Privacy Policy

Last updated: April 16, 2026

1. Introduction

Postiqo ("we", "our", or "us") operates this application and related services. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.

2. Information We Collect

We collect the following types of information:

Authentication & Account Information

We use TikTok as the only authentication provider via OAuth 2.0. When you sign in, we may collect and store:

• TikTok user ID
• Username
• Display name
• Profile image (avatar)
• Access token and refresh token
• Token expiry time

We also store session information using secure HTTPS-only cookies or JWT tokens to maintain authentication state.

Video & Content Data

When you use our service, we may collect and store:

• Uploaded video files
• Video metadata (title, status, timestamps)
• Processing status (PENDING, UPLOADED, PUBLISHED, FAILED)
• TikTok video ID (if successfully published)
• Amazon S3 URL of uploaded media

Technical Data

We may automatically collect:

• Device type and browser information
• Basic usage logs for security, debugging, and abuse prevention

3. How We Use Your Information

We use your information to:

• Authenticate users via TikTok OAuth
• Provide access to our platform
• Upload and store videos
• Publish videos to TikTok on your behalf
• Track publishing status and delivery of content
• Maintain secure sessions
• Improve, secure, and operate our service

4. Data Storage and Infrastructure

We use the following infrastructure providers:

• Amazon Web Services (AWS)

  • DynamoDB is used as the only database for storing user and video records
  • S3 is used as the only storage system for uploaded video files

• TikTok

  • Used for authentication and video publishing via official APIs

All sensitive data such as OAuth tokens are stored securely on the server and are never exposed to the client.

We use encryption in transit (HTTPS) and apply access controls to protect stored data. API access and authentication are restricted to authorized backend services only.

5. How We Process Your Data

Our system operates as follows:

• Users authenticate via TikTok OAuth
• Tokens are exchanged and stored securely in DynamoDB
• Uploaded videos are stored in Amazon S3
• Videos are published to TikTok using the official “pull-from-URL” method
• Video status and metadata are updated in DynamoDB
• User session state is managed via secure cookies or JWT

6. Third-Party Services

We rely on third-party services to operate our platform:

• TikTok ["company","TikTok","social media platform"] Used for authentication and content publishing. TikTok’s own privacy policy also applies.

• Amazon Web Services (AWS)

  • DynamoDB for structured data storage
  • S3 for media file storage

• Authentication/session infrastructure (cookies/JWT handling) Used to maintain secure user sessions

7. Data Retention

We retain your data only as long as necessary to provide the service:

• User account data is retained while your account is active
• Video metadata and files are retained while associated with your account
• OAuth tokens are deleted when you disconnect TikTok or delete your account
• Data may be retained longer if required for security, fraud prevention, or legal compliance

8. Data Security

We implement reasonable technical and organizational measures to protect your data, including:

• Secure HTTPS communication
• Server-side storage of sensitive tokens
• Restricted access to databases and storage systems
• Secure handling of AWS credentials and environment variables

⚠️ No system is completely secure, and we cannot guarantee absolute security of your data.

9. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Request correction or deletion of your data
• Withdraw consent at any time
• Disconnect your TikTok account (revoking API access)

To exercise your rights, contact us at: wantuchmatvii@gmail.com

10. International Data Transfers

Your data may be processed and stored in countries outside your jurisdiction. We take appropriate measures to ensure data protection in accordance with applicable laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be reflected by changing the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, contact us at:

wantuchmatvii@gmail.com