Privacy Policy

1. Scope

This Policy explains how HiDaStudio (“the Service”, operated by HiDa) handles data. The Service is a private automation tool that publishes the Operator’s own content to the Operator’s own connected social-media accounts. It is not a consumer product; it does not offer sign-ups to the public and does not collect personal data from members of the public.

2. Information We Process

• Connected-account authorization. OAuth access and refresh tokens and account identifiers for the Operator’s own TikTok, Meta (Facebook/Instagram), and Google (YouTube) accounts, used solely to publish content on the Operator’s behalf.
• Content metadata. Titles, captions, hashtags, thumbnails, and scheduling times for the Operator’s own posts.
• Operational logs. Timestamps and success/failure status of publishing operations, for diagnostics.

We do not collect personal data from third-party end users, followers, or viewers, and we do not access their profiles, messages, or personal information.

3. How We Use Information

Tokens and identifiers are used exclusively to authenticate with, and publish to, the Operator’s own accounts. Metadata and logs are used to schedule posts, avoid duplicate uploads, and diagnose failures. We do not use this information for advertising or profiling.

4. Storage & Security

Credentials are stored in the Operator’s private configuration and are not shared with third parties. Access is restricted to the Operator and authorized personnel. Tokens are transmitted only to the issuing platform’s official API over encrypted connections.

5. Third-Party Services

To publish content, the Service transmits videos and metadata to TikTok, Meta, and Google/YouTube through their official APIs. Their handling of that data is governed by their own privacy policies.

6. Data Retention

Authorization tokens are retained until they expire or are revoked. Operational logs are retained only as long as needed for diagnostics and are then discarded.

7. Data Sharing

We do not sell data, and we do not share it with advertisers or unrelated third parties. Content is shared only with the platforms the Operator chooses to publish to.

8. Revocation of Access

The Operator may revoke the Service’s access to any connected account at any time through that platform’s settings (e.g., TikTok “Manage app permissions”, Meta Business Settings, Google Account permissions). Revoking access immediately stops all publishing for that account.

9. Children

The Service is not directed to children and does not knowingly process children’s data.

10. Changes to This Policy

We may update this Policy from time to time. The “Last updated” date above reflects the current version.

11. Contact

Privacy questions: privacy@hida.dev.