Privacy Policy

This policy explains how CML Studio collects, uses, stores, and protects information when you use the service.

Information we process

We process CML Studio account details, authentication records, preferences, captions, publishing settings, commercial-content disclosure choices, uploaded media metadata, publishing records, status information, and technical logs needed to operate and secure the service.

TikTok OAuth and authorized accounts

You may connect a TikTok account through TikTok OAuth. CML Studio processes necessary authorized account information such as TikTok open_id, display name, username, avatar URL, authorization status, and token expiration information. CML Studio does not receive or store your TikTok password.

Tokens and API use

OAuth access and refresh tokens are stored server-side using authenticated encryption. Tokens are used only to perform TikTok API operations that you actively request, such as loading current publishing options, transferring a video, or checking publishing status. Tokens are not exposed through the Dashboard.

Uploaded videos

Videos may be stored temporarily on the server for validation, private preview, and transfer to TikTok. Uploaded files are protected from public access. A file is removed when TikTok confirms successful publishing. A daily cleanup also removes files more than 72 hours old when they are not attached to a publishing job that is still initializing, uploading, or processing. Do not upload content you lack the right to use.

Publishing records, logs, and cookies

We retain publishing settings, disclosure choices, job status, errors, and necessary records so you can review publishing history. Limited logs may include IP address, time, browser information, endpoint, HTTP status, TikTok error metadata, request identifiers, and security events, but not access tokens, refresh tokens, authorization headers, or client secrets. Essential secure cookies maintain signed-in sessions.

How information is used

Information is used to authenticate access, provide private media previews, perform requested publishing operations, prevent abuse, maintain publishing history, support account disconnection, and diagnose errors.

Security

Safeguards include HTTPS, access controls, secure cookies, encrypted token storage, protected upload storage, and restricted file permissions. No system can guarantee absolute security.

Retention, disconnect, and deletion

Data is retained only as reasonably needed for service operation, security, legal obligations, or disputes. You may use Disconnect to remove locally stored TikTok authorization data. You may request deletion of connected-account data, publishing records, uploaded content, or other associated data by contacting us; we may verify identity before fulfilling a request.

Third-party platforms

TikTok is a third-party platform. TikTok-related functionality is subject to TikTok APIs, policies, authorization, rate limits, review status, availability, and platform changes. CML Studio is not endorsed or certified by TikTok.

Policy changes

We may update this policy when the service or its data practices change. The effective date above identifies the current version.

Contact

For privacy questions or data deletion requests, email support@pigcml.top.