Legal
Privacy Policy
Last updated: September 20, 2026
1. Scope
This policy explains what data LocaleFlow Studio ("the Service") collects when it connects to your social accounts, why it is collected, and how it can be deleted. The Service is a private tool operated by an individual developer, used only with accounts that developer owns.
2. Data the Service collects
TikTok account data, requested through TikTok's Login Kit with the user.info.basic scope: open ID, union ID, display name, avatar URL and basic profile statistics. The OAuth access token and refresh token issued by TikTok are also stored.
Publishing data, submitted through the Content Posting API with the video.publish scope: the IDs, status values and error messages returned for posts.
Content processed in the workspace: source links, captions, images, the localized versions generated from them, and the captions and hashtags approved for publishing.
Operational records such as scheduling jobs, execution history and local logs.
3. How the data is used
To authenticate the account and keep the connection alive.
To publish only the posts that have been explicitly reviewed and approved.
To display publishing status and history in the workspace.
To generate localized text and media from the source material.
The data is not used for advertising or profiling, and is never sold.
4. Where the data is stored
All data stays on the operator's own computer. OAuth tokens and API client credentials are encrypted at rest with AES-256-GCM. No copy of this data is stored on cloud infrastructure operated by us.
5. Sharing
Data is not shared with third parties, except for the platform APIs required to carry out an action the operator requested, such as sending an approved post to TikTok's Content Posting API, and the network infrastructure needed to reach those APIs.
The Service contains no advertising SDKs, no third-party analytics trackers and no data brokers.
6. Retention and deletion
Disconnecting an account in the Studio revokes the stored token and deletes the encrypted credential file for that account, so the Service can no longer act on it.
Access can also be revoked from TikTok: open TikTok, go to Settings and privacy, then Security and permissions, then Manage app permissions, and remove the app.
Drafts, localized versions and media files can be deleted from the Studio; deleting a draft removes its generated assets.
7. Cookies and tracking
The Service is not a public website. It sets no advertising cookies and runs no third-party analytics.
8. Children
The Service is not intended for, and is not offered to, anyone under 13 years of age.
9. Changes
This policy may be updated from time to time. The "last updated" date below reflects the current version.