1. Introduction
This Privacy Policy explains how information is processed when you use this Service.
The Service connects an authorised TikTok account to TikTok's official API and supports video publication through Direct Post.
TikTok authentication tokens are stored in a database to maintain authorised API access.
2. Information Processed
Depending on the permissions granted and features used, the Service may process the following information.
TikTok Account Information
Information received through TikTok's API may include account identifiers, display names, available profile information, granted permissions, and publication status.
The information available depends on the API scopes and endpoints used.
Authentication Tokens
The Service stores TikTok authentication tokens in a database to maintain the authorised connection.
These may include access tokens and refresh tokens issued through TikTok's authorisation process.
Tokens are used to authenticate authorised API requests and maintain access where supported.
Authentication tokens must not be exposed in public-facing pages, client-side code, public repositories, or application logs.
Video and Publishing Information
The Service may process video files or URLs, captions, descriptions, hashtags, publishing settings, publication identifiers, and technical responses returned by TikTok.
This information is processed to perform the publishing actions requested.
Technical Information
Hosting and infrastructure providers may process technical information necessary to operate and secure the Service, such as server logs, request metadata, and diagnostic information.
3. How Information Is Used
Information may be processed to:
- Connect an authorised TikTok account.
- Authenticate API requests.
- Store and use authorised authentication tokens.
- Submit videos for publication.
- Retrieve available publication-status information.
- Troubleshoot errors and maintain the Service.
- Protect against misuse.
- Comply with applicable legal obligations.
Personal information is not sold.
4. Database Storage and Security
TikTok authentication tokens are stored in a database to support authorised API functionality.
Database access should be restricted to authorised systems and personnel where applicable.
Appropriate safeguards should be implemented to protect stored information, including secure secret management, access restrictions, and encryption where supported.
No claim of encryption at rest should be made unless it has been verified.
No method of electronic storage or transmission can guarantee absolute security.
5. Legal Basis for Processing
Where UK data protection law applies, information must be processed under an appropriate lawful basis.
Depending on the circumstances, this may include performance of a contract, legitimate interests, consent where required, or compliance with a legal obligation.
The applicable lawful basis depends on the actual processing activities.
6. TikTok and Third-Party Providers
The Service communicates with TikTok to authenticate accounts, submit videos, and retrieve available publishing information.
TikTok processes information under its own applicable terms and privacy policy.
Hosting and database providers may also process information as necessary to operate the Service.
7. Data Retention
Information is retained only for as long as reasonably necessary for the purposes described in this policy, subject to applicable legal requirements.
Authentication tokens, account identifiers, publishing records, video files, logs, and backups may have different retention periods.
When an account is disconnected or authorisation is revoked, stored credentials should be invalidated or deleted as appropriate.
Information may remain where necessary for legitimate operational or legal purposes.
The actual retention periods and deletion procedures must reflect the implemented system.
8. Data Sharing
Information may be transmitted to TikTok when necessary to authenticate accounts, submit videos, or retrieve publishing information.
Infrastructure providers may process information as necessary to host and operate the Service.
Information may also be disclosed where legally required.
9. International Transfers
TikTok and infrastructure providers may process information in countries outside the United Kingdom.
Where applicable law requires safeguards for international transfers, appropriate safeguards must be implemented.
10. Privacy Rights
Depending on applicable law, individuals may have the right to access, correct, delete, or restrict the processing of their personal information, object to certain processing, request data portability, and withdraw consent where consent is the applicable legal basis.
Requests should be handled in accordance with applicable legal requirements.
Access to the Service may also be revoked through the relevant TikTok account settings where supported.
Revoking access does not automatically delete information already stored by the Service.
11. Cookies and Tracking
Any cookies, analytics, or tracking technologies used by the website must be accurately disclosed.
Where legally required, consent must be obtained before using non-essential cookies or tracking technologies.
12. Children's Privacy
The Service is not intended for individuals who are prohibited from using it under applicable law or relevant platform age requirements.
Personal information must not knowingly be collected from children in violation of applicable law.
13. Changes to This Policy
This Privacy Policy may be updated to reflect changes to the Service, its data practices, or applicable legal requirements.
The current version will be published at this Privacy Policy page.