Privacy Policy

Summary: This website sets no cookies, runs no analytics, and collects nothing about you. Our publishing software touches only our own social accounts. We hold no data about viewers, fans, or other platform users.

1. This website

These pages are static files. There are no cookies, no tracking pixels, no analytics, no advertising networks, no embedded third-party scripts, and no forms. Our web server keeps standard request logs (IP address, timestamp, requested path, user agent) for security and abuse diagnosis. Logs rotate automatically and are not used to build profiles or shared with anyone.

2. Our publishing software

We operate internal software that publishes our own content to social platforms. To do that it stores, for accounts we ourselves own:

• OAuth access and refresh tokens issued to us by the platform
• The account identifier and display name the platform returns, used only to send each upload to the right account
• Metadata for the content we upload — captions, titles, scheduling times

These credentials are held encrypted on a private server that we control, are never transmitted to anyone other than the issuing platform's own API, and are deleted when an authorization is revoked or an account is retired.

3. What we do not collect

We do not collect, request, receive, store, buy, or process personal data about any person other than ourselves. Specifically we hold no viewer data: no follower lists, no comment authors, no direct messages, no profile data of other users, no watch history, and no advertising identifiers. We do not use any platform API to gather information about third parties.

4. TikTok integration

Our TikTok integration uses the Content Posting API with the video.publish scope to post content to TikTok accounts we own. Authorization is granted by us, through TikTok's own OAuth consent screen, for our own accounts only. We request no scope that would read other users' data. Authorization can be withdrawn at any time from TikTok's Settings → Security and permissions → Manage app permissions, which immediately and permanently ends our access.

5. Sharing and sale of data

We do not sell, rent, trade, or share data with third parties. We do not use data for advertising or profiling. No data is transferred to data brokers. The only outbound transmissions are our own content and credentials to the platform APIs we publish through.

6. Retention

Credentials are kept only while an account is active, and deleted on revocation or retirement. Server request logs rotate on a short cycle. Published content remains on the platform it was posted to until we remove it there.

7. Security

Credentials are encrypted at rest. The servers that hold them accept administrative access only by SSH public key — password authentication is disabled — and sit behind a default-deny firewall. Access is limited to the studio operator.

8. Children

This site and our publishing software are not directed to children, and we knowingly collect no information from anyone. Some of our published content is family-friendly and is labeled as such on the platform where it appears.

9. Your rights

Because we hold no personal data about visitors, there is normally nothing to access, correct, or delete. If you believe we hold information about you, write to us and we will investigate and respond.

10. Changes

Material changes will be posted here with a new effective date.

11. Contact

contact@ninefoldworks.com