Privacy Policy

This policy explains what information Postramen (“we”, “us”), available at https://postra.men, collects when you use the service, how we use it, and the choices you have. Postramen is a tool that lets you connect your TikTok accounts and publish or schedule content to them.

Information we collect

• Account information: your email address and a securely hashed password.
• TikTok account data: when you connect TikTok, we receive your TikTok open ID, display name, username and avatar URL, plus OAuth access and refresh tokens that allow Postramen to act on your behalf within the permissions you grant (user.info.basic, video.upload, video.publish). We also read your creator posting settings (such as the privacy options available to you) at the time you post.
• Content you upload: videos, photos, captions and post settings you submit for publishing, and the status TikTok reports back (such as the post ID).
• API keys: we store a hash of each key you create and when it was last used.
• Technical logs: basic request logs (time, path, response time) used to operate and secure the service.

How we use information

• To publish, schedule and send to your TikTok inbox the content you choose, using the settings you choose.
• To show you your connected accounts and the status of your posts.
• To keep your connection working by refreshing TikTok tokens.
• To secure the service and troubleshoot problems.

We use TikTok data only to provide these features. We do not sell your data, use it for advertising, or share it with third parties, except with TikTok itself as needed to publish your content, or when required by law.

Storage and security

Data is stored on servers we operate. TikTok access and refresh tokens are encrypted at rest with AES-256-GCM. Passwords are hashed with bcrypt. Uploaded media is stored so it can be delivered to TikTok and is served only from unguessable URLs.

Retention and deletion

• Disconnecting TikTok: when you disconnect an account in your dashboard, we revoke Postramen's access token with TikTok and erase the stored tokens immediately.
• You can also remove Postramen's access at any time from TikTok's app settings (Settings and privacy → Security and permissions → Apps and services).
• Deleting your data: email [email protected] from your account's email address to have your account, connected account data and uploaded media permanently deleted. We complete deletion requests within 30 days.

Cookies

We use a single session cookie to keep you logged in and a short-lived cookie for on-screen messages. We do not use advertising or tracking cookies.

Children

Postramen is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their data.

Changes

We may update this policy. If changes are significant, we will notify you by email or in the app before they take effect.

Contact

Questions or requests: [email protected].