PostivaOperator sign in

FAQ

Questions people actually ask.

If something you need is missing here, write to info@thecodevolt.com and it will be answered and probably added to this page.

The product

What is Postiva?
A self hosted publishing cockpit. You upload media, plan posts on a calendar, and a background worker publishes them to Instagram, TikTok and Threads through the official platform APIs at the scheduled minute.
Is it a bot?
No. Postiva does not browse, scrape, like, follow or send messages. It calls documented publishing endpoints with content the operator scheduled, for accounts the operator owns and authorised. The only comment it ever writes is an optional first comment the operator typed in advance, posted once on the operator's own post right after it goes live.
Can I sign up on this website?
There is no public sign up. Each installation belongs to one operator and their own profiles, which is why the panel behind the sign in screen has no registration flow. If you want an installation of your own, get in touch.
Why is the panel in Turkish while this site is in English?
The operator interface is built for a Turkish speaking operator. These public pages are in English so anyone reviewing the integration, or considering their own installation, can read them.

Platforms

Is Postiva affiliated with TikTok, Meta, Instagram or Threads?
No. Postiva is an independent tool built by TheCodeVolt. It is not affiliated with, endorsed by or sponsored by any of those companies, and all trademarks belong to their respective owners.
Which permissions does it request?
TikTok: user.info.basic, video.upload and video.publish. Instagram: instagram_business_basic, instagram_business_content_publish, and instagram_business_manage_comments (used only to post the operator's optional first comment on their own post). Threads: threads_basic and threads_content_publish. Nothing beyond what publishing requires.
Will it post to TikTok without me seeing it first?
Not unless you turn that on. TikTok accounts start in draft mode: the video is uploaded to your own TikTok inbox and a person taps publish. Direct posting is a switch the operator enables per account, and even then only content that was placed on the calendar is published.
What happens to the privacy setting of a direct post?
Before a direct post, Postiva asks the Creator Info endpoint which privacy levels the account offers and uses one of those. It does not assume a setting the account has not made available.

Data

Where is my data stored?
On the server running the installation. There is no Postiva cloud and no shared database. This instance runs on a virtual server in Germany operated by TheCodeVolt.
How are tokens protected?
Access and refresh tokens are encrypted with AES-256-GCM before they are written to the database, and the encryption key lives in the server environment, not in the database.
How do I revoke access?
From the platform's own settings at any time: in TikTok under security and login, in Instagram under apps and websites. Revoking there immediately stops all publishing for that account.
How do I request deletion?
Disconnecting an account in the panel deletes its tokens and record. For a formal request, including a Meta originated deletion callback with a confirmation code you can look up, use the data deletion page. Anything else can be requested by email and is handled within 30 days.