Privacy policy

Last updated 10 October 2026

Cititech Social is a client-facing social media scheduling service run by Cititech using the open-source TryPost software. Clients sign in to their own workspaces to create, review and publish content to accounts they are authorised to manage. Connections include Facebook Pages, Instagram and TikTok; availability depends on each network’s permissions and approval, and TikTok is currently limited to sandbox testing. This policy explains what personal data the service holds and what we do with it.

Who is responsible

Cititech runs the service and is the data controller. Contact: [email protected].

What we hold

• Your account details: name, email address and the workspaces you belong to.
• The permission and access tokens you grant when you connect a social account, so that we can publish on your behalf. For TikTok this includes the connected account identifier, display name and avatar, and publishing access. You can withdraw access by disconnecting the account or revoking the app in the social network.
• The posts and media you create or upload.
• The performance figures that supported networks report for your posts, such as reach and engagement. TikTok analytics are not currently enabled.
• Standard server logs, kept only to run and secure the service.

Why we use it

Only to publish posts on your behalf, to show you how they performed, and to keep the service secure and working. Our lawful basis is performance of the contract under which Cititech provides the service to you, and your consent when you connect a channel and grant a network’s permissions. You can withdraw that consent at any time by disconnecting the channel.

What we do not do

• We do not sell your data.
• We do not show advertising or build advertising profiles.
• We do not use tracking or analytics cookies. We use necessary cookies for sign-in and request security.

Who else sees it

When you choose to publish to a connected channel, the selected posts, media and related settings go to that network, including Meta or TikTok, so it can publish them. The network handles data under its own terms and privacy policy. If you use the optional AI assistant, the text and instructions submitted to that feature are processed by the configured AI provider, Anthropic, through Cititech’s proxy. Avoid entering sensitive personal data in AI prompts. Workspace members with the appropriate role can see shared workspace content. We also disclose data when the law requires it.

Where it is kept

The service is hosted in the United Kingdom on Cititech’s own infrastructure.

How long we keep it

• Published post history is deleted after 730 days.
• Media that was uploaded but never used in a post is deleted after 24 hours.
• Channel tokens are deleted when the channel is disconnected or its owning service account is deleted. Deleting a member profile leaves shared workspace channels in place.
• Account details are kept until your account is deleted. See how to delete your data.

Your rights

Under UK GDPR you can ask us for a copy of your data, to correct it, to delete it, or to receive it in a portable format. Email [email protected] and we will reply within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Children

Cititech Social is not for anyone under 18, and we do not knowingly hold data about children.

Changes

If we change this policy we will update this page and its date.

See also the terms of service and data deletion instructions.