Privacy Policy
This Privacy Policy explains how Un Bit de Savoir Publisher (the “App”), operated by Axel Turchini (the data controller), handles personal data when a social media account, including a TikTok account, is connected to it. The App is a private, self-hosted publishing tool used to publish the Operator’s own content.
1. Data the App collects
When a TikTok account is connected through TikTok Login Kit, the App receives only the data needed to work:
- Basic account information: TikTok open ID / union ID, display name, username and avatar URL, used to show which account is connected.
- Authorisation tokens: the access token and refresh token issued by TikTok, used to publish on the account’s behalf.
- Publishing data: the videos, captions, scheduled dates and settings (privacy level, comments, duets, stitches) prepared in the App, plus the publish status and post ID returned by TikTok.
- App account data: the email address and password hash used to sign in to the App itself.
The App does not collect followers, contacts, messages, viewing history, location, or any data about other TikTok users.
2. How the data is used
- To authenticate the connected account and display it in the App.
- To upload and publish the content chosen by the account owner, at the time chosen.
- To show the publishing status of each post.
Data is never used for advertising, profiling or analytics, and is never sold, rented or shared with third parties, except with the platform the content is published to (e.g. TikTok) as needed to publish it.
3. Legal basis
Under the GDPR, data is processed on the basis of the performance of the service requested by the account owner (Art. 6(1)(b)) and the Operator’s legitimate interest in managing his own content (Art. 6(1)(f)).
4. Storage and security
The App is self-hosted on a server controlled by the Operator, located in the European Union. Access is protected by authentication and HTTPS. Tokens are stored in the App’s database and only used to call the official platform APIs.
5. Retention
- Access and refresh tokens are kept while the account stays connected and are deleted when the account is disconnected from the App or access is revoked from TikTok.
- Uploaded media and post history are kept as long as needed to manage the content, and can be deleted at any time by the account owner.
6. Your rights
You have the right to access, correct, delete or export your data, to object to or restrict its processing, and to withdraw consent at any time. To exercise these rights, contact contact@axelturchini.com. You can also revoke the App’s access in TikTok under Settings and privacy → Security → Manage app permissions. If you think your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL.
7. Third-party services
When content is published, it is sent to the relevant platform, which processes it under its own privacy policy, such as the TikTok Privacy Policy.
8. Children
The App is not intended for anyone under 18 and does not knowingly process data about children.
9. Changes
This policy may be updated. The date at the top of this page shows the latest version.
10. Contact
Axel Turchini — contact@axelturchini.com