Privacy Policy

Last updated: June 9, 2025

PostLoopr ("we", "us", or "our") operates https://postloopr.com and provides a web application that helps creators publish and manage content across social media platforms. Currently, we integrate with TikTok through their official developer APIs; additional platforms may be added over time. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

Account Information

Email address (used for passwordless authentication via one-time login codes)
Session data (secure session tokens stored in httpOnly cookies)
Optional display name

TikTok Integration Data

When you connect your TikTok account to PostLoopr, we collect and store the following data obtained through TikTok's official Login Kit and Content Posting API:

TikTok open_id (unique identifier for your TikTok account)
OAuth access tokens and refresh tokens (encrypted at rest)
Authorized scopes (e.g., user.info.basic, video.upload, video.publish)
Public profile information: display name and avatar URL
Content metadata you submit for posting (titles, captions, privacy settings, interaction preferences)
Publishing status and post identifiers returned by TikTok

Technical Data

Server logs (IP address, browser type, access times) for security and debugging
Uploaded video files (processed for TikTok publishing, not permanently stored after submission)

2. How We Use Your Information

We use your information to:

Authenticate you via email one-time passwords
Connect and maintain your TikTok account authorization
Publish and manage content on your TikTok account on your behalf, as directed by you
Display your connected TikTok account information in the app
Refresh OAuth tokens to maintain your TikTok connection
Provide customer support and respond to privacy requests
Comply with legal obligations

3. TikTok Data Sharing

PostLoopr integrates with TikTok's developer platform. When you connect your TikTok account, your data is shared with TikTok in accordance with TikTok Developer Terms of Service and TikTok's Privacy Policy. We do not sell your personal data to third parties.

4. Data Retention

Account data: retained while your account is active
TikTok tokens: retained while your TikTok account is connected; deleted upon disconnection
OTP codes: deleted after use or expiry (10 minutes)
Session tokens: expire after 30 days of inactivity
Content post records: retained for your publishing history unless you delete your account

5. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Withdraw consent for TikTok integration by disconnecting your account
Data portability (receive your data in a structured format)
Lodge a complaint with a supervisory authority

To exercise these rights, contact us at dev@dotnexus.nl or follow our Data Deletion instructions.

6. Security

We implement industry-standard security measures including encrypted token storage (AES-256), httpOnly secure cookies, HTTPS encryption, and rate limiting on authentication endpoints. TikTok client secrets are stored server-side only and never exposed to the browser.

7. Children's Privacy

PostLoopr is not intended for users under 13 years of age. We do not knowingly collect data from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date.

9. Contact Us

For privacy-related inquiries: dev@dotnexus.nl