Privacy Policy

1. Information We Collect

When you connect your TikTok account via TikTok Login Kit, we collect only the following basic profile information that you authorize:

• TikTok username (display name)
• Profile picture (avatar URL)
• OAuth access token (used to perform actions on your behalf)

⚠️ We do not collect your email address, phone number, TikTok password, or any other personal data beyond what is listed above.

2. How We Use Your Data

The information we collect is used solely for the following purposes:

• To authenticate you and display your TikTok profile within the application.
• To upload videos to your TikTok account on your behalf via the TikTok Content Posting API, only when you explicitly initiate the action.
• To maintain your session so you do not need to re-authenticate on every visit.

We do not use your data for advertising, profiling, or any purpose beyond what is described above.

3. Data Storage

Here is exactly what we store and how:

• OAuth access tokens — stored securely using server-side encryption. Tokens are scoped only to the permissions required (login and video posting), retained only for the duration of your active session, and immediately invalidated upon logout or when you revoke access via TikTok.
• Profile data (username, avatar) — temporarily cached in-session to display your profile. This data is cleared when your session ends and is never written to persistent storage.

4. Data Sharing

We do not sell, rent, or trade your personal data to any third party. Your data is shared only in the following limited circumstances:

• TikTok — when you initiate a login or video upload, the necessary data is transmitted to TikTok's API as required to complete the action.
• Legal compliance — if required by law or to protect the rights and safety of users.

5. Data Deletion

Users can request deletion of their data at any time. We will process all deletion requests promptly and completely.

You can do this through either of the following methods:

• Revoke via TikTok — Go to your TikTok account settings → "Security" → "Manage app permissions" and revoke access for this application. This immediately invalidates all stored OAuth access tokens on our end.
• Email request — Send a deletion request to tankhoa1334@gmail.com with the subject "Data Deletion Request". We will delete all data associated with your account within 30 days and send a confirmation.

6. Security Measures

We implement industry-standard security practices to protect your data:

• All data transmission is encrypted via HTTPS/TLS.
• OAuth access tokens are encrypted at rest and never logged in plaintext.
• We follow the principle of least privilege — only requesting TikTok API scopes strictly necessary for the application's functionality.
• Sessions are time-limited and automatically expire after inactivity.

7. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or TikTok's API requirements. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the application after changes constitutes acceptance of the updated policy.

8. Contact Information

If you have questions about this Privacy Policy, want to request data deletion, or have concerns about how your data is handled, please contact us:

• 📧 Email: tankhoa1334@gmail.com
• 📍 Location: Ho Chi Minh City, Vietnam