Privacy Policy

1. Who is responsible

Jakob Neudeck, Alex-Wedding-Str. 3, 10178 Berlin, Deutschland, info@postakt.de ("we") is the controller for the personal data processed on postakt.de.

2. What we process and why

• TikTok account data: when you log in with TikTok we receive your TikTok user ID (open_id), display name and profile picture, plus access tokens that let us post on your behalf. Tokens are stored encrypted. We request three TikTok permissions: user.info.basic (name and picture), video.publish (post your scheduled videos) and video.upload (send videos to your TikTok inbox as drafts). We don't read your existing videos, followers or messages. Purpose: providing the service (Art. 6(1)(b) GDPR).
• Videos and post details: videos you upload, captions, schedule times and post settings. Videos are stored privately and deleted as soon as TikTok has received them, or when you cancel the post. Purpose: providing the service (Art. 6(1)(b) GDPR).
• Billing data: if you buy a paid plan, our payment provider Stripe processes your name, email, address and payment details. We only store your Stripe customer ID and plan. Purpose: contract and legal obligations (Art. 6(1)(b) and (c) GDPR).
• Server logs: our hosting provider records technical data such as IP address and time of request for security. Purpose: legitimate interest in a secure service (Art. 6(1)(f) GDPR).

3. Cookies

We only use cookies that are strictly necessary: one session cookie that keeps you logged in, and one short-lived cookie that protects the TikTok login. We don't use tracking or advertising cookies.

4. Service providers

• Vercel Inc. (hosting), USA, with EU Standard Contractual Clauses and the EU-US Data Privacy Framework.
• Supabase Inc. (database and file storage), data stored in the EU (Frankfurt).
• Stripe Payments Europe Ltd. (payments), Ireland.
• TikTok, to which your videos and post details are sent when you post. TikTok's own privacy policy applies there.

5. How long we keep data

Account data is kept while your account exists. Videos are deleted after posting or canceling. Post history (captions, times, status) is kept until you delete your account. Billing records are kept as required by German tax law (up to 10 years).

6. Your rights

You can ask for access, correction, deletion, restriction, data portability, and object to processing. You can also withdraw Postakt's access in your TikTok settings at any time. To delete your account, email info@postakt.de. You have the right to complain to a data protection authority.