Privacy Policy

1. Introduction

CLPFRM ("we," "our," or "us") operates a social media content management platform (the "Service") that allows users to manage, schedule, and publish video content to their connected social media accounts. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Account Information

When you create an account with us, we collect:

• Your name and email address
• Password (stored in encrypted/hashed form)

2.2 Social Media Account Data

When you connect a third-party social media account (such as TikTok, Instagram, or YouTube) to our Service, we collect and store:

• Your social media user ID and display name
• Profile picture URL
• Follower count (publicly available information)
• OAuth access tokens and refresh tokens (encrypted at rest using AES-256 encryption)

We do not collect or store your social media account password. Authentication is performed through each platform's official OAuth 2.0 flow.

2.3 Content Data

When you upload or provide video content for publishing, we may temporarily store:

• Video files (stored securely and deleted after publishing or upon your request)
• Captions, titles, and hashtags you provide
• Publishing metadata (timestamps, status, platform-assigned post URLs)

2.4 Usage & Performance Data

We collect aggregated, non-personally-identifiable performance metrics from your published content, including:

• View counts, like counts, comment counts, and share counts (as reported by the respective platform APIs)

2.5 Automatically Collected Information

When you access our Service, we may automatically collect:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on the Service

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To authenticate your identity, connect your social media accounts, and enable content publishing through official platform APIs
• Content Management: To store and manage your video content for publishing to your authorized accounts
• Analytics: To display performance metrics of your published content within our dashboard
• Account Maintenance: To automatically refresh authentication tokens to maintain your connected account sessions
• Communication: To send you service-related notifications, such as publishing status updates or token expiration warnings
• Improvement: To improve and optimize the Service's functionality and user experience

4. How We Protect Your Information

We implement industry-standard security measures to protect your data:

• Encryption at Rest: All OAuth tokens are encrypted using AES-256-GCM before storage
• Encryption in Transit: All data transmitted between your browser, our servers, and third-party platforms uses TLS/HTTPS encryption
• Secure Authentication: Passwords are hashed using bcrypt with a high work factor
• Access Control: Only authenticated and authorized users can access account data and content
• Minimal Storage: Video files are stored only as long as necessary for publishing and are eligible for deletion upon request

5. Third-Party Services

Our Service integrates with the following third-party platforms through their official APIs:

• TikTok — via the TikTok Content Posting API. Governed by TikTok's Privacy Policy
• Instagram / Meta — via the Instagram Graph API. Governed by Meta's Privacy Policy
• YouTube / Google — via the YouTube Data API v3. Governed by Google's Privacy Policy
• Cloudflare — for secure content storage and delivery

We only access the data and permissions that you explicitly authorize through each platform's OAuth consent flow. We do not sell, share, or transfer your social media data to any other third parties.

6. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may disclose information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share information
• To Platform APIs: When publishing content on your behalf to your connected accounts, as authorized by you
• Legal Compliance: When required by law, regulation, subpoena, or court order
• Safety: To protect the rights, property, or safety of our users or the public

7. Data Retention

• Account data: Retained for the duration of your account. Deleted within 30 days of account deletion.
• OAuth tokens: Retained while your social media account is connected. Immediately deleted when you disconnect an account.
• Video content: Temporarily stored for publishing. Eligible for deletion upon your request or automatically after 90 days of inactivity.
• Performance metrics: Retained for the duration of your account for analytics purposes.

8. Your Rights

You have the following rights regarding your data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your account and all associated data
• Disconnect: Revoke access to any connected social media account at any time through our dashboard or through the platform's own settings
• Portability: Request your data in a portable, machine-readable format

To exercise any of these rights, contact us at privacy@CLPFRMfarm.com.

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in compliance with applicable data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the revised Privacy Policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: