Vojta Social privacy notice

Last updated: 23 October 2026

Operator and purpose

Vojta Social, available at social.wewerky.cloud, is operated by Vojtěch Biberle, contact vojta@biberle.cz.

This is a self-hosted instance of the open-source Postiz application for preparing, scheduling and publishing content on my own professional social accounts. Public registration is disabled. The application is not provided to clients or other users. This notice covers this application and its social network connections.

Data processed

Depending on the connected network and permissions granted, the application may process:

  • the identifier of a connected account or page, name, username, profile picture and other basic profile information made available by the network;
  • authorization and refresh tokens allowing the application to work with that account;
  • draft, scheduled and published posts, including text, images, videos, links and publication times;
  • published post identifiers, publication status and available statistics or interactions provided by the platform;
  • local administrator account information and technical data needed to operate and secure the application, such as IP address, request time and path, browser type and error logs.

Social accounts are connected through the network's own authorization page. The application does not receive the password for that social account. Permissions are shown during authorization; granting publishing permission does not itself instruct the application to publish a particular post.

Purposes and legal basis

I use this data to manage my own professional accounts, authorize connections, prepare and publish content, display publishing results and secure the application. Posts and media may contain other people's personal data; their use requires an appropriate legal basis.

Where other people's personal data is involved, processing necessary for my own professional communication and secure operation relies on legitimate interests under Article 6(1)(f) GDPR. Any separate purpose requiring consent or another legal basis must be assessed separately. You may object to processing based on legitimate interests.

I do not sell personal data or use it for targeted advertising. The application is not used for automated decisions about people that produce legal or similarly significant effects.

Recipients and international transfers

The application database and uploaded media are stored on my own infrastructure. Cloudflare provides public access and security and may process network identifiers, technical information and content passing through the service. HTTPS does not prevent the proxy provider from processing that content.

During authorization and account operations, the application communicates with the relevant social network, such as LinkedIn or X. Content submitted for publication is processed by that network and shared according to the post and account settings. These networks also process data under their own terms.

Cloudflare and social networks may process data outside the European Economic Area. Their transfer rules and safeguards are described in Cloudflare's privacy policy, Cloudflare's customer data processing addendum, LinkedIn's privacy policy and X's privacy policy.

External AI services and a ChatGPT connection are not part of the currently operational connection. If I enable them later, this notice must first be updated to reflect the actual data flows.

Retention and deletion

Profile information and tokens are retained only while needed for an active account connection. Drafts, media and publication history are retained while needed for my own professional communication and management of its history; unnecessary data is removed. Technical logs rotate according to configured size limits rather than a fixed number of days.

Access can also be revoked in the connected-app settings of the relevant social network. Disconnecting an account or revoking access does not necessarily physically delete all previously stored data. You can request deletion at vojta@biberle.cz. When the processing purpose ends, I remove related data unless continued retention is required by law or necessary for legal claims.

Any backup copies form part of whole-server backups and are not used for routine access. Backups are scheduled weekly; retention rules keep the last four backups and three monthly backups. Deletion from the live application therefore does not mean immediate deletion from every backup copy. Restoring a backup must respect previously completed deletion requests. Deleting local data does not delete an already published post or copies retained by the social network itself; those must be handled separately.

Security and cookies

The application requires authentication and further public registration is disabled. Public connections use HTTPS. Credentials are restricted to the operational infrastructure and application administrator. The application uses cookies or similar storage for authentication and authorization flows. Social networks and Cloudflare may use their own technical and security mechanisms under their respective policies.

Your rights and contact

Subject to the GDPR's conditions, you can request access, correction, erasure or restriction, object to processing and exercise data portability where applicable. If processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. Contact vojta@biberle.cz; I may need to verify your identity to handle a request securely.

You can also complain to the Czech Office for Personal Data Protection or another competent supervisory authority.