Privacy Policy

What this service is

Primed Content OS is a private content-production tool operated by the operator of this site to plan, edit, publish and measure short-form videos for the operator's own brands. There are no public sign-ups: only the operator's own account can sign in, and the social media accounts connected to it are the operator's own brand accounts.

Data we receive from connected platforms

When a TikTok, Instagram, Facebook Page or YouTube account is connected with the platform's own sign-in, the service receives only what that account owner authorises:

• Access tokens issued by the platform. They are encrypted (AES-256-GCM) before they are stored, with a key kept outside the database; they are never shown in the interface, written to logs, or sent anywhere except back to the platform that issued them.
• Profile information: account id, username, display name, profile picture and account type.
• Account statistics, where authorised: follower, following, like and video counts.
• Your own posts and their metrics, where authorised: post ids, titles/captions, cover images, links, publish times, durations, and view, like, comment and share counts.

For TikTok specifically, the service uses TikTok Login Kit and the TikTok API to read the profile (user.info.basic, user.info.profile), account statistics (user.info.stats) and your video list with its metrics (video.list), and to upload videos you have approved to your TikTok inbox as drafts (video.upload). Drafts are finished and posted by you in the TikTok app.

How the data is used

• To show which account is connected and whether its connection still works.
• To show analytics for your own posts and to learn which of your videos perform best.
• To publish or upload a video only after you approve that exact video, caption and account. Nothing is ever posted automatically without that approval.
• Analytics summaries may be processed by the AI service the operator has enabled (Anthropic's Claude; optionally Google Gemini) to produce recommendations for the operator. Access tokens are never sent to them.

Platform data is not sold, not shared with advertisers, and not used to identify or profile other people.

Where it is stored

In the service's own database on its server (hosted on Render) and, when the operator works locally, on the operator's computer. Database backups are made daily and kept with the database.

Retention and deletion

• Disconnecting an account (Social Accounts → Disconnect) deletes its stored access token immediately and stops all publishing for it. You can also remove the service's access at any time from the platform itself (for TikTok: Settings and privacy → Security → Apps and services permissions).
• Analytics and post history already collected stay in the database until deletion is requested, so the operator's reports remain complete.
• Scheduled database backups are kept for the 14 most recent days and then rotated out. Backups taken by hand or immediately before a software update are kept until the operator removes them.
• Deletion requests: contact the operator of this site (contact address not yet published). The data for the account concerned is deleted from the live database; copies in rotating backups disappear as those backups rotate out.

Security

Signing in requires the operator's password (optionally a second factor); the service only answers on its own address over HTTPS; tokens are encrypted at rest; actions that publish or change accounts require the signed-in operator.

Children

The service is not directed at children and does not knowingly collect data about them.

Changes and contact

Changes to this policy are published on this page with a new date. Questions and requests: the operator of this site (contact address not yet published).