Privacy Policy

Last updated: September 8, 2026

This Privacy Policy explains how Yam Studio ("we," "our," "the Service") collects, uses, and protects information when you use our content scheduling and publishing tool, including our integration with TikTok's APIs.

1. Who We Are

Yam Studio is a content management and scheduling tool that allows an authorized account owner to prepare, review, and publish content — including video and image posts to TikTok — through TikTok's official Content Posting API.

2. Information We Collect

When you connect your TikTok account to our Service, we may collect and process:

Account authorization data: OAuth access tokens and refresh tokens issued by TikTok, used solely to authenticate API requests on your behalf.
Creator profile information: your TikTok display name and posting permissions (privacy level options, duet/stitch/comment settings), retrieved via TikTok's creator_info endpoint before each publish, so you can confirm settings before content goes live.
Content data: video, image, and caption files that you or our content pipeline prepare for publishing.
Operational logs: publish IDs, timestamps, and publish status, used for troubleshooting and to prevent duplicate posts.

We do not collect TikTok account passwords. Authentication is handled entirely through TikTok's OAuth 2.0 flow.

3. How We Use Information

We use the information above only to:

Authenticate with TikTok's API on your behalf.
Display your current creator settings so you can confirm a post before it is published.
Schedule and publish content that you have prepared or approved.
Diagnose and fix publishing errors.
Maintain a record of what was posted and when, to avoid duplicate submissions.

We do not sell, rent, or share your data with third parties for advertising or marketing purposes.

4. Data Storage and Retention

Access and refresh tokens are stored securely and used only for the duration needed to perform authorized publishing actions.
Content files and logs are retained only as long as needed to operate the scheduling pipeline, and are deleted or archived on a routine basis.
You may request deletion of your data at any time (see Section 7).

5. Data Sharing

We only share data with:

TikTok, as required to publish content via their official API.
Infrastructure providers strictly necessary to run the Service, who do not have independent rights to use your data.

We do not share data with any other third party.

6. Security

We take reasonable technical measures to protect stored tokens and content, including restricting access to authorized systems only and using secure connections (HTTPS) for all API communication.

7. Your Rights

You may, at any time:

Revoke this app's access to your TikTok account via TikTok's app settings.
Request that we delete any data we hold about you by contacting us (see Section 9).
Request a copy of the data we hold about you.

8. Children's Privacy

This Service is not directed at children and is not intended for use by anyone under the minimum age required by TikTok's Terms of Service.

9. Contact

For questions about this Privacy Policy or to request data deletion, contact: your-email@example.com

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.