We will review requests and delete information we control unless retention is required for security, legal, or legitimate operational reasons. Deleting OOHA-held information does not automatically delete content or information retained by Meta or other third parties.
8. Security
Reasonable technical and organizational measures are used to protect information in the owner-managed environment. No internet transmission or storage system can be guaranteed completely secure. The account owner is responsible for protecting their devices, credentials, and access to the publishing environment.
9. Children's privacy
OOHA Studio's publishing workflow is not directed to children, and we do not knowingly collect personal information from children through this service.
10. Changes to this policy
We may update this policy when the service, integrations, or legal requirements change. The revised version will be posted at this URL with an updated revision date.
11. Contact
For privacy questions or data deletion requests, contact:
OOHA Studio
Email: ngr3444@gmail.com