Privacy Policy

Last updated: February 2025 · Effective date: February 2025

1. Introduction

Looppost ("we", "our", or "us") operates looppost.xyz (the "Service"). This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal data.

By using Looppost, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

2. Data We Collect

2.1 Data from TikTok (via OAuth)

When you connect your TikTok account, we request the following scopes and receive the associated data:

Scope	Purpose	Data stored
`user.info.basic`	Identify you and display your profile	TikTok user ID (open_id), display name, profile picture URL
`video.list`	Fetch your published videos for analytics	Video IDs, titles, view/like/comment/share counts (stored in snapshots)
`video.upload`	Upload carousel images to TikTok	Not stored — used transiently during upload
`video.publish`	Send carousels to your TikTok inbox	Publish ID returned by TikTok (stored for status tracking)

We also store your access token and refresh token to act on your behalf. We do not store your TikTok password.

2.2 Content you provide

Images you upload for carousels (stored in /uploads/ on our server)
Post captions and scheduled publication times
Privacy settings chosen for each post

2.3 Analytics data

We collect daily snapshots of your video performance (views, likes, comments, shares) via the TikTok API to display growth curves in the Analytics section. This data is stored locally on our server and is never shared.

2.4 Session data

We use server-side session cookies to keep you logged in. Sessions expire after 30 days of inactivity.

3. How We Use Your Data

Authenticate you via TikTok OAuth
Publish or schedule TikTok carousels on your behalf
Display analytics for your posts (J0–J30 views growth)
Maintain your login session

We do not:

Sell your data to third parties
Use your data for advertising purposes
Share your data with any third party except TikTok (for API calls)
Access your TikTok account outside of the scopes you authorized

4. Data Retention

Your data is retained as long as your account is active. You can request full deletion at any time — see Data Deletion.

Uploaded images are deleted from our server automatically after a post is published or cancelled. Session data expires after 30 days.

5. Third-Party Services

Looppost integrates with the TikTok API. Your use of Looppost is also governed by:

We do not use any other third-party analytics, advertising, or tracking services.

6. Security

All data is transmitted over HTTPS
Access tokens and refresh tokens are stored in a secured SQLite database on our server
Session data is stored server-side (not in the browser)
Uploaded images are accessible only via user-specific paths

7. Your Rights

You have the right to:

Access the data we hold about you
Correct inaccurate data
Delete your account and all associated data — see Data Deletion page
Revoke TikTok access at any time from your TikTok account settings
Export your data upon request

8. Children's Privacy

Looppost is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe we have collected data from a child, contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy. We will notify users of material changes by updating the "Last updated" date. Continued use of the Service constitutes acceptance of the updated Policy.

10. Contact

For privacy-related requests: privacy@looppost.xyz

For data deletion requests: looppost.xyz/data-deletion