Privacy policy
Postkemanamana ("the service", "we") publishes videos to TikTok and YouTube on behalf of people who connect their accounts. This policy explains what we store, why, and how to remove it.
What we collect
- Account identity from the platform. When you connect a TikTok or YouTube account we receive its identifier, display name, handle and avatar. We show them to you so you know which account a post goes to.
- Access tokens. The permission the platform grants us to upload and publish on your behalf and to read your videos' statistics. Tokens are stored encrypted and used only for the operations you or your agent request.
- The posts you create. Video files, captions, settings, the review result and who approved the post. Video files are kept until the post is published and for a short time afterwards for retries, then deleted.
- Video statistics. Views, likes, comments, shares and retention for videos published through the service, fetched from the platforms' reporting APIs and stored as daily snapshots.
- Service logs. Technical logs of requests and failures, kept for a limited time to run and debug the service.
We do not collect contacts, messages, browsing history or any data from your device beyond what you upload.
How we use it
Only to provide the service: publish what you approved, show the state of your posts, and report how they perform. We do not sell data, do not use it for advertising, and do not share it with third parties other than the platforms you connected, acting on your instructions.
Google and YouTube
The service uses YouTube API Services. By connecting a YouTube account you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can revoke the service's access at any time from the Google security settings page. Data obtained through YouTube API Services is used only as described above and is refreshed or deleted as described under "Retention". Postkemanamana's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
TikTok
Connecting a TikTok account uses TikTok Login Kit and the Content Posting API. We receive your open id, display name and avatar, and the permission to post videos and read their statistics. Posts are created with the privacy level you choose from the options your account allows, and commercial content is disclosed when you mark it so. You can revoke access in TikTok under Settings → Security → Manage app permissions.
Retention and deletion
- Disconnecting a channel deletes its tokens immediately; we also ask the platform to revoke them.
- Video files are deleted after publication; drafts that are never published are deleted when you delete the post.
- Deleting your account removes all posts, statistics and account identities within 30 days, except what the law requires us to keep.
- To delete anything, use the service itself or write to the address below.
Security
Tokens are encrypted at rest. The service talks to the platforms only over HTTPS. Access to production data is limited to the people operating the service.
Children
The service is for adults managing their own or their organisation's channels and is not directed at children.
Changes and contact
When this policy changes, the effective date above changes with it. Questions and deletion requests: danil.klimentev@gmail.com.