Privacy Policy
This notice describes the current local sandbox installation of Primeways Publish, administered by the Primeways developer organization and the operator of this computer. It does not describe a public cloud service.
Information handled
- Account names, usernames, operating regions, and notes that an operator enters.
- TikTok account identifiers, display names, authorization scopes, and token expiry information returned through authorized TikTok APIs. Access depends on the permissions granted by TikTok and the account owner.
- OAuth access and refresh tokens, and the application's client secret, stored in encrypted form on this computer.
- Video files explicitly imported by the operator, file hashes and metadata, draft descriptions, schedules, and operation records.
- An essential session cookie, with a lifetime of up to 24 hours, and short-lived OAuth state/PKCE records used to protect authorization.
Purpose and storage
Information is used to manage this local workspace, connect the account selected by its owner, keep authorization tokens current, and perform explicitly confirmed platform actions when enabled. The database and imported video copies remain in this installation's local data directory. The application does not request or store the TikTok account password.
Sharing and external requests
The application contacts TikTok's official authorization and API services for the requested integration. Importing a file or saving a draft does not transmit the video to TikTok. When a future upload is explicitly enabled and confirmed, the selected content is sent to TikTok for processing under TikTok's policies. This installation does not contain advertising analytics or a separate third-party tracking service.
Security and retention
Secrets use AES-256-GCM encryption and the startup script limits access to the local data directory. The encryption key is also held on this computer; this does not protect against compromise of the current Windows account or an administrator. Workspace records remain until removed by the installation's administrator. Archiving an account is a local soft archive, not complete deletion.
Revocation and removal
An account owner can revoke the application in TikTok's connected-app settings. The workspace's official-revocation action requests TikTok revocation and removes that account's local credential record after confirmation. Pending schedules are cancelled. Previously published TikTok posts are not deleted by revocation. To remove local account details, video copies, or the entire installation, contact the Primeways organization administrator or the operator of this computer; they can stop the service and remove the relevant local data. Deleting imported copies does not delete original source files.
Contact and updates
For this internal test installation, contact your Primeways developer-organization administrator through your existing internal contact channel. A public support contact and cloud-service policy have not been established. This notice must be reviewed and updated before any external service is offered or materially different data processing is enabled.