1. Who is responsible
Social Shorts Scheduler is operated by Eduardo Vieira Mendes. Privacy questions and data requests can be sent to [email protected].
2. Information processed
Depending on the features you authorize and use, the Service may process:
- basic TikTok account information, such as open ID, username, display name and avatar;
- OAuth access tokens, refresh tokens, authorized scopes and expiration dates;
- videos, captions, titles, scheduling information and destination selections;
- upload identifiers, processing status and platform error messages;
- identifiers for the connected creator's own videos and aggregate view, like, comment and share counts when the performance feature is enabled;
- limited security and operational logs, which may include timestamps, IP addresses and browser or request information.
- a record that the e-mail address has already used the free trial, stored as an irreversible fingerprint (HMAC-SHA256) to prevent the benefit from being repeated;
3. How information is obtained
Account information, tokens, the connected account's basic profile (open ID, display name and avatar) and authorized video data and metrics are received from TikTok after you explicitly authorize the requested OAuth scopes. Content and scheduling data are provided directly by the authorized user.
4. Purposes
Information is used to identify the connected account, maintain authorization, refresh tokens, upload authorized videos to TikTok as a draft for review or, when TikTok's approval allows it, as a direct post, show processing results and an optional private performance dashboard, prevent duplicate transfers, secure the Service and diagnose failures. The free trial record exists to prevent the benefit from being granted more than once to the same e-mail address.
5. Legal basis
Where applicable, processing is based on your authorization and consent, the steps requested by you to provide the Service, and the operator's legitimate interest in securing and maintaining the Service. You may withdraw TikTok authorization at any time.
6. Sharing
Information is sent to TikTok only as needed to authenticate the account, query the authorized basic profile information of the connected account, list the connected creator's own recent videos and read their aggregate metrics, upload the requested content and check the upload status. Subscription and billing details (such as account email and purchase status) are processed by Paddle.com as Merchant of Record to manage payments, renewals and refunds. Card data is handled directly by Paddle and is not stored by the Service. Personal information is not sold.
7. Storage and security
Application data and OAuth credentials are stored on a server controlled by the operator. Reasonable access controls and restricted file permissions are used. No method of storage or transmission can guarantee absolute security.
8. Retention
OAuth credentials are retained while the TikTok integration remains connected or until they expire, are revoked or are deleted. Scheduling records, media, metric snapshots and operational logs are retained only as needed to operate, document and secure the Service, and may be removed upon a valid deletion request unless retention is required by law.
9. Your choices and rights
You may revoke the application's access in TikTok's connected-app settings. You may also request access, correction or deletion of locally stored information by following the data deletion instructions. Additional rights may apply based on your location.
10. Children
The Service is not directed to children and is not intended to knowingly collect children's personal information.
11. Site access measurement
The public site records every visit to its public pages (home, plans, help and legal pages) to measure how many people reach it. The record stores the date and time, the page opened, the source of the visit (for example, an advertised campaign), the device type and an identifier derived from the IP address and the browser that changes every day and does not allow the same person to be recognised on different days. The IP address and the browser are not stored. There is no analytics cookie and no sending of this data to third parties.
12. Changes
This Policy may be updated to reflect changes to the Service, law or platform requirements. The effective date above will be updated when changes are published.