Privacy Policy
Last updated: 15 April 2026
1. Who we are
Remark Posting is operated by Remark Creative Limited, a company registered in New Zealand. Our website is posting.remark.nz. You can contact us at privacy@remark.nz.
2. What this policy covers
Remark Posting is a social media scheduling tool. This policy explains what personal information we collect when you sign up, what we do with it, how we store it, and your rights over it.
3. Information we collect
When you use Remark Posting we collect:
- Account details — your email address, name, password (hashed), and workspace name.
- Connected social accounts — when you connect TikTok, Instagram, Facebook, or YouTube, we receive and store: your platform user ID, display name, profile picture, and OAuth access & refresh tokens. Tokens are encrypted with AES-256 at rest.
- Your content — posts, captions, media files, hashtags, and schedules you create inside Remark Posting.
- Usage data — IP address, browser type, pages visited, and actions taken, for security and product improvement.
4. How we use your information
- To publish the posts you schedule to the social accounts you authorize.
- To display analytics returned by the platforms for content you own.
- To send account-related email (sign-up confirmation, password reset, publishing failures).
- To maintain security, detect abuse, and improve the product.
We do not sell your personal information or social platform data. We do not use your data for advertising or profiling.
5. TikTok data — specific disclosure
When you connect a TikTok account, Remark Posting uses the TikTok Login Kit and Content Posting API. We request only the scopes necessary to publish on your behalf:
user.info.basic— your TikTok username and avatar, to display in the app.video.upload— to upload video files you provide.video.publish— to publish videos you have explicitly scheduled.
TikTok user data is stored only for the purpose of providing the scheduling service. We do not share TikTok data with third parties, do not use it for advertising, and do not transfer it outside the providers listed in section 7. When you disconnect your TikTok account or delete your Remark Posting account, all associated TikTok tokens and data are deleted immediately.
6. Meta (Facebook / Instagram) and YouTube data
The same principles apply. We request only the minimum OAuth scopes required to publish and read post performance, store tokens encrypted, and use the data solely to provide the service you signed up for.
7. Where your data is stored
- Application database & authentication: Supabase (AWS us-east-1, USA).
- Media files (images / video): Cloudflare R2 (global edge network).
- Hosting: Vercel / Cloudflare (global edge).
All traffic is encrypted in transit using TLS 1.2+. OAuth tokens are encrypted at rest with AES-256-GCM.
8. Data retention
We keep your data for as long as your account is active. When you delete your account we delete all personal data within 30 days, except where retention is required by law. Disconnecting a social account immediately deletes the associated tokens.
9. Your rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate information.
- Request deletion of your account and data.
- Export your data in a portable format.
- Withdraw consent for any connected social account at any time.
You can exercise any of these rights from workspace settings or by emailing privacy@remark.nz. We respond within 30 days.
10. Cookies
We use only strictly necessary cookies for authentication and session management. We do not use tracking or advertising cookies.
11. Children
Remark Posting is not intended for anyone under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal data, email us and we will delete it.
12. Changes to this policy
We will post any changes to this page and update the “Last updated” date. Material changes will also be sent to you by email.
13. Contact
Remark Creative Limited · Central Otago, New Zealand
Email: privacy@remark.nz