TikTok Publisher Privacy Policy

Last updated: May 7, 2026

Overview

TikTok Publisher ("the integration") is a personal posting tool used by Anthony Calise ("we", "I") to publish pre-generated content to TikTok accounts that I personally own and operate. The integration is not offered to third parties, not available for sign-up, and does not collect data from anyone other than the operator.

Who this policy applies to

The integration only authorizes accounts owned by the operator (currently @yourgutbestie, @fuelmodemedia, @testosterone.score, and @mayaoutside). No other TikTok user authorizes or is involved in the integration.

Data accessed from TikTok

The integration accesses only what is required to publish a post via the Content Posting API:

• OAuth access token, refresh token, and open ID — issued by TikTok when the operator authorizes the integration for an owned account. Used to authenticate posting requests.
• Granted scopes — the integration requests video.publish only.

The integration does not read videos, comments, follower lists, direct messages, analytics, profile data, or any other TikTok content. It does not call any read endpoint.

Data sent to TikTok

To publish a post, the integration sends to TikTok:

• A set of image URLs hosted on a verified prefix of acalise.com.
• A caption, hashtags, and post-visibility settings.
• The OAuth access token for the target account.

Data storage

OAuth tokens are stored locally on the operator's machine in a file outside any source-controlled directory. Tokens are never transmitted to a third party, never shared, and never uploaded to a server we do not control.

Slideshow images served from acalise.com are removed within 24 hours of the post publishing successfully. The image URLs are public during the upload window because the TikTok server requires HTTPS GET access without authentication.

Sharing of data

We do not share, sell, lease, or transfer any TikTok-related data to any third party. The only recipient of TikTok-related data is TikTok itself, via the official Content Posting API.

Data retention

• OAuth tokens: retained until the operator revokes access in TikTok settings or rotates the integration.
• Slideshow images: removed from acalise.com within 24 hours of a successful publish.
• Post metadata (timestamps, post IDs returned by TikTok): retained locally for scheduling and deduplication.

Revoking access

The operator can revoke the integration's access at any time by visiting TikTok → Settings and Privacy → Security and Permissions → Manage app permissions, and removing TikTok Publisher.

Children

The integration is not directed to anyone under 13 and does not collect data from children.

Changes

If this policy changes, the updated version will be posted at this URL with a revised "Last updated" date.

Contact

Questions: anthonydcalise@gmail.com