Privacy Policy

Service: StoryPostingApi · Last updated: 14 October 2026

StoryPostingApi ("the Service", "we") lets a TikTok account owner turn a public Reddit story into a narrated vertical video and publish it to their own TikTok account, immediately or on a schedule, through the official TikTok Content Posting API. This policy explains what data the Service processes, why, and how long it is kept.

1. Data we collect

• TikTok account data received through TikTok Login Kit after you grant consent: your open ID / union ID, display name, avatar URL, and the posting limits returned by the Creator Info endpoint (nickname, allowed privacy levels, maximum video duration).
• Authorization tokens: the OAuth access token and refresh token issued by TikTok for your account.
• Content you choose to publish: the video files, the story text you paste or load from a public Reddit post, the background clips you upload, caption text, and the posting options you select (privacy level, comment / duet / stitch settings, commercial content disclosure).
• Text sent for narration: when you press Generate, the story text is sent to the text-to-speech provider configured for your installation in order to produce the voice track. No account data is sent with it.
• Technical logs: timestamps, publish IDs and API error codes, used to show the status of your uploads and to debug failures.

We do not collect your TikTok password. We do not buy, scrape or import data about people who have not authorized the Service.

2. How we use the data

• To authenticate you and keep your session active (access and refresh tokens).
• To display your account name and avatar in the interface so you can confirm which account you are publishing to.
• To upload and publish the content that you explicitly submit, with the options you selected.
• To show you the status and history of your own posts.

We do not use your data for advertising, profiling, or training machine-learning models, and we do not sell or rent it to anyone.

3. Sharing with third parties

Data is sent only to TikTok, through the official TikTok API endpoints, in order to carry out the actions you request. Hosting and storage providers that operate our infrastructure may process the data on our behalf, under contract and only for that purpose. We disclose data otherwise only when required by law.

4. Storage and retention

Tokens are stored encrypted at rest. Media files are kept only as long as needed to complete the upload and are deleted afterwards, and in any case no later than 30 days. Account data and logs are deleted within 30 days after you disconnect your TikTok account or delete your account with us.

5. Your rights and controls

• You can revoke the Service's access at any time in TikTok: Profile → Settings and privacy → Security & permissions → Manage app permissions. Revoking stops all publishing immediately.
• You can request access to, correction of, or deletion of your data, and a copy of it in a portable format, by writing to the contact address below. We answer within 30 days.
• If you are in the EEA or the UK, the legal basis for processing is the performance of our contract with you (publishing your content) and your consent, which you may withdraw at any time.

6. Content you publish

Content published through the Service is governed by TikTok's own Terms of Service, Privacy Policy, Community Guidelines and Music Usage Confirmation once it reaches the platform.

7. Children

The Service is not directed to anyone under the age required to hold a TikTok account in their country, and we do not knowingly process their data.

8. Changes

If this policy changes materially we will update the date at the top of this page and, where we hold a contact address for you, notify you before the change takes effect.

9. Contact

Questions, access and deletion requests: andrewview0001@gmail.com