Official Legal Document

Privacy Policy for Post Automator

Application Name: Post Automator | Last Updated: October 9, 2026 | Effective Date: October 9, 2026 | Developer/Operator: Covenant Bright

1. Introduction & Overview

Welcome to Post Automator ("we", "us", "our", or the "Application"). Post Automator is a professional desktop social media scheduling and content publishing console developed and operated by Covenant Bright (accessible via our official domain https://post-automator.pages.dev/).

We respect your privacy and are committed to protecting any personal data you share with us. This Privacy Policy explains in complete transparency what information Post Automator collects, how that information is used, how it is stored and protected, and how you can exercise full control over your data in accordance with applicable global data privacy regulations, including the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the TikTok Developer Terms of Service.

Core Privacy Guarantee: Post Automator is built on a local-first architecture. We do not sell, rent, monetize, or broker your personal information, videos, or account credentials to third parties or advertising networks. Your credentials are encrypted on your local machine.

2. Integration with TikTok and Third-Party Platforms

Post Automator integrates with the official TikTok Content Posting API, YouTube Data API, Meta Graph API (Instagram & Facebook), and related developer services to facilitate video uploads and social scheduling.

When you connect your TikTok account to Post Automator, you are authenticated via TikTok's official OAuth 2.0 authorization dialogue. Post Automator requests only the minimal permissions required to provide content publishing capabilities:

user.info.basic: Read access to your TikTok user identity (open_id, display name, avatar URL) solely to identify the connected account within the Post Automator dashboard so you can choose which account to publish to.
video.upload: Authorization to upload video files to TikTok's servers on your explicit instruction.
video.publish: Authorization to finalize and publish the video post with your selected caption, privacy setting, and custom video cover frame timestamp.

By using Post Automator with TikTok, you acknowledge that your use of TikTok services is also subject to the TikTok Privacy Policy and TikTok Terms of Service.

3. Information We Collect and Process

A. Information You Explicitly Provide

Video Files and Media Assets: Video files, images, and companion thumbnail artwork selected by you from your local storage for scheduling and publishing.
Post Metadata: Titles, descriptions, captions, hashtags, custom cover frame offset timestamps (e.g. video_cover_timestamp_ms), and privacy configurations (Public, Friends, Private).
Support Communications: If you contact us via email (covenantbright121@gmail.com), we receive your email address and message contents to assist you.

B. Information Received from TikTok and Social APIs

Account Identifiers: TikTok Open ID, Union ID, creator display name, and avatar image URL.
Authentication Tokens: OAuth 2.0 Access Tokens and Refresh Tokens issued by TikTok upon user authorization.
Publishing Status: Transaction identifiers and post status codes (e.g., upload initialized, processing, publish success or error) provided by TikTok's status query endpoints.

C. Information We DO NOT Collect

We do not collect your TikTok account passwords. All logins occur directly on TikTok's secure authorization domain (tiktok.com).
We do not collect payment card information, bank account details, or government identification numbers.
We do not track your browsing history or collect third-party analytics trackers on the Post Automator website.

4. How We Use Your Information

We process your data strictly for legitimate operational purposes to provide the requested software functionality:

Executing Video Publishing: Transmitting your designated video file, cover frame offset, and post caption to the official TikTok Content Posting API endpoints upon your scheduled trigger.
Account Management: Displaying your connected social accounts and channels in the Post Automator user interface.
Token Refresh: Automatically refreshing expired OAuth access tokens using standard OAuth refresh token exchange to prevent service disruption.
Cloud Offline Scheduling (Optional): If you choose the cloud-scheduling feature, scheduling metadata and encrypted credentials are used solely to dispatch the scheduled post to TikTok at the specific date and time requested while your local computer is powered off.
Technical Support: Diagnosing API error responses (e.g., rate limit exceeded, unsupported aspect ratio) and providing user assistance.

5. Data Storage, Security & Encryption

Security is fundamental to the architecture of Post Automator:

Local Operating System Keychain: On your local machine (macOS / Windows), sensitive credentials including OAuth tokens and API secrets are stored using native OS-level secure credential storage (such as Apple Keychain Services) or AES-256 encrypted local SQLite databases.
In-Transit Encryption: All communications between Post Automator and TikTok API endpoints, as well as our Cloudflare edge services, are strictly enforced via modern TLS 1.3 / HTTPS encryption.
No Cloud Aggregation: We do not operate a centralized, unencrypted database storing user social media credentials or private videos.

6. Data Retention and Deletion (Your Rights)

You maintain complete control over your data at all times. In compliance with GDPR Article 17 and CCPA deletion standards:

A. Revoking Post Automator Access via TikTok

You can instantly revoke Post Automator's access to your TikTok account at any time directly through the TikTok application:

Open the TikTok app on your mobile device.
Go to your Profile and tap the menu icon (☰) in the top-right corner.
Select Settings and privacy > Security & permissions.
Tap Manage app permissions.
Select Post Automator and tap Remove access.

Once removed, Post Automator's access tokens are immediately invalidated by TikTok, preventing any further communication with your account.

B. Deleting Local and Cloud Data

Within the Post Automator desktop application, disconnecting an account immediately purges all associated tokens and cached metadata from your local Keychain and SQLite storage.

To request the deletion of any scheduling jobs, logs, or associated records from our edge servers, you may submit a request by emailing covenantbright121@gmail.com with the subject line "Post Automator Data Deletion Request". All requests are verified and fulfilled within 24 business hours free of charge.

7. Children's Privacy (COPPA Compliance)

Post Automator is designed for content creators and social media professionals. Our software is not directed to individuals under the age of 13 (or under 16 in the European Union). We do not knowingly collect personal information from children. If we become aware that personal data of a minor has been collected without parental consent, we will promptly delete such information.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our software features, legal requirements, or platform API policies. Any updates will be published immediately on this page (https://post-automator.pages.dev/privacy-policy) with an updated "Last Updated" date. We encourage you to review this policy periodically.

9. Contact Information & Legal Inquiries

If you have any questions, concerns, feedback, or data privacy requests regarding this Privacy Policy or Post Automator, please contact the developer directly:

Lead Developer & Operator: Covenant Bright
Application: Post Automator
Official Website: https://post-automator.pages.dev/
Support & Legal Inquiries: covenantbright121@gmail.com