Privacy Policy

Last updated: 1 July 2026

This Privacy Policy explains how Sora Pap ("we", "us", or "our") collects, uses, and protects your personal information when you use our content scheduling and publishing platform (the "Service").

1. Information We Collect

We collect the following types of information:

• Account information: name and email address when you register
• Content data: videos, captions, tags, and metadata you upload to the Service
• Platform connection data: OAuth tokens for connected social media accounts (stored encrypted)
• Usage data: pages visited, features used, and actions taken within the Service
• Technical data: IP address, browser type, device information, and log data

2. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Service
• Authenticate your identity and manage your account
• Publish content to connected social media platforms on your behalf
• Send you service-related notifications and updates
• Respond to your support requests
• Comply with legal obligations

3. TikTok API Data

When you connect your TikTok account to the Service, we use TikTok's Content Posting API to publish videos on your behalf. We access only the minimum permissions required for this function. Specifically:

• We request permission to upload and publish videos to your TikTok account
• We do not access your TikTok messages, contacts, or follower data
• We store your TikTok OAuth access token securely and use it only to post content you have explicitly scheduled through the Service
• You may revoke our access at any time through your TikTok account settings

Our use of TikTok API data complies with TikTok's API Terms of Service.

4. Data Sharing

We do not sell your personal data. We may share your information with:

• Service providers: third-party companies that help us operate the Service (hosting, analytics), under confidentiality obligations
• Social media platforms: data necessary to publish content on your behalf to platforms you have connected
• Legal authorities: when required by law or to protect our rights

5. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the Service. You may request deletion of your account and associated data at any time by contacting us.

6. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. OAuth tokens are stored encrypted at rest.

7. Your Rights

Depending on your location, you may have rights including:

• The right to access personal data we hold about you
• The right to correct inaccurate data
• The right to request deletion of your data
• The right to withdraw consent at any time
• The right to data portability

To exercise any of these rights, contact us at sora.papapostolou@gmail.com.

8. Cookies

We use essential cookies to keep you logged in and maintain your session. We do not use tracking or advertising cookies.

9. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a revised date.

11. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at: sora.papapostolou@gmail.com