Effective date: August 14, 2026
CreatorFlow Desktop is designed to run locally on the user's computer and to process only the information required to provide authorized publishing features.
After explicit OAuth consent, the application may process TikTok account identifiers, basic profile information, publishing permissions, access and refresh tokens, video files selected for publishing, captions, schedules, and publishing status.
This information is used only to authenticate the authorized account, publish user-selected content, refresh authorization, display status, and retry failed jobs. Tokens and application state are stored locally on the user's computer. TikTok passwords are never collected or stored.
Required content and metadata are transmitted to TikTok through TikTok's official APIs. The application does not sell personal information or share it with advertisers or unrelated third parties.
Local tokens and account data remain until the user disconnects the account or deletes the application data. Users can also revoke access through TikTok's account settings.
OAuth secrets and refresh tokens are kept outside public source code. No method of storage is completely risk-free, so users should protect access to their computer and developer credentials.
This policy may be updated to reflect changes in functionality or legal and platform requirements.