Privacy Policy
This Privacy Policy explains how VFX Workspace handles information when you use the website to manage media, connect creator accounts, and prepare or submit supported TikTok publishing tasks.
We do not collect or store your TikTok password. TikTok authorization is completed on TikTok's own authorization page.
1. Information we process
- Workspace information: project identifiers, uploaded media references, captions, schedules, publishing status, and operational logs.
- Connected creator information: creator ID, username, market, authorization status, permissions, and product or music metadata returned by the authorized API.
- Technical information: request timestamps, browser/device information, IP address, and security logs used to operate and protect the service.
2. How we use information
Account and team information: we store a stable user ID, profile name, email where provided, a password hash for password accounts, workspace membership, roles, invitation records, and security/audit events. Passwords are not stored as plain text.
We use information to provide the workspace, authenticate and maintain integrations, validate account permissions, upload and process media at your direction, submit publishing tasks, display status and errors, prevent abuse, troubleshoot incidents, and comply with legal obligations.
3. TikTok data and authorization
When you authorize a TikTok integration, we process only the data made available by the selected authorization scopes and only for the connected workspace features. Access tokens and related credentials are stored server-side with access controls and are not intentionally exposed in browser code. You can revoke authorization through TikTok; after revocation, new requests may stop working and previously stored records may remain only as needed for audit, security, or legal purposes.
WeChat website sign-in
When WeChat sign-in is enabled and you authorize it, we process your application-specific OpenID, UnionID when returned, and nickname to create an account or bind WeChat to an existing account. Authorization takes place on WeChat's official pages. The sign-in module exchanges the authorization code server-side and does not retain the resulting WeChat access token. Binding does not automatically merge accounts based on names or email addresses.
Workgroup collaboration
Your profile name and user ID are visible to fellow workgroup members. Your provided email is visible to that workgroup's owners and administrators. Workgroup content is shared according to membership and role; creating or joining a team does not automatically move private historical projects into that team. Workgroup administrators can review membership and related audit records. Platform administrators retain account-management and security responsibilities.
4. Sharing and service providers
We do not sell personal information. We share data only when needed to provide a feature you requested, such as sending an authorized publishing request to TikTok, operating hosting and storage infrastructure, protecting the service, or complying with law. Providers receive only the information needed for their role and are expected to protect it.
5. Retention and deletion
We retain information for as long as needed to provide the service, maintain publishing history, resolve disputes, protect the service, and meet legal requirements. You may request deletion of workspace data or disconnection of a creator account through the support/contact channel in the application. We will verify the request, explain any data that must be retained, and delete or anonymize eligible data within a reasonable period.
6. Security
We use reasonable administrative, technical, and organizational safeguards, including server-side secret handling, access controls, encrypted transport, and operational logging. No internet service can guarantee absolute security, so please do not upload secrets or unnecessary sensitive information.
7. Children and international users
The service is intended for business and professional use and is not directed to children. Depending on where you live, you may have rights to access, correct, export, restrict, or delete personal information, subject to applicable law.
8. Policy changes and contact
We may update this policy by posting a revised version here. For privacy questions, access requests, deletion requests, or authorization concerns, use the support/contact channel made available in the VFX Workspace application. Never include passwords, API keys, or client secrets in a request.