1. Data controller
The data controller is the operator of Vagabond Studio described in the Terms of Service, an independent developer based in Lyon, France. Contact said.souidi.career@gmail.com for any question about your data.
2. Data we collect
Vagabond Studio collects only what it needs to publish for you.
- TikTok account information, through the user.info.basic scope. Your TikTok open ID, display name and avatar, used only to show which account is connected.
- Access tokens issued by TikTok when you connect your account. They let the service send posts on your behalf, through the video.upload and video.publish scopes.
- The content you prepare. Photos, videos, slide texts, captions and the privacy and scheduling options you choose.
- Publishing records. Which post was sent, when, to which account, and the status or error returned by TikTok.
The service does not read your TikTok messages, followers, likes, watch history or any other content you did not prepare in it. It does not collect payment data, does not use advertising or analytics trackers, and does not set cookies beyond what is strictly needed to keep you signed in.
3. Why we use it, and on what basis
- To connect your account and publish the content you ask the service to publish. Legal basis, the performance of the service you requested (article 6.1.b GDPR).
- To keep the service secure, fix errors and prevent abuse. Legal basis, the operator's legitimate interest (article 6.1.f GDPR).
Your data is never sold, rented, used for advertising, or used to train any artificial intelligence model.
4. Who receives it
Your content and the related tokens are sent to TikTok, only to carry out the posts you request. TikTok then handles them under the TikTok Privacy Policy. The media files of a post are made available to TikTok through a temporary, signed link so TikTok can download them. The service may rely on hosting and network providers, such as Cloudflare, that process data only on the operator's instructions. No other third party receives your data.
5. Where it is stored and how it is protected
Data is stored on infrastructure controlled by the operator, located in the European Union, with access limited to the operator. Connections to the service and to TikTok are encrypted with HTTPS. Access tokens are never displayed, shared or written to public logs. Because TikTok is based outside the European Union, sending a post to TikTok may involve a transfer of data outside the EU, covered by TikTok's own safeguards.
6. How long we keep it
- Account information and access tokens are kept while your account is connected and deleted within 30 days after you disconnect it or revoke access in TikTok.
- Content you prepare is kept until you delete it in the service, and at most 12 months after its last use.
- Publishing records are kept for 12 months, then deleted.
7. Your rights
Under the GDPR and French law, you can ask to access, correct or delete your data, to receive it in a portable format, to restrict or object to its use, and you can withdraw your consent at any time by disconnecting your account. Send your request to said.souidi.career@gmail.com. An answer is given within one month. If you think your rights are not respected, you can file a complaint with the CNIL, the French data protection authority, at cnil.fr.
8. Deleting your data
To remove everything, disconnect your account in Vagabond Studio and revoke its access in the TikTok app (Settings and privacy, Security, Manage app permissions), or simply email the operator. All your data held by the service is then deleted within 30 days. Posts already published on TikTok stay on TikTok until you delete them there.
9. Children
The service is not meant for children. It is not offered to anyone under 16 in the European Union, or under the minimum age TikTok sets in your country. If you believe a child has connected an account, contact the operator and the data will be deleted.
10. Changes to this policy
This policy may be updated when the service changes. The effective date at the top of this section shows the latest version. Significant changes will be announced in the service.