Privacy Policy
1. Scope and operator
This policy explains how Sofia Engine handles information when preparing AI-generated lifestyle content, organizing publishing, and analyzing content performance.
Operator: Sofia Engine. Contact: [email protected].
2. Current status and information processed
The TikTok sandbox integration processes the authorized account identifier and display name, encrypted access and refresh tokens, your reviewed photo and caption, and upload identifiers and status. It requests user.info.basic and video.upload. This version does not collect performance metrics.
Content preparation involves prompts, reference images, generated media, captions, and related workflow information. If you contact the operator, your contact details and request are processed to respond.
3. Purposes and service providers
Information is used to prepare content, support authorized publishing, evaluate content performance, maintain the service, and respond to requests. OpenAI API processes submitted content for AI generation and processing. Cloudflare provides hosting and infrastructure and may process technical request information, such as IP addresses, for delivery and security. TikTok processes the account authorization, submitted photo and caption, and upload status under its own policies. These providers may process information outside your country.
The application uses an essential secure session cookie for seven days and a short-lived cookie for login security. It includes no advertising trackers or analytics scripts. The prepared review image is publicly accessible so that TikTok can retrieve it.
4. Retention and disconnection
Sessions expire after seven days; expired session records are purged on subsequent logins. Tokens are encrypted on the server and are never sent to browser JavaScript. Disconnect TikTok deletes the current session and associated upload records and attempts to revoke TikTok access. If revocation fails, the application tells you to revoke access in TikTok settings. Upload status records are retained to prevent duplicate submissions until disconnection or a deletion request. Other content and correspondence are retained only as needed for their stated purpose or applicable legal obligations. Disconnecting Sofia Engine does not remove content already published on TikTok; that content can be managed on TikTok.
5. Your choices and requests
You may revoke Sofia Engine’s access through TikTok’s connected-app controls. Contact the operator to request access, correction, or deletion of personal information, or to raise a privacy concern. Requests may require proportionate verification of account ownership. Rights and any necessary retention exceptions depend on applicable law.
6. Security and updates
Access to service data should be limited to authorized persons. No transmission or storage system is completely secure. This policy will be updated as the integration develops, with changes and a revised date published here.