Privacy Policy
This Privacy Policy describes how OneClick Social ("we", "us") collects, uses, and protects information when you use the Service. We follow the principle of data minimization: we only collect what is strictly needed to operate the Service.
1. Information We Collect
- TikTok account data received via the official TikTok Login Kit: open ID, union ID, display name, avatar URL, and the access/refresh tokens required to publish content on your behalf.
- Content you upload (videos, images, captions, hashtags, scheduling metadata) for the sole purpose of delivering it to TikTok.
- Technical logs such as IP address, browser type, and timestamps of API calls, retained only as long as needed for security and debugging.
2. How We Use Information
- To authenticate your account and publish the content you schedule.
- To display analytics (post status, views, likes) returned by TikTok's APIs inside your dashboard.
- To maintain the security and integrity of the Service.
3. What We Do Not Do
- We do not sell or rent your personal information to third parties.
- We do not use your content to train machine-learning models.
- We do not post anything to your connected accounts without an action you initiated (manual upload or schedule you set up).
4. Data Sharing
We share content only with the third-party platforms you explicitly connect (primarily TikTok). We may share data with hosting and infrastructure providers that process it on our behalf under confidentiality obligations. We may disclose information if required by law or to protect the rights, property, or safety of the Service and its users.
5. Data Retention
Uploaded media is retained until successfully published or until you delete it. OAuth tokens are retained until you disconnect your account or revoke access from the TikTok settings page. Logs are retained for up to 90 days.
6. Security
Data is transmitted over HTTPS/TLS. Access tokens are stored encrypted at rest. Access to the production server is restricted to the project owner. Despite reasonable safeguards, no online service can be guaranteed to be fully secure.
7. Your Rights
You may request access to, correction of, export of, or deletion of your personal data at any time by contacting us. You can also disconnect your TikTok account from the Service dashboard or from TikTok's own account settings; on disconnection we delete the associated tokens and derived session data.
8. Children's Privacy
The Service is not directed to children under 18 and we do not knowingly collect personal data from them.
9. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of the page will reflect the most recent change. Material changes will be communicated through the dashboard.
10. Contact
For privacy questions or data requests, contact privacy@oneclicksocial.duckdns.org.