Legal
Privacy Policy
Last updated 15 August 2026
This policy explains what Postup ("we") collects, why, and what we do with it. We collect as little as the Service can function with.
What we collect
- TikTok profile basics. When you connect a TikTok account we receive your
open ID, username, display name and avatar URL via the
user.info.basicscope. We use these solely to show you which account you are publishing to. - Access and refresh tokens. Issued by TikTok when you authorise the Service. These let us publish on your behalf at the time you schedule.
- Content you upload. Images, captions, titles and the settings you choose for each post.
- Post records. Scheduled time, status, and any error returned by TikTok, so you can see what happened in the Queue.
We do not collect your TikTok password — authorisation happens on TikTok's own site. We do not read your videos, followers, analytics, messages, or any data beyond the scopes listed above.
How we use it
Your data is used only to operate the Service: to display your connected accounts, to publish the posts you schedule, and to show you their status. We do not sell it, share it with advertisers, use it to train models, or use it for any purpose you have not asked for.
Where it is stored
Data is stored on servers we control. Uploaded images are held in object storage and served from a domain we own, so that TikTok can fetch them when publishing. Tokens are stored server-side and are never exposed to the browser.
How long we keep it
Tokens are kept until you disconnect the account, at which point they are deleted immediately. Uploaded images and post records are kept so you can see your history, and are deleted when you delete the post or disconnect the account.
Your choices
- Disconnect at any time. This deletes the tokens we hold for that account and cancels future scheduled posts to it.
- Delete your data. Email us and we will remove everything associated with your accounts.
- Revoke from TikTok. You can also remove Postup's access from your TikTok account settings, which invalidates our tokens.
Third parties
The Service communicates with TikTok's API to publish your content. Your use of TikTok is governed by TikTok's Privacy Policy. We do not send your data to any other third party.
Changes
If this policy changes, the "last updated" date above will change with it.
Contact
Privacy questions or deletion requests: hello@kaleidoscopical.com