Privacy Policy

Last updated: August 2, 2026

ListingLoop ("we", "our", "the service") is a web application that helps TikTok creators upload product videos and deliver them to their TikTok drafts. This policy explains what data we collect, why, and how it is handled.

1. Data we collect

• TikTok account identifiers: When you sign in with TikTok, we receive your open_id, display name, and avatar URL via TikTok Login Kit. We use this to identify your workspace.
• Authentication tokens: TikTok access and refresh tokens are stored in an encrypted, httpOnly session cookie in your browser so the service can deliver drafts on your behalf. Tokens are never logged or shared.
• Video files you upload: Videos are processed in memory and transferred directly to TikTok's servers via the TikTok Content Posting API. We do not retain copies of your videos after transfer.
• Basic technical logs: Standard server logs (IP address, timestamps, error reports) for operation and security, retained for up to 30 days.

2. What we do NOT collect

• We do not read, store, or analyze your TikTok videos, drafts, messages, or contacts.
• We do not collect payment information (the service is currently free).
• We do not use advertising trackers or sell any data to third parties.

3. How we use data

• To authenticate you and connect your TikTok account.
• To deliver videos you choose into your TikTok drafts, at your explicit action.
• To maintain security and debug service issues.

4. Third-party services

• TikTok: Authentication and video delivery are performed through TikTok's official APIs. Your use of those features is also governed by TikTok's own Privacy Policy.
• Vercel Inc.: The service is hosted on Vercel infrastructure; requests pass through their network.

5. Data retention and deletion

Session cookies expire when you log out or within 30 days. We retain no long-term copies of your content or tokens. You may request deletion of any remaining data at any time by contacting us — we will confirm deletion within 14 days. You can also revoke ListingLoop's access anytime in your TikTok app settings.

6. Security

All traffic is encrypted with TLS. Tokens are stored only in httpOnly cookies inaccessible to client-side scripts. We follow least-privilege principles: the service requests only the minimum TikTok scopes required (basic profile and draft upload).

7. Children

The service is not directed at children under 13 and we do not knowingly collect their data.

8. Changes

We may update this policy; material changes will be announced on this page with a new "last updated" date.

9. Contact

Questions or deletion requests: support@listingloop.website