Privacy Policy

Last updated: August 29, 2025

1) What we collect

• Authentication data from TikTok OAuth (access token, open_id) to enable login.
• Basic profile via user.info.basic (e.g., display name, avatar URL).
• Video files & metadata that you choose to upload and publish via video.upload and video.publish.
• Operational logs (timestamps, errors) for reliability and security.

2) How we use data

• Provide core functionality: authenticate, prepare, upload, and publish videos.
• Secure and improve the service (debugging, performance, abuse prevention).
• Comply with legal obligations and platform policies.

3) What we don’t do

• No selling of personal data.
• No reading or posting beyond the scopes you grant.
• No indefinite retention: see retention schedule below.

4) Data retention

• OAuth tokens: kept only while the user remains connected; deleted upon disconnect.
• Uploads: temporary processing only; retained max 30 days.
• Security logs: retained 12 months.
• Access logs: retained 6 months.
• System/app logs: retained 3 months.
• Financial records*: 6–7 years where applicable by law.

* Only applies if you enter into a paid plan or make purchases.

5) Sharing

We use carefully selected service providers (sub‑processors) that process limited data to operate HookHatch:

• Cloudflare, Inc. — Hosting (Pages) and CDN for this site and assets.
• Cloudflare R2 or Strato — Storage/Backups or DNS, as configured.
• Google (Gmail) — Inbound support email at davevanwijk91@gmail.com.
• Monitoring — None currently. If added (e.g., Datadog/Sentry), we will update this page prior to activation.

6) Security

We apply industry‑standard safeguards (encryption in transit, access control, audit logging). No method is 100% secure; we continuously improve our controls.

7) Your rights

Depending on jurisdiction, you may request access, correction, deletion, or portability of your personal data, and object to or restrict certain processing. See Data Deletion for instructions.

8) Children

The service is not directed to children under 13.

9) International transfers

Data may be processed outside your country, with appropriate safeguards (e.g., SCCs) where required.

10) Changes

We may update this Policy; material changes will be highlighted here.

11) Contact

Email: davevanwijk91@gmail.com