Privacy Policy

1. Introduction

ShipPost ("we," "us," or "our") operates a social media scheduling platform available at ship-post.com (the "Service"). ShipPost enables users to schedule and publish video and photo content to third-party social media platforms, including TikTok.

This Privacy Policy describes the types of personal information we collect when you use our Service, how we use and protect that information, and the choices you have regarding your data. By accessing or using ShipPost, you agree to the collection and use of information in accordance with this policy.

This policy applies to all users of the ShipPost platform, including those who connect their TikTok accounts via TikTok's Login Kit and Content Posting API.

2. Information We Collect

We collect information necessary to provide the Service. The categories of information we collect include:

TikTok Account Information

When you connect your TikTok account through OAuth 2.0 authorization, we receive and store the following data provided by TikTok:

• TikTok User ID — A unique identifier associated with your TikTok account.
• Display Name — Your public display name on TikTok.
• Avatar URL — The URL of your TikTok profile picture.

OAuth Tokens

We store the OAuth access token and refresh token issued by TikTok during the authorization process. These tokens allow ShipPost to perform actions on your behalf, such as publishing content to your TikTok account.

Uploaded Content

We store the video and photo files you upload to ShipPost for scheduling purposes. This content is retained on our servers until it has been successfully posted to TikTok or you delete it.

Scheduling Metadata

We collect and store data related to your scheduled posts, including:

• Scheduled date and time of publication
• Post captions and descriptions
• Post status (queued, posted, failed, cancelled)
• TikTok post identifiers returned after successful publication
• Any error messages associated with failed posts

Usage Data

We may collect standard usage data such as IP addresses, browser type, pages visited, and timestamps of interactions with the Service. This data is used solely for maintaining and improving the Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Authentication via TikTok Login Kit: We use TikTok's Login Kit to verify your identity and establish a secure connection between your TikTok account and ShipPost. This eliminates the need to share your TikTok credentials directly with our Service.
• Content Posting via Content Posting API: We use TikTok's Content Posting API to upload and publish your scheduled video and photo content to TikTok at the date and time you specify.
• Token Management: We use stored OAuth tokens to maintain a persistent connection with your TikTok account and to automatically refresh tokens when they expire, ensuring uninterrupted service.
• Scheduling and Queue Management: We process your scheduling metadata to queue content for publication, track post statuses, and provide you with updates on whether your content has been successfully posted.
• Service Improvement: We may use aggregated, non-identifiable usage data to diagnose technical issues, improve performance, and enhance the user experience.

4. How We Share Your Information

We do not sell, rent, trade, or otherwise share your personal information with third parties for their own purposes. Your data is transmitted only in the following circumstances:

• TikTok: When you schedule or post content, your uploaded media and associated metadata are transmitted to TikTok's servers via their official API. This transmission is initiated solely at your direction and is necessary to fulfill the core function of the Service.
• Legal Compliance: We may disclose your information if required to do so by law, or if we believe in good faith that such action is necessary to comply with a legal obligation, protect and defend our rights or property, prevent fraud, or protect the personal safety of users of the Service or the public.
• Service Providers: We may engage trusted service providers (such as hosting providers) who process data on our behalf under strict confidentiality obligations. These providers are authorized to use your information only as necessary to provide services to us.

5. Data Security and Retention

Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encrypted Token Storage: OAuth access tokens and refresh tokens are stored using encryption to prevent unauthorized access.
• HTTPS Encryption: All data transmitted between your browser and our servers is encrypted using TLS/HTTPS.
• Access Controls: Access to personal data is restricted to authenticated users. Administrative access to infrastructure is limited and protected by strong authentication.
• Secure Infrastructure: Our application runs in containerized environments with non-root user permissions and follows security best practices for deployment.

Retention Policy

We retain your personal information for as long as your account remains active and as necessary to provide the Service. Specifically:

• Account Data: Retained for the duration of your active account.
• OAuth Tokens: Retained and refreshed as needed while your account is connected. Deleted upon disconnection.
• Uploaded Content: Retained until successfully posted or deleted by you. Posted content may be removed from our servers after successful publication.
• Scheduling Metadata: Retained for record-keeping and to provide you with a history of your scheduled and published posts.

Deletion Requests

You may request deletion of your personal data at any time by contacting us at sendship.io@gmail.com. Upon receiving a verified request, we will delete your personal data within 30 days, except where retention is required by law. You may also disconnect your TikTok account at any time through the Service, which will revoke our access tokens and cease all posting activity on your behalf.

6. Integration With Other Services

ShipPost integrates with the following third-party services to provide its core functionality:

TikTok Login Kit

We use TikTok's Login Kit to authenticate users via OAuth 2.0. When you choose to connect your TikTok account, you are redirected to TikTok's authorization page where you grant ShipPost permission to access your basic profile information and post content on your behalf. We only request the minimum scopes necessary to provide the Service.

TikTok Content Posting API

We use TikTok's Content Posting API to upload and publish your scheduled content. This API allows ShipPost to transmit your video and photo files along with captions and other metadata directly to TikTok for publication on your profile.

By connecting your TikTok account to ShipPost, you acknowledge that certain data will be shared with TikTok as necessary to publish your content. You may revoke this access at any time by disconnecting your account within ShipPost or by revoking access through your TikTok account settings.

7. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this policy, we will:

• Update the "Last updated" date at the top of this page.
• Post the revised policy on the Service at ship-post.com/privacy-policy.
• Where required by applicable law, provide additional notice of significant changes (such as via email or an in-app notification).

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes to this policy constitutes your acceptance of the updated terms.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• Email: sendship.io@gmail.com
• Website: ship-post.com

We will respond to your inquiry within a reasonable timeframe, typically within 30 days.