Privacy Policy

Camryn Laval  |  Last updated: May 2025

1. Who We Are

Camryn Laval (the “Application”) is a private, single-operator automation tool that posts original video content to TikTok on behalf of the authorised account owner (“Operator”). It is not a consumer-facing product.

2. Data We Collect

When the Operator authorises the Application via TikTok OAuth 2.0, we receive and store the following data:

• TikTok OAuth tokens — an access token and refresh token issued by TikTok, stored as encrypted environment variables on our hosting platform (Heroku). These tokens are used exclusively to call the TikTok Content Posting API.
• TikTok account identifier — the open_id returned by TikTok, used to confirm the correct account is linked. This is never shared.

We do not collect, store, or process the personal information of any TikTok end-users or viewers.

3. How We Use This Data

The collected data is used solely to:

• Authenticate API requests to TikTok on the Operator’s behalf.
• Post original video content to the Operator’s TikTok account.
• Refresh the access token automatically before it expires.

4. Data Sharing

We do not sell, rent, or share any data with third parties, advertisers, or analytics services. The only external service that receives data is TikTok’s own API, as required to fulfil the posting functionality.

5. Data Retention

OAuth tokens are retained as long as the Application is in active use. The Operator can revoke access at any time via TikTok → Settings → Security → Manage App Permissions, which immediately invalidates the stored tokens.

6. Data Security

OAuth tokens are stored as encrypted Heroku config vars and are never logged, exposed in URLs, or transmitted over unencrypted connections. All API calls use HTTPS.

7. Your Rights

As a private single-operator application, the Operator has full control over their data. To have all stored tokens deleted, simply revoke the Application’s access in TikTok settings and notify the administrator to clear the config vars.

8. TikTok’s Privacy Policy

Data shared with TikTok via their API is governed by TikTok’s Privacy Policy.

9. Changes to This Policy

This Privacy Policy may be updated from time to time. The “Last updated” date at the top will reflect any changes.

10. Contact

For privacy-related questions, contact the Operator via the authorised administrator channel.