Privacy Policy

Last updated: August 24, 2026

1. Introduction

This Privacy Policy describes how Appnics LLC ("we", "us", or "our") handles information in connection with shortform-factory (the "Service"), an internal content management tool used to publish video content to TikTok accounts operated by us.

2. Information We Collect

When a TikTok account is connected through TikTok's official OAuth flow, we collect only the following:

• Basic account information provided by TikTok under the user.info.basic scope: display name, avatar image, and account identifier (open ID).
• OAuth access and refresh tokens issued by TikTok.

We do not collect any other personal information. The Service does not use cookies for advertising or analytics; a single encrypted cookie is used solely to maintain the account connection session.

3. How We Use Information

The information above is used exclusively to:

• Confirm and display which TikTok account is connected; and
• Execute video posts to the connected account at the operator's request.

We do not use the information for any other purpose.

4. Sharing and Selling of Information

We do not sell, rent, or share the collected information with any third party. Data is exchanged only with TikTok's official APIs as necessary to provide the Service.

5. Data Storage and Security

• Access tokens are stored in encrypted form (AES-256-GCM).
• When an account is disconnected from the Service, the stored tokens and associated session data are deleted.
• We apply reasonable technical and organizational measures to protect the information against unauthorized access, alteration, or destruction.

6. Data Retention

Tokens and basic account information are retained only while the account connection is active, and are deleted upon disconnection. You can also revoke the Service's access at any time from your TikTok app settings.

7. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date.

8. Governing Law

This Privacy Policy is governed by the laws of Japan.

9. Contact

For questions about this Privacy Policy or our data practices, please contact:
Appnics LLC
Email: h.sumizaki@appnics.io