Məxfilik siyasəti
Privacy Policy — TikTok Integration
This policy explains how ("we", "us") accesses, uses, stores and deletes data obtained through the TikTok Display API. It covers our TikTok integration only, and is supplementary to the general privacy policy of our website.
1. What the integration does
Our website displays the most recent public videos posted by our own official TikTok account, so that visitors can see our latest content without leaving the site. The integration is one-directional and read-only: it retrieves content, and never posts, edits or deletes anything on TikTok.
2. Whose data is accessed
Only the data of a single TikTok account — our own official account — which is authorised once by an authorised representative of .
We do not request, receive or process TikTok data belonging to visitors of our website. Visitors are never asked to log in with TikTok, and no TikTok authorisation is ever requested from them.
3. Data we receive and why
| Scope | Data received | Purpose |
|---|---|---|
user.info.basic |
Open ID, union ID, display name, avatar URL of our own account | To identify the authorised account and label the feed on our website |
video.list |
Video ID, title/description, cover image URL, embed link, share URL, creation time | To render the video list and link each item back to TikTok |
We do not receive or request TikTok analytics, private messages, follower lists, comments, contact details, or any information about individual TikTok users.
4. Storage and retention
- Access and refresh tokens are stored on our own server in a file that is not reachable over the web. They are used solely to call the TikTok API on behalf of our account.
- Video metadata (the fields listed above) is cached on our server for a short period to reduce the number of API calls, and is overwritten on each refresh.
- Cover images and video content are loaded from TikTok's own servers; we do not download or re-host video files.
- No TikTok data is written to our database, and no permanent archive of TikTok content is kept.
5. Sharing
We do not sell, rent, trade or share TikTok data with any third party. The data is not used for advertising, profiling, automated decision-making, or training of machine-learning models. It is only rendered publicly on our website in the same form in which it is already public on TikTok.
6. Security
The website is served over HTTPS. API credentials and tokens are kept server-side, outside of publicly accessible directories, and are never exposed in page source, JavaScript or client-side requests. Access to the server is restricted to authorised administrators.
7. Revoking access and deletion
- Authorisation can be revoked at any time from the TikTok app itself: Profile → Settings and privacy → Security and permissions → Manage app permissions. Once revoked, our integration immediately stops receiving data.
- On revocation, or on request, we delete the stored tokens and clear the cached video metadata from our server.
- To request deletion, write to . We respond within 30 days.
8. Cookies
The TikTok integration itself sets no cookies and uses no tracking pixels. If a visitor plays an embedded video, TikTok may set its own cookies under TikTok's control; that processing is governed by TikTok's Privacy Policy.
9. Children
This integration processes no personal data of minors. It retrieves only content published by our own institutional account.
10. Legal basis and rights
We process this data on the basis of our legitimate interest in presenting our own public content, and on the explicit authorisation given by the account holder. Where applicable law grants rights of access, rectification, restriction, objection or erasure, these can be exercised via the contact address below.
11. Changes
If the integration changes in a way that affects this policy, we will update this page and revise the "Last updated" date above.
12. Contact
Email: [email protected]
Website: https://sistem.prosayt.com