Privacy Policy

1. Overview

TokFlow ("we," "our," or "us") respects your privacy and is committed to protecting the personal data and social account credentials you entrust to us when using https://tokflow.top.

2. Information We Collect via TikTok OAuth

When you explicitly connect your TikTok account using TikTok Login Kit and Content Posting API, we collect only the data authorized by you:

• Basic Profile Information (user.info.basic, user.info.profile): Your TikTok Open ID, display name, avatar URL, bio description, and profile link so we can display which creator account is active in the publishing studio.
• Account Statistics (user.info.stats): Follower count, following count, likes count, and video count to display analytics dashboards for your connected account.
• Video Publishing Permissions (video.upload, video.publish): OAuth access tokens and refresh tokens used strictly to upload video drafts or publish videos that you explicitly initiate and confirm.

3. How We Use Your Information

We use the collected information solely to:

• Authenticate your identity and display your connected creator profile in the TokFlow workspace.
• Query your real-time creator posting permissions (creator_info) and execute video uploads or direct posts at your direction.
• Provide performance summaries of your published videos.

We never sell, rent, or share your TikTok user data or OAuth tokens with any unauthorized third parties.

4. Data Storage, Security & Retention

OAuth access and refresh tokens are encrypted at rest using industry-standard AES-256 encryption and transmitted exclusively over TLS/HTTPS. We retain your connected account data only while your account remains linked.

5. Data Deletion & Revoking Access

You may revoke TokFlow's access and delete all associated OAuth tokens and profile data at any time by:

• Clicking "Disconnect Account" in the TokFlow Authorized Accounts dashboard (which immediately purges your tokens from our database), or
• Revoking access directly within the TikTok mobile app under Settings and Privacy → Security and permissions → Apps and services permissions, or
• Emailing privacy@tokflow.top for complete account and data erasure within 48 hours.

6. Contact Us

For privacy inquiries or data deletion requests, contact our Data Protection Officer at privacy@tokflow.top.