Withers Social Studio Privacy Policy
Withers XYZ Pty Ltd · Updated 15 September 2026
Withers Social Studio is a private social media management application operated by Withers XYZ Pty Ltd at https://post.withers.co. It uses self-hosted Brightbean Studio software to prepare, schedule and publish content to social accounts that we own or are authorised to manage.
This policy covers Withers Social Studio. For questions, access or correction requests, or to request deletion of your information, email josh@withers.co.
Information the application handles
Depending on the accounts and features you connect, the application handles:
- Your login details, name, email address, organisation membership and workspace settings.
- Connected social account identifiers, display names, handles, profile images and authorisation permissions.
- Access and refresh tokens, or account-specific API credentials, that let the application use the permissions you grant. Social access tokens are encrypted in the application database.
- Drafts, captions, images, videos, articles, scheduled publishing times, published post identifiers and publishing results.
- Account and post performance information. When inbox features are enabled, this can also include comments, replies and messages associated with connected accounts.
- Technical information needed to operate and troubleshoot the service, such as requests, errors and connection status.
You sign in to each social network through its own authorisation process where supported. You can review the permissions requested before allowing access.
How information is used
We use this information to authenticate users, manage authorised workspaces, connect accounts, publish and schedule content, show performance information, manage supported social interactions, and maintain the application.
Google integrations may access authorised YouTube channel and video information, upload videos, retrieve YouTube Analytics reports, and access or manage authorised Google Business Profile information and posts. Access is limited to the permissions granted and the features used.
Withers Social Studio’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is not sold, used for targeted advertising, or used to train general-purpose AI models.
Sharing and storage
Content and requests are sent to the social platforms you select to carry out your instructions. Each platform handles the information it receives under its own policies. Published content may be visible to the audience selected on that platform.
Railway hosts the application, its database and uploaded media. The current application deployment is in the United States. Service providers may process information outside your country. Access to the application’s data is restricted to authorised users and service operators who need it to operate or support the service.
Cookies
Withers Social Studio uses cookies for login sessions and protection against forged requests. These are needed to keep you signed in and operate the application securely. Social platforms may use their own cookies during their sign-in and authorisation flows.
Retention and your choices
The application stores account connections and content until they are disconnected or deleted through its controls or by the operator. You can disconnect a social account and delete content through the available application controls, or contact josh@withers.co to request access, correction or deletion.
Disconnecting a social account removes its connection record and stored authorisation tokens from the application. It may also remove associated application records. It does not necessarily revoke every permission on the social platform, and it does not automatically delete content already published there. To revoke a platform’s authorisation, also remove Withers Social Studio in that platform’s app or business integration settings.
You can revoke Google access through your Google Account’s third-party connections. For information about Google’s handling of data, see the Google Privacy Policy.
Some information may need to remain temporarily in backups, security records or records required by law. Contact us for the retention arrangements that apply to your request.
Updates and contact
We will update this page when our handling of information changes. If a change requires new permissions or consent, we will request it before using information in the new way.
Privacy contact: josh@withers.co.