Legal

Privacy Policy

Effective date: [EFFECTIVE DATE]

This Privacy Policy explains what information TisFacts ("TisFacts," "we," "us") processes when you use [WEBSITE URL], including the TikTok connection feature, and how that information is handled. TisFacts is operated by [LEGAL ENTITY NAME].

1. Who this applies to

This policy covers visitors to the TisFacts website and, separately, the individual creator(s) who authorize TisFacts to connect to their TikTok account through TikTok's Login Kit. TisFacts is a small entertainment brand, not a platform with public user accounts — most visitors simply browse the site.

2. Information TisFacts collects

TisFacts collects as little information as possible. Depending on how you use the site, this may include:

  • Contact form information — if you use the contact page, your message opens in your own email client and is sent directly to TisFacts; it is not stored on the TisFacts server.
  • Basic TikTok profile information — if a creator connects TikTok, TisFacts receives basic profile information made available via the user.info.basic scope (such as display name and avatar), used only to confirm which account is connected.
  • OAuth tokens — an access token (and refresh token, if issued) that authorizes TisFacts to prepare and transfer video drafts to that TikTok account.

TisFacts does not collect passwords, payment information, or government ID information, and does not require visitors to create a TisFacts account.

3. What is temporarily processed vs. what is stored

To be transparent about the difference:

  • Temporarily processed: the OAuth authorization code exchanged during connection, and the video file in transit between TisFacts and TikTok during an upload. These are not retained after the relevant request completes.
  • Stored: the TikTok access/refresh token and basic profile information needed to keep the connection working, stored securely server-side until you disconnect or the token is revoked.
  • Sent to TikTok: the video file, title, description, and hashtags supplied for a given upload, sent directly to TikTok's Content Posting API as a draft.

4. The TikTok integration, specifically

TisFacts may use TikTok's Login Kit and Content Posting API to allow an authorized creator to connect their TikTok account and transfer video content to TikTok as a draft. The creator remains responsible for reviewing and publishing the content — TisFacts does not publish videos automatically. TisFacts requests only the TikTok scopes needed for this (user.info.basic, video.upload); it does not request video.publish unless that is explicitly enabled in the future, with this policy updated accordingly.

5. How information is used

Information is used only to operate the features you use: confirming a TikTok connection, displaying which account is connected, and transferring video drafts a creator has requested. TisFacts does not sell personal information and does not use TikTok data for advertising.

6. Cookies and session storage

TisFacts uses a minimal, secure, HTTP-only session cookie to keep the OAuth flow secure (protecting against cross-site request forgery via the OAuth state parameter) and, where applicable, to recognize an active session. TisFacts does not use advertising or tracking cookies.

7. Third-party services

TisFacts relies on TikTok's APIs to provide the connection and upload features described above, and on Cloudflare to host the site and run its backend functions. These providers process data as needed to deliver the service; TisFacts does not share your information with any other third party.

8. Data storage and security

Stored tokens and profile information are kept in Cloudflare's infrastructure, access to which is restricted to the operation of this website. Reasonable technical measures are used to protect stored information, including not exposing tokens in the browser, in URLs, or in application logs. No method of storage or transmission is completely secure, and TisFacts cannot guarantee absolute security.

9. Data retention

TikTok tokens and connected-account information are retained until you disconnect your TikTok account from TisFacts or revoke access from within TikTok, at which point TisFacts deletes the stored token.

10. Disconnecting your account

You can disconnect TikTok from TisFacts at any time from the TikTok connection page, or by revoking TisFacts's access directly within your TikTok account settings.

11. Your rights

Depending on where you live, you may have rights to access, correct, or delete information TisFacts holds about you. To exercise these rights, contact TisFacts using the details below.

12. Contact

Questions about this policy can be sent to [BUSINESS EMAIL], or by mail to [OWNER NAME], [LEGAL ENTITY NAME].

13. Changes to this policy

TisFacts may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date at the top of this page.