Privacy Policy

Information processed

The service processes the connected account's display name and current TikTok export settings, plus the caption, visibility choice, interaction/disclosure choices, and status for an export the creator explicitly starts. The selected original video stays in the creator's browser until that creator confirms the one export to TikTok.

For TikTok Login Kit, the public authorization service temporarily processes the authorized account's basic display name only to confirm the completed sign-in.

How information is used

Information is used only to show the connected creator's TikTok options and perform the individual SELF_ONLY export that creator explicitly confirms. It is not sold, rented, used for advertising profiles, or shared with data brokers.

Storage and security

The public export service does not persist selected video files or TikTok credentials in its application database. Platform providers process data under their own policies.

TikTok access and refresh tokens are not retained by the Login Kit service. They are used only during the immediate authorization callback to verify the sign-in, then discarded. The Direct Post access token is encrypted in an HTTP-only, same-site session cookie for at most one hour so the service can complete the creator's selected export; no refresh token is stored or exposed to the browser.

Retention and deletion

The creator may disconnect at any time. A Direct Post session is cleared after logout or a terminal export result and is not retained after the export session. Revoking authorization in TikTok prevents future API access. See the data deletion instructions for assistance.

Third-party services

The tool may connect to TikTok, Instagram/Meta, YouTube/Google, and X through their official APIs. Their respective privacy policies also apply when those services are used.

Contact

Questions or deletion requests can be sent to RØB through the official X profile.