UploadControlHub Privacy Policy

1. Operator-only use

UploadControlHub is a private publishing and workflow tool. It is operated by a single owner and is used exclusively to manage and publish content on social media accounts that belong to or are explicitly authorized by that operator. The app does not provide a public sign-up.

2. Data we process

UploadControlHub may store and process the following categories of data:

• Media files (videos and images) collected from the operator's own source pipeline.
• Post metadata such as titles, descriptions, captions, hashtags, scheduled times, target platform, and visibility settings.
• Platform identifiers like channel IDs, Page IDs, Instagram Business Account IDs, TikTok open IDs and TikTok usernames.
• OAuth credentials issued by each connected platform (access tokens, refresh tokens, expirations). These are stored only to perform uploads on behalf of the operator and are never shared with third parties.
• Technical logs describing upload attempts, API responses, retries and errors, used for diagnostics and reliability.

3. TikTok-specific data and scopes

When the operator connects a TikTok account, UploadControlHub uses TikTok's Login Kit and Content Posting API. The following scopes may be requested:

• user.info.basic — to confirm which TikTok account is connected and display the username in the operator's dashboard.
• video.upload — to upload prepared video files to the connected TikTok account as drafts or inbox items.
• video.publish — to publish approved videos directly on behalf of the operator.

Data obtained via these TikTok scopes (basic profile info, upload state, returned video IDs) is used solely inside the operator's own dashboard to display status, identify the target account, and persist upload references. It is not sold, not shared with advertising partners, not used for profiling, and not exposed to any third party.

4. Purpose of processing

All processing serves one purpose: enabling the operator to plan, schedule, prepare, and publish their own media on their own connected social media accounts. UploadControlHub does not perform any advertising, behavioural analytics, or third-party data sharing.

5. Storage location and retention

Data is stored on infrastructure controlled by the operator. Media files may be removed automatically after successful publication or after a configurable retention window. OAuth tokens are stored only as long as the corresponding platform connection is active and are deleted when the operator disconnects an account or revokes access on the platform.

6. Sharing with platforms

To publish content, UploadControlHub transmits the necessary fields (media files, captions, titles, visibility settings, scheduling info) to the respective platform's official API. No data is transmitted outside of these official platform endpoints.

7. Security

OAuth tokens, API keys and client secrets are stored only for the publishing workflow and are protected against unauthorized access through standard server-side controls. Tokens are never embedded in client-side code and are never displayed in full in the public-facing UI.

8. Operator rights and data deletion

Because UploadControlHub is operator-controlled, the operator can at any time:

• Disconnect any connected platform from the dashboard, which removes the stored tokens for that platform.
• Revoke access from the platform side (e.g. TikTok's connected apps settings), which invalidates the stored tokens.
• Delete stored media, captions and metadata directly from the application database.

9. Contact

For questions regarding this Privacy Policy or data processing within UploadControlHub, please contact the operator of this deployment.