Privacy Policy

Last updated: January 18, 2025

VideoFlow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our TikTok video publishing platform.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Name (optional)
• Password (encrypted)
• Company name (optional)

1.2 TikTok Account Data

When you connect your TikTok account via OAuth, we receive:

Scope	Data Accessed	Purpose
user.info.basic	Display name, username, avatar	Display account identity in dashboard
video.upload	Ability to upload videos	Upload your content to TikTok
video.publish	Ability to publish videos	Publish videos to your profile

1.3 Video Content

When you upload videos for publishing:

• Videos are temporarily stored on our secure servers
• Successfully published videos: Deleted within 24 hours of publishing
• Failed uploads: Retained for up to 7 days for retry attempts, then deleted
• Scheduled videos: Stored until published, then deleted within 24 hours

1.4 Workflow & Automation Data

• Workflow configurations you create
• Scheduling preferences and rules
• Category and tag assignments

1.5 Distribution History

We maintain records of your publishing activity:

• Video titles and metadata
• Target TikTok account
• Publish status and timestamps
• Error messages (if any)

Retention: Distribution history is retained for 12 months, after which it is automatically deleted.

2. How We Use Your Information

• Provide and maintain our video publishing services
• Process your video uploads and scheduled posts
• Display your connected TikTok accounts in the dashboard
• Send you service notifications (publishing confirmations, errors)
• Improve and optimize our platform
• Respond to customer support requests
• Comply with legal obligations

3. Multi-Account Data Handling

If you connect multiple TikTok accounts:

• Each account's OAuth tokens are stored separately and securely
• Access tokens are encrypted at rest
• You can disconnect any account at any time, which immediately revokes our access and deletes related tokens

4. Data Sharing

We do not sell your personal information. We may share data with:

• TikTok: Your video content and metadata when you publish
• Service Providers: Cloud hosting (AWS/GCP), payment processors (Stripe)
• Legal Requirements: When required by law or to protect our rights

5. Your Rights & Controls

• Disconnect Accounts: Remove any TikTok account from your dashboard at any time
• Cancel Scheduled Posts: Modify or cancel any scheduled video before its publish time
• Delete Your Account: Request complete account deletion via settings or support
• Export Data: Request a copy of your data
• Access & Correction: View and update your account information

6. Data Security

• All data encrypted in transit (TLS 1.3) and at rest (AES-256)
• OAuth tokens stored with additional encryption layer
• Regular security audits and penetration testing
• Access controls and audit logging

7. Cookies & Tracking

We use essential cookies for:

• Authentication and session management
• Remembering your preferences

We do not use advertising or third-party tracking cookies.

8. Children's Privacy

VideoFlow is not intended for users under 18. We do not knowingly collect data from children.

9. International Data Transfers

Your data may be processed in the United States. We use standard contractual clauses for international transfers where required.

10. Changes to This Policy

We may update this Privacy Policy periodically. We'll notify you of significant changes via email or platform notification.

11. Contact Us

For privacy-related questions or requests:

• Email: contact@videoflow.app
• Support: support@videoflow.app