Privacy Policy

Last updated 29 September 2026

This policy explains how we handle information in Postdeck, our internal tool for publishing content to the TikTok accounts of brands we own.

Information we collect

• When one of our brand accounts is connected through TikTok Login Kit: the TikTok open ID, display name and avatar, and the access and refresh tokens TikTok issues for the scopes granted (user.info.basic, video.upload, video.publish).
• Creator information TikTok returns when preparing a post (nickname, username, available privacy options and interaction settings), used only to show the posting screen.
• Photos, titles and captions our team uploads for a post, and the publish ID and status TikTok returns.

How we use it

Only to publish content to the connected account and show the result. We do not sell or share this information, use it for advertising, or combine it with other data.

Storage and security

Data is stored on Cloudflare (Workers KV and R2) and is accessible only to our team. Tokens are never shown in the interface.

Retention and deletion

Disconnecting an account in the tool revokes its TikTok authorization and deletes its tokens and profile data immediately. Post records are deleted after 90 days. Uploaded photos are deleted on request. You can also revoke access at any time in the TikTok app under Settings and privacy, Security, Apps and services.

Contact

support@xzvzx.com