Privacy Policy

Last updated: June 2026

1. Overview

TG Cinema Publisher ("the Service", "we") is a private automation tool operated by a single authorized operator. This policy describes what data is collected when you authenticate with third-party platforms (such as TikTok) through this Service, how it is stored, and how it is used.

This Service is not open to the general public. Only the authorized operator has access to its management interface.

2. Data Collected via TikTok OAuth

When the operator connects a TikTok account to this Service using TikTok's OAuth 2.0 authorization flow, the following data is collected and stored:

TikTok Open ID — unique identifier for the TikTok account
Display name — the public display name of the TikTok account
Username — the TikTok handle (@username)
Access token — OAuth access token used to publish content on behalf of the connected account
Refresh token — token used to renew the access token when it expires
Token expiry timestamps — when the access and refresh tokens expire
Authorized scopes — the permissions granted by the TikTok account owner (e.g. video.upload, video.publish)

3. Data Collected via Publishing Activity

When content is published or uploaded to TikTok through the Service, we store:

Upload and publish status — whether a video was successfully uploaded to TikTok (inbox or published)
TikTok publish ID — the identifier returned by TikTok for a submitted video
Workflow metadata — timestamps, attempt counts, and error messages associated with each publishing job
Video caption — the generated caption text sent to TikTok with the video
Local video file path — the path to the local video file that was published

4. How Data Is Used

Collected data is used exclusively to:

Authenticate API requests to TikTok on behalf of the connected account
Automatically refresh access tokens before they expire
Publish or upload approved video content to TikTok
Notify the operator of publishing results via Telegram
Maintain idempotency (prevent duplicate publications)

Data is never shared with any third party other than TikTok as required by the publishing workflow.

5. Data Storage and Security

All data is stored locally on the server operated by the Service operator. Access tokens and refresh tokens are stored in JSON files on the server filesystem. They are never logged in plaintext — all logs reference tokens only by a masked form (first 4 and last 4 characters).

Access to the server and management interface is restricted to the authorized operator only.

6. Data Retention

TikTok account credentials and tokens are retained until the operator explicitly disconnects the account from the Service. Upon disconnection, all associated tokens are removed from local storage. Publishing job records may be retained for operational audit purposes.

7. Your Rights

The authorized operator may disconnect any TikTok account at any time through the Service management interface. This removes all stored tokens for that account. Additionally, you may revoke the Service's access to your TikTok account at any time via TikTok's app settings under Manage Permissions.

8. TikTok Platform

This Service interacts with TikTok through the official TikTok Content Posting API. Use of TikTok is subject to TikTok's own Terms of Service and Privacy Policy.

9. Contact

For any questions regarding this privacy policy or data handling, contact the operator at: pupkin9403101@gmail.com