Privacy Policy

1. Controller and contact

Zenviofy is a web-based automation service operated from Germany. Privacy questions and data-protection requests can be sent to contact@zenviofy.com.

2. Purpose of the service

Zenviofy helps authorized users connect their own TikTok account and upload their own videos to TikTok drafts. The service is not intended to collect data about unrelated third parties.

3. Data processed

Depending on the features used, Zenviofy may process:

• basic account information returned by an authorized platform integration;
• OAuth access and refresh tokens required to maintain the authorized connection;
• video files, captions, draft-upload settings and technical upload metadata supplied by the authorized user;
• technical request, error and security information needed to operate and troubleshoot the integration.

4. TikTok integration

When an authorized user connects TikTok, authorization is performed through TikTok's official OAuth flow. The service uses user.info.basic to display the connected profile and video.upload to upload the user-selected video to TikTok drafts. The current workflow does not directly publish videos. A video is transmitted only after the account has been authorized and the user explicitly confirms the upload.

5. Legal bases

Where the GDPR applies, processing is based on the user's request to use the service, consent where consent is required, and legitimate interests in securely operating and protecting the service. The exact legal basis depends on the relevant processing activity.

6. Sharing of data

Data is not sold. Information is shared only with service providers or connected platforms when this is necessary to provide the requested functionality, host the service, maintain security, or comply with law. Connected-platform data is handled according to the authorization granted by the user.

7. Storage and retention

Data is retained only for as long as needed for the relevant workflow, security, troubleshooting or legal obligations. OAuth credentials are removed or invalidated when the connection is revoked or when they are no longer required.

8. Security

Reasonable technical and organizational safeguards are used to reduce unauthorized access, alteration, disclosure or loss. No internet-based system can be guaranteed to be completely secure.

9. Your rights

Where applicable, individuals may have rights of access, correction, deletion, restriction, objection and data portability, as well as the right to withdraw consent and lodge a complaint with a competent supervisory authority.

10. Deletion and revocation

The user can revoke a connected platform's authorization through that platform's account settings where available. Requests concerning information held by Zenviofy can be sent to contact@zenviofy.com.

11. Changes

This policy may be updated when the service, integration or legal requirements change. The current version is published on this page with its revision date.