1. Information Collection

1.1 Information We Collect

We collect the following types of information:

Information Type	Specific Content	Collection Method
Account Information	Username, email address, password (encrypted)	Provided during registration
TikTok Account Info	TikTok user ID, display name, avatar URL	OAuth authorization process
Access Tokens	TikTok access tokens, refresh tokens	OAuth authorization process
Uploaded Content	Video files, titles, descriptions	Provided during upload
Usage Data	Upload records, timestamps, status	Automatically collected
Technical Information	IP address, browser type, device information	Server logs

1.2 Information We Do Not Collect

• TikTok passwords (we use OAuth, no access to your TikTok password)
• Financial information or payment information
• Sensitive personal information (such as ID numbers, social security numbers, etc.)
• Personal communications without consent

2. Information Use

2.1 Purpose of Use

We use the collected information for:

• Service Provision: Process your account, manage TikTok connections, upload videos
• Authentication: Verify your identity and protect account security
• Functionality: Maintain TikTok OAuth connections, execute video upload operations
• Service Improvement: Analyze usage patterns to improve features and user experience
• Communication: Send service-related notifications and updates
• Compliance: Comply with legal obligations and protect our rights

2.2 Legal Basis for Data Processing

• Contract Performance: Necessary to provide the services you requested
• Consent: You explicitly consent to our processing of your data
• Legitimate Interests: Service improvement, fraud prevention, security assurance
• Legal Obligations: Compliance with applicable laws and regulations

3. Information Sharing and Disclosure

3.1 Third-Party Sharing

We may share your information with the following third parties:

• TikTok:
  • Shared content: Video files, metadata (title, description)
  • Sharing purpose: Upload videos to your TikTok account
  • Data flow: From our servers to TikTok API
• Service Providers:
  • Cloud hosting services (for data storage)
  • Analytics tools (for service improvement)
  • All providers are bound by confidentiality agreements

3.2 What We Will Not Do

• ❌ Sell your personal information to advertisers
• ❌ Rent or sell your data to third parties
• ❌ Publicly disclose your content without authorization
• ❌ Use your information for purposes beyond the terms of service

3.3 Disclosure as Required by Law

We may disclose your information under the following circumstances:

• Compliance with laws, regulations, or court orders
• Response to lawful requests from government or law enforcement agencies
• Protection of our or others' rights, property, or safety
• Prevention of fraud or security threats

4. Data Security

4.1 Security Measures

We take the following measures to protect your data:

• Encryption: Passwords are stored using SHA-256 hash encryption
• Transmission Security: Use HTTPS to encrypt data transmission
• Access Control: Restrict access to personal data
• Token Security: TikTok access tokens are securely stored
• Regular Audits: Regularly review the effectiveness of security measures
• Vulnerability Fixes: Timely updates and patches for security vulnerabilities

4.2 Data Storage

• Data is stored on secure servers
• Regular backups to prevent data loss
• Video files may be deleted after successful upload

4.3 Security Limitations

Despite our efforts to protect your information, please note that:

• Internet transmission is not 100% secure
• You are responsible for protecting your account password
• You should immediately report any security breaches

5. Data Retention

5.1 Retention Period

Data Type	Retention Period
Account Information	Account active period + 30 days
TikTok Binding Info	Until user unbinds or account deletion
Upload Records	12 months
Video Files	Immediately or within 24 hours after upload completion
Log Data	90 days

5.2 Data Deletion

We will delete your data under the following circumstances:

• You request account deletion
• Data is no longer needed for its original purpose
• You withdraw consent (where applicable)
• Retention period has expired

6. Your Rights

6.1 Access and Control

You have the following rights regarding your personal information:

• Right to Access: View the personal information we hold about you
• Right to Rectification: Update or correct inaccurate information
• Right to Erasure: Request deletion of your personal information
• Right to Restriction: Restrict certain processing activities
• Right to Portability: Receive your data in a structured format
• Right to Object: Object to certain types of data processing
• Withdraw Consent: Withdraw your consent at any time

6.2 Exercising Rights

To exercise these rights, you can:

• Log in to your account and update your profile
• Manage TikTok bindings in account settings
• Contact our support team
• Email us at: privacy@tiktok-manager.example.com

7. Cookies and Tracking Technologies

7.1 Cookies We Use

• Session Cookies: Maintain login status (required)
• Functional Cookies: Remember your preference settings
• Security Cookies: Prevent CSRF attacks

7.2 Cookie Management

You can manage cookies through your browser settings:

• Accept or reject cookies
• Delete existing cookies
• Block third-party cookies

Note: Disabling cookies may affect service functionality.

8. Third-Party Services

8.1 TikTok

Our service integrates with TikTok. When you authorize a TikTok connection:

• You are subject to TikTok's privacy policy
• TikTok may independently collect and process your information
• Please review TikTok's Privacy Policy

8.2 Other Links

Our service may contain links to third-party websites. We are not responsible for the privacy practices of these websites.

9. Children's Privacy

Our service is not intended for children under 18. We do not knowingly collect personal information from children. If we discover that we have collected information from a child, we will delete it immediately.

10. International Data Transfers

Your information may be transferred to servers outside your country/region. We ensure that:

• Data transfers comply with applicable laws
• Appropriate security measures are in place
• Recipients provide adequate data protection

11. Data Breach Notification

In the event of a data breach, we will:

• Assess the incident within 72 hours
• Notify affected users promptly
• Report to relevant regulatory authorities
• Take measures to mitigate damage

12. Changes to Privacy Policy

We may update this privacy policy from time to time. After changes:

• We will update the "Last Updated" date
• Significant changes will be notified via email or website notice
• Continued use of the service constitutes acceptance of the updated policy

13. Contact Us

If you have any questions, comments, or complaints about this privacy policy:

• Privacy Email: privacy@samsv.com
• Support Email: support@samsv.com
• Website: www.samsv.com

14. Regulatory Authority

If you have concerns about our privacy practices that cannot be resolved with us, you have the right to lodge a complaint with the data protection regulatory authority in your location.