Privacy Policy

1. Data we collect

• Account data — the email address you sign up with, or the basic profile returned by Google sign-in.
• TikTok account data — when you connect TikTok we store your open ID, display name, avatar URL, follower count and the list of scopes you granted.
• TikTok tokens — an access token and refresh token issued by TikTok, together with their expiry times.
• Queue and video data — the clips you queue, their captions, hashtags, schedule, status, TikTok publish IDs, and the video files mirrored to private storage so they can be uploaded.
• Publishing logs — the result of each publish attempt, including error codes returned by TikTok, used for retries and troubleshooting.

2. How we use it

Your data is used only to operate the Service: authenticating you, showing your queue, scheduling posts in your timezone, publishing to your connected TikTok account, retrying temporary failures, and showing you the history of what published or failed. We do not sell your data, and we do not use it for advertising or profiling.

3. TikTok data handling

TikTok access and refresh tokens are encrypted at rest with AES-256-GCM and are only ever decrypted in server-side code. They are never sent to your browser and are never exposed in any client response. Tokens are used exclusively for the scopes you approved: retrieving your basic profile and publishing or uploading videos you queued.

Clip Farm's use of information received from TikTok APIs adheres to the TikTok Developer Terms of Service, including the limited-use requirements.

4. Storage and security

Data is stored in a managed Postgres database with row-level security, so each account can only read its own rows. Video files are stored in a private storage bucket and are exposed to TikTok only through short-lived signed links or direct byte upload at publish time. Access to credentials is restricted to server-side runtime environment variables.

5. Sharing

We share data only with the infrastructure providers needed to run the Service (hosting, database, storage, authentication) and with TikTok when you publish. We may disclose data if legally required.

6. Retention and deletion

Queue items, mirrored video files and publishing logs are kept while your account is active. You can remove individual queue items at any time. Disconnecting TikTok deletes the stored tokens and account link immediately. Deleting your account removes your queue, mirrored files, schedule and logs. You can also revoke Clip Farm from your TikTok account settings at any time.

7. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to withdraw consent. Contact the operator to make a request.

8. Children

The Service is not intended for anyone under 18 and we do not knowingly collect their data.

9. Changes

If this policy changes, the "last updated" date above will change. Significant changes will be surfaced in the app.

10. Contact

Privacy questions can be sent to the operator of this application through the contact details listed on the app's TikTok developer listing.