1. Who this policy applies to
This Privacy Policy describes how PersonalCreatorOps processes information for its private content production and publishing workflow. The application is operated by Gilberto Lima and is intended for the operator's own accounts and explicitly authorized collaborators.
2. Information we process
Depending on how the application is used, it may process:
- TikTok account information: basic account identifiers and profile information returned after authorization, such as the account identifier, username or display name.
- Authorization information: OAuth access and refresh tokens needed to keep an authorized connection working.
- Content and production information: videos, captions, publishing settings, workflow history, status results and operational notes entered by the operator.
- Technical information: limited logs and error information needed to operate, troubleshoot and secure the application.
3. TikTok products and scopes
The current integration uses TikTok Login/OAuth to connect an account and the Content Posting API to publish video after human approval. The requested scopes are:
user.info.basic— identify the authorized TikTok account for the connection.video.publish— upload and publish an approved video to that authorized account.
The MVP does not request TikTok analytics, Display API, Share Kit or unrelated permissions. If the integration changes, this policy will be updated before new permissions are used.
4. How information is used
Information is used only to:
- connect and maintain an account explicitly authorized by the operator;
- organize and process content through the internal workflow;
- send an approved video to TikTok and check its processing status;
- protect the application, diagnose failures and maintain operational records; and
- respond to a privacy, access or deletion request.
PersonalCreatorOps does not sell TikTok data, use it for targeted advertising or use it to build a profile of unrelated TikTok users.
5. Storage and security
OAuth tokens are encrypted before they are stored by the private application. Content files are stored in application-controlled object storage, and workflow records are stored in the application's database. Access is restricted to the operator and authorized infrastructure. No online service can guarantee absolute security, so credentials must be kept private and access should be revoked when it is no longer needed.
6. Sharing and third parties
Information is sent to TikTok only when necessary to complete an authorized OAuth, account lookup or publishing request. The application may also rely on its hosting, database and file-storage providers to operate. Those providers process information only as needed to provide infrastructure for the private application.
7. Retention and deletion
Information is retained while it is needed for the content workflow, account connection, security or operational history. The operator may request deletion of connected-account data, tokens, content and related records by following the instructions on the Data Deletion page. Disconnecting an account stops future API access; a separate deletion request may be needed to remove stored historical records.
8. Your choices
You can stop an integration by revoking access in TikTok, ask what information is stored, request correction of an operational record or request deletion. Contact PersonalCreatorOps@gilberto-lima.com with the account or company workspace involved.
9. Changes and contact
This policy may be updated when the application or its integrations change. The effective date at the top of this page will be updated with any material revision. Questions can be sent to PersonalCreatorOps@gilberto-lima.com.