Social Platform
Social Platform
Official Legal Documentation

Privacy Policy

Official compliance documents for Social Platform (operated by Social Platform), compliant with TikTok for Developers, Meta Platform Terms & Google API policies.

Platform Reviewers: You are viewing the English version. You can toggle to Arabic anytime.
العربية English
Privacy Policy Terms of Service Data Deletion Community Guidelines
Platform Developer Compliance: Social Platform operates in strict accordance with the developer terms and privacy frameworks of third-party platforms, including TikTok for Developers, Meta Platform Terms, and the Google API Services User Data Policy.

This Privacy Policy explains how Social Platform ("we", "us", or "our") collects, uses, stores, and protects personal data and platform information when you access or use Social Platform (the "Service"), located at https://msm.amrbdr.com.

1. Scope & Core Principles

We design our service around privacy, security, and user transparency. We only collect the minimal data necessary to provide social media management, publishing, scheduling, and analytics features. We respect all platform terms and applicable data protection regulations, including the EU/UK General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).

Key Commitments:
  • We never sell, lease, or trade your personal information or platform data to data brokers or advertisers.
  • We do not use TikTok or other platform user data to train artificial intelligence or machine learning models without your explicit consent.
  • We encrypt all credentials and access tokens at rest using industry-grade AES-256 encryption.

2. What we collect

A. Account & Profile Information

  • User Profile: Name, email address, phone number (optional), and encrypted password (hashed with bcrypt/Argon2).
  • Workspace Data: Workspace names, brand designations, staff roles, and activity audit logs.
  • Billing Data: Subscription tier, plan duration, and transaction references. Cardholder data is handled directly by PCI-DSS compliant processors (such as Stripe or Paymob) and never touches our servers.

B. Social Media Channel & API Data

When you choose to connect a social media account to the Service via OAuth 2.0, we receive authorization to access specific data strictly within the scopes you grant:

TikTok Integration (TikTok for Developers API)

  • User Identity & Profile: Open ID, Union ID, display name, profile avatar, and account verification status (via user.info.basic).
  • Publishing & Media: Uploaded video files, captions, scheduled publishing timestamps, privacy settings (public, friends-only, or private), comment permissions, duet/stitch permissions, and commercial content disclosure preferences (via video.publish and video.upload).
  • Metrics & Status: Video upload statuses, post identifiers, video views, likes, shares, and comment counters for content published through our platform (via video.list and webhook notifications).
  • Authentication Tokens: OAuth 2.0 access and refresh tokens, stored in encrypted format and used exclusively to perform user-initiated actions.

Meta Platforms (Facebook & Instagram)

  • Facebook Pages, Instagram Professional/Creator accounts, page access tokens, published posts, media attachments, and comments received on published posts.

Google & YouTube API Services

  • YouTube channel IDs, channel titles, video uploads, metadata, analytics counters, and comment replies.

C. Technical & Security Information

  • Sign-in session timestamps, IP addresses, browser user-agent details, and security audit logs used to detect unauthorized access and protect against brute force attacks.

3. How We Use Collected Data

We process your data solely for lawful operational purposes:

  • Publishing Content: To transmit, schedule, and publish video and image posts to your connected TikTok, Facebook, Instagram, and YouTube channels per your instructions.
  • Channel Management: To maintain active connections, refresh expiring tokens, and display your channel status in your dashboard.
  • Analytics & Reporting: To compile performance metrics (views, engagement, impressions) so you can evaluate the effectiveness of your social media strategy.
  • Inbox & Comments: To allow you to monitor and reply to comments on your published posts.
  • Service Operations & Alerts: To send transactional notices (e.g., successful/failed publish attempts, token expiration reminders, security notifications).

4. Platform-Specific Disclosures & Third-Party Sharing

A. TikTok Platform Disclosure

Our integration with TikTok adheres strictly to the TikTok Developer Terms of Service and the TikTok Privacy Policy. We guarantee that:

  • TikTok user data is only accessed when you explicitly link your account and request publishing or metrics operations.
  • Data received from TikTok APIs is strictly partitioned; no other customer or third party can access your TikTok channel details.
  • TikTok data is not shared with third-party advertising brokers or external marketing networks.

B. Google & YouTube API Services

When connecting a YouTube channel, our service uses YouTube API Services. By connecting your YouTube account, you agree to the YouTube Terms of Service and the Google Privacy Policy. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke our access anytime via the Google Security Settings.

C. Meta Platforms

Our integration with Meta services complies with the Meta Platform Terms and Meta Privacy Policy.

D. Other Third-Party Service Providers

  • Cloud Infrastructure: Secure cloud servers, databases, and media storage governed by strict confidentiality agreements.
  • Payment Gateways: Payment processors (Stripe / Paymob) to handle billing securely.
  • AI Writing Assistant (Anthropic): If you choose to use our optional AI caption helper, only the draft text or prompt you provide is transmitted to generate suggestions; we do not send any account credentials or platform tokens to AI providers.
  • Legal Obligations: We may disclose data if legally required by valid court order or regulatory authority.

5. Data Storage, Retention & Security

  • Encryption: All OAuth access tokens, refresh tokens, and sensitive secrets are stored using AES-256 encryption. All data transmitted between your browser, our servers, and platform APIs is protected using TLS 1.3 / HTTPS.
  • Channel Disconnection: When you disconnect a TikTok, Meta, or YouTube channel, all stored OAuth access tokens and refresh tokens are permanently purged immediately.
  • Account Retention: While your account is active, your scheduled posts, drafts, and historical records are retained. If you request account deletion, all personal data and content are permanently deleted within 30 days, except for invoices required to be retained by financial law.

6. Your Rights & Data Deletion

You have full ownership and control over your personal and platform data:

  • Access & Export: You can review and export your published posts, analytics, and workspace details.
  • Revoke Permissions: You can disconnect any channel from the Channels page in your workspace at any time, or revoke permission directly from TikTok's app settings (Settings and privacy > Security & permissions > Manage app permissions).
  • Permanent Deletion: For step-by-step instructions or to request a full erasure of all your data, please visit our Data Deletion Instructions Page or email us directly at hello@example.com.

7. Cookies & Tracking

We use only essential cookies required for session authentication, security, and remembering your interface preferences (such as dark/light theme). We do not deploy third-party advertising or cross-site tracking cookies.

8. Policy Updates

We may periodically update this Privacy Policy to reflect platform policy enhancements or feature updates. We will notify registered users via email or platform announcements for any material changes.

Have questions or privacy requests?
Contact our Data Protection Officer at:
hello@example.com