Privacy Policy

1. Data we collect

Upload24 account data

Our authentication provider, WorkOS/AuthKit, processes your sign-in. We receive and store the account identifier and email address needed to create and secure your Upload24 account. We may also display profile details supplied through the authentication service, such as your name and email-verification status.

Connected social-account data

When you connect a platform through OAuth, we receive only the data and permissions you approve. Depending on the platform and permissions, this may include a platform account ID, display name, avatar, granted scopes, token-expiry information, access and refresh tokens, account statistics, post identifiers, public post metrics, and publishing-status events. We do not ask for or store your TikTok or YouTube password.

Content and publishing data

We process videos you upload and the information needed to publish them, including titles, descriptions, tags, destinations, schedules, time zones, visibility, interaction settings, commercial-content disclosures, AI-generated-content settings, and platform-specific metadata. We also store operational records such as upload status, processing errors, publish IDs, post IDs, and public post URLs.

Analytics data

If you connect an account with the relevant permissions, we collect account-level and post-level performance metrics made available by the platform. These may include follower, following, like, and video counts, and views, likes, comments, and shares for posts managed through Upload24. We use these values to show current metrics and historical snapshots in your dashboard.

Billing and support data

Paddle processes checkout and payment-card information. We receive billing records needed to manage your plan, such as customer, transaction, subscription, plan, status, and renewal details. We do not receive or store full card numbers or card security codes. If you contact us, we process your message and the contact details you provide.

Technical and usage data

We and our service providers may process IP address, browser and device information, timestamps, pages and features used, cookie choices, request metadata, diagnostic events, and security logs. We use this information to operate, secure, troubleshoot, and improve the Service.

2. TikTok data and permissions

When you connect TikTok, TikTok shows the permissions requested by Upload24 and you decide whether to grant them. Upload24 may process the following TikTok data for the stated purposes:

• Basic account information, including open ID, display name, and avatar, to identify the connected account and show which account will receive a post.
• Account statistics, including follower, following, likes, and video counts, to provide account analytics when you authorize user.info.stats.
• Post identifiers and public performance metrics for posts managed through Upload24, to provide publishing history and analytics when you authorize video.list.
• OAuth credentials, granted scopes, and expiry information, to maintain the connection and refresh authorization without requiring you to sign in for every scheduled post.
• Publishing and webhook data, including publish or post IDs, processing status, and failure reasons, to carry out posts and show their current status.

If you authorize direct posting, Upload24 sends TikTok the video and the caption, privacy, interaction, disclosure, and other settings you review and select. For scheduled posts, TikTok may retrieve the video from a time-limited signed URL on Upload24's private media storage at the time you selected. Scheduling a post does not give Upload24 permission to publish different content or use a different account.

We use TikTok data only to provide and secure the features you request. We do not sell TikTok data, use it for targeted or cross-context behavioural advertising, or share it with data brokers. You can disconnect TikTok in Upload24 or revoke access in TikTok at any time.

3. How and why we use data

We process personal data to:

• create, authenticate, and administer your Upload24 account;
• connect, display, refresh, and disconnect accounts you authorize;
• store, schedule, transmit, publish, and monitor content at your direction;
• provide upload history, status information, analytics, billing, and support;
• operate, protect, debug, and improve the Service and prevent abuse;
• comply with law and enforce our agreements.

Where applicable, our legal bases are performing our contract with you, your consent, compliance with legal obligations, and our legitimate interests in operating and securing the Service. Where processing relies on consent, you may withdraw it at any time without affecting processing already performed.

4. How we share data

We disclose data only as needed for the Service, including to:

• TikTok and Google/YouTube, when you connect an account, request platform data, or direct us to publish content;
• WorkOS/AuthKit, for authentication and account security;
• Cloudflare, for media storage, delivery, security, and networking;
• Paddle, for checkout, subscription, tax, and payment processing;
• Google Analytics, Microsoft Clarity, and Cookiebot/Usercentrics, for consent management and optional website analytics as described below;
• hosting, database, caching, queueing, logging, monitoring, customer-support, and professional-service providers bound to process data for us;
• authorities or other parties when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or complete a business reorganization with appropriate safeguards.

We do not sell personal data. We do not allow service providers to use connected-platform data for their own advertising purposes.

5. Cookies and analytics

We use necessary technologies for authentication, security, language preferences, and your consent choices. With your permission, we use Google Analytics and Microsoft Clarity to understand how the website is used and improve it. Optional analytics is not used to build advertising profiles from TikTok data. You can change your choices through the cookie banner or your browser settings.

6. Retention and deletion

We keep data only for as long as needed for the purposes described above:

• uploaded source videos are marked for deletion one day after the relevant scheduled or immediate publishing time; routine file cleanup runs daily;
• historical analytics snapshots older than 90 days are deleted through routine daily cleanup, while current metrics and account or upload records may remain while your account is active;
• platform credentials remain while the connection is active and are deleted when you disconnect the account, authorization is revoked, or they are otherwise no longer needed;
• account, billing, security, support, and transaction records remain while needed to provide the Service and for legitimate legal, tax, fraud-prevention, security, and dispute purposes.

Disconnecting TikTok revokes the authorization, deletes the stored OAuth credentials, and prevents new publishing through that connection. Upload24 also attempts to remove the stored profile image and stop posts that have not entered processing. Historical upload and analytics records may remain until you delete your Upload24 account or request deletion. To request deletion of your Upload24 account or remaining TikTok-derived records, email [email protected] from your registered email address. We may retain limited records where required by law or needed to protect legal claims and security.

7. Security and international transfers

We use technical and organizational measures designed to protect personal data, including access controls, HTTPS in transit, restricted credential access, signed media URLs, and monitoring. No online service can guarantee absolute security, so keep your account and API credentials confidential and contact us if you suspect unauthorized access.

Our providers and social platforms may process data in countries other than your own. Where required, we use recognized transfer mechanisms and contractual safeguards. Your use of a connected platform also remains subject to that platform's international-transfer notices.

8. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing; receive a portable copy of data; withdraw consent; and complain to a data-protection authority. You may also:

• disconnect a social account from the Upload24 accounts page;
• revoke Upload24 in the connected platform's own settings;
• change optional cookie consent through the cookie banner;
• cancel a subscription through the billing page;
• request access or deletion by emailing us from your registered address.

We may need to verify your identity and clarify the scope of a request. We will not discriminate against you for exercising applicable privacy rights.

9. Children

The Service is intended for people aged 18 or older. We do not knowingly collect personal data from children. If you believe a child has provided data to us, contact us so we can investigate and delete it where required.

10. Changes and contact

We may update this Policy to reflect changes to the Service, providers, or law. We will post the updated version here and change the "Last updated" date. We will provide additional notice when required by law.