PRIVACY POLICY

Endpoint Clients

Website: https://www.endpointclients.com/

Contact Email: info@endpointclients.com

1. Introduction

Endpoint Clients ("Endpoint Clients," "we," "us," or "our") respects your privacy and is committed to protecting the personal information and TikTok account data entrusted to us.

This Privacy Policy explains how we collect, access, use, process, store, share, and delete information when individuals or businesses use our social media content management and automation software, websites, connected applications, integrations, and related services (collectively, the "Services").

Our Services enable businesses, content creators, marketing teams, and authorized users to connect supported TikTok accounts through official authorization processes, including OAuth 2.0, and manage activities such as content preparation, scheduling, uploading, publishing, and related workflows, where supported and approved by TikTok.

Our TikTok integration operates through officially supported TikTok developer products, including Login Kit and the Content Posting API, subject to the permissions and capabilities approved for our application.

This policy applies to our customers, their authorized team members, and individuals who connect TikTok accounts to our Services.

By using our Services, you acknowledge the data practices described in this Privacy Policy. Where consent is required by applicable law or TikTok's requirements, we will request it separately.

2. Information We Collect

We collect and process information necessary to provide, maintain, secure, and improve our Services.

2.1 Account and Business Information

When you register, subscribe, contact us, or use our platform, we may collect:

• Full name and business or organization name.

• Email address and contact information provided directly to Endpoint Clients.

• Account identification and login information.

• Workspace details, preferences, and authorized team memberships.

• Subscription information and transaction records, if paid subscriptions are offered.

• Communications submitted to our support team.

2.2 Connected TikTok Account Information

When you connect a TikTok account through our authorized integration, we may receive information permitted by TikTok's approved APIs and the permissions you grant.

Depending on the permissions granted and the applicable API products, this information may include:

• TikTok account identifiers, including Open ID and other authorized identifiers.

• Display name and profile image.

• TikTok username, where supported and authorized.

• Basic public profile information.

• Profile information such as biography or verification status, where separately authorized.

• Account connection status and granted permissions.

• Access tokens, refresh tokens, and token expiration information.

• TikTok creator information required for authorized content publishing.

• Available post visibility settings and supported interaction controls.

• Information relating to content uploads, publishing, and other specifically authorized features.

Certain account information, such as follower statistics or a user's existing public videos, is available only through additional approved permissions where applicable.

We do not assume that connecting a TikTok account provides access to the user's email address, phone number, private messages, contacts, or other restricted information.

We access only information made available through TikTok's approved APIs and necessary for functionality authorized by the user.

The specific information available depends on the TikTok API products approved for our application, the account's eligibility, and the permissions granted.

2.3 TikTok OAuth Authentication and Authorization Data

We use TikTok's official OAuth 2.0 authorization mechanism to connect accounts securely.

When you authorize our application, TikTok may issue an authorization code that our system exchanges securely for an access token and, where applicable, a refresh token.

These credentials allow our application to access approved information or perform specifically authorized actions on your behalf.

We may securely process and retain these credentials while necessary to maintain an authorized connection, subject to applicable TikTok requirements.

We do not require users to disclose their TikTok account passwords directly to Endpoint Clients.

Users may decline optional permissions or revoke existing authorization through applicable TikTok account settings.

2.4 Content and Automation Information

To provide TikTok content management, uploading, and publishing features, we may process:

• Videos, photographs, captions, text, hashtags, and other content submitted by users.

• Selected TikTok accounts and publishing destinations.

• Content calendars and scheduled publishing dates.

• Workflow configurations and content preparation instructions.

• User-selected post visibility settings.

• User-selected comment, Duet, and Stitch settings, where supported.

• Commercial content disclosure selections, where applicable.

• Publishing authorization and consent records where necessary.

• Upload and publishing status, timestamps, errors, and delivery records.

• TikTok-generated publishing identifiers and post links.

• Content performance information where separately supported and authorized.

This information is used to operate workflows configured or approved by our customers.

We do not automatically expand granted permissions or use submitted content for unrelated purposes.

2.5 Technical and Usage Information

When you access our website or application, we may collect technical information, including:

• IP address and approximate location inferred from that address.

• Device and browser information.

• Operating system information.

• Application usage records and diagnostic information.

• Login events and security logs.

• Cookies or similar technologies used for authentication, security, and functionality.

Where non-essential analytics or tracking technologies are used, we will provide relevant notices and obtain consent where required by law.

3. How We Use Your Information

We use information collected through our Services for the following purposes:

Account Management: To register users, authenticate access, manage workspaces, and provide customer support.

TikTok Integration: To connect authorized TikTok accounts using official TikTok APIs and OAuth authorization mechanisms.

Content Preparation: To enable customers to organize, prepare, edit, and preview content intended for TikTok.

Content Uploading: To transfer user-approved content to TikTok through supported upload functionality, including draft-upload workflows where available.

Authorized Content Publishing: To publish user-approved content through TikTok's supported Content Posting API when the required permissions, user controls, and approvals are in place.

Workflow Execution: To manage content calendars, authorized publishing instructions, and related workflow status.

Service Operations: To maintain, troubleshoot, secure, and improve our platform.

Customer Communications: To provide service notifications, account updates, support responses, and important operational information.

Legal and Security Compliance: To prevent unauthorized use, investigate security incidents, comply with applicable laws, and meet TikTok's developer requirements.

We do not sell TikTok account information or access tokens.

We do not use TikTok-provided information for unrelated advertising, unauthorized profiling, scraping, unsolicited communications, or other purposes outside the permissions and functionality approved by TikTok.

4. TikTok Permissions and Access Tokens

Our Services rely on permissions granted by users through TikTok's official authorization processes.

When you connect a TikTok account:

1. You are redirected to TikTok's official authorization process.

2. TikTok displays the permissions requested by our application.

3. You choose whether to authorize the requested permissions.

4. TikTok may return an authorization code.

5. Our system securely exchanges that code for the applicable authorization credentials.

6. We use those credentials only to provide authorized functionality through approved APIs.

Depending on our approved integration, permissions may include:

Basic Account Information (user.info.basic): Access to supported basic profile information, such as the user's display name, avatar, and account identifier.

Additional Profile Information (user.info.profile): Access to additional profile fields, such as username, biography, and profile links, when separately approved and authorized.

Video Information (video.list): Read-only access to a user's public TikTok videos where approved and authorized.

Content Uploading (video.upload): Permission to upload supported content to TikTok for the user to complete the publishing process.

Direct Publishing (video.publish): Permission to directly publish supported content to a user's TikTok profile through approved API functionality.

These permissions are examples of available TikTok scopes. Our application requests only those needed for its enabled features.

Approval of a permission by TikTok does not, by itself, authorize access to an individual's account. The user must also grant the relevant permission.

We do not claim ownership of your TikTok account or published content.

Access tokens are used solely for authorized functionality and are not sold or disclosed to unrelated third parties.

We do not access private messages, retrieve contact lists, manage advertising campaigns, or perform other unrelated account activities unless those capabilities are separately supported, properly approved, clearly disclosed, and specifically authorized.

5. TikTok Content Publishing and User Control

Our Services may help users prepare, schedule, upload, and publish content to TikTok, subject to TikTok's approved API functionality and publishing requirements.

TikTok provides different content-sharing mechanisms.

5.1 Uploading Content as a Draft

Where supported, customers may upload videos or photographs to TikTok for further review, editing, and publication through TikTok's own interface.

Uploading content as a draft does not necessarily mean the content has been publicly published.

Users may need to open TikTok, review the uploaded content, and complete the publishing process.

5.2 Direct Content Publishing

Where TikTok has approved our application for direct publishing, users may submit supported content through the Content Posting API.

Before publishing, users must be given appropriate information and control over their content.

Depending on the type of post, this may include:

• Reviewing the selected TikTok account.

• Previewing the content to be published.

• Editing captions, titles, or hashtags.

• Selecting an available visibility or privacy setting.

• Selecting supported comment, Duet, and Stitch settings.

• Providing applicable commercial content disclosures.

• Reviewing relevant TikTok music usage requirements.

• Providing explicit consent before content is transmitted to TikTok.

Post visibility and interaction options depend on the current account settings and information returned by TikTok.

Our Services will not deliberately override TikTok account restrictions or users' selected publishing settings.

5.3 Scheduled Content and Automation

Our Services may allow customers to prepare content and configure future publishing workflows.

Scheduled content will be handled only through methods supported and permitted by TikTok, including required user authorization, content selection, consent, and account-level controls.

Creating a schedule does not provide unrestricted authorization to publish content or bypass TikTok's publishing requirements.

Where TikTok requires the user to complete a publishing step, our Services will not represent the content as fully published until the required process has been completed.

5.4 Commercial and Branded Content

Where relevant, users may need to identify content that promotes their own business, a brand, product, service, or third party.

Our Services will apply TikTok's supported commercial content disclosure requirements when applicable.

Customers remain responsible for the accuracy of promotional disclosures, appropriate music licensing, ownership or licensing of uploaded material, and compliance with TikTok's content policies.

5.5 Publishing Restrictions and User Responsibilities

TikTok may impose publishing limits, account restrictions, API review requirements, and restrictions on the visibility of content submitted through unaudited applications.

Customers remain responsible for their publishing instructions, selected destinations, schedules, content, and legal rights to publish that content.

Customers may request cancellation of pending workflows or disconnection of linked TikTok accounts.

Once authorization is revoked or an account is disconnected, our Services will stop initiating new TikTok API activities through that connection.

Operations already completed or transmitted to TikTok may not be reversible.

6. Legal Bases for Processing

Where applicable data protection laws require a legal basis, we process personal information under one or more of the following grounds:

• Contractual necessity: To provide the Services requested by our customers.

• Consent: Where consent is required, including TikTok account authorization and relevant content publishing activities.

• Legitimate interests: To operate, secure, maintain, and improve our Services, where those interests are not overridden by applicable individual rights.

• Legal obligations: To comply with laws, regulations, and legally binding requests.

For customer-controlled content and related personal information, Endpoint Clients may act as a service provider or data processor acting on customer instructions, depending on the circumstances and applicable law.

Where we independently determine the purposes and means of processing TikTok-provided personal data, applicable controller obligations and TikTok data protection terms may also apply.

We process information obtained from TikTok only for authorized purposes and in accordance with relevant platform requirements.

7. How We Share Information

We do not sell personal information or TikTok access tokens.

We may share limited information with the following categories of recipients where necessary and legally permitted:

TikTok: To authenticate integrations, verify authorized permissions, upload approved content, submit authorized publishing requests, and retrieve relevant publishing status information.

Technology Service Providers: Including hosting, database, infrastructure, workflow processing, security, monitoring, and technical support providers that assist us in operating the Services, subject to applicable privacy and TikTok platform restrictions.

Payment Processors: Where subscriptions or paid services are available, to process payments and maintain related records.

Legal Authorities: Where disclosure is required by applicable law or valid legal process.

Corporate Successors: In connection with a lawful merger, acquisition, restructuring, or transfer of business assets, subject to applicable data protection and TikTok contractual requirements.

Service providers handling personal information must be subject to appropriate confidentiality, security, and contractual restrictions.

TikTok authorization credentials and restricted API information will be shared only where expressly permitted by applicable platform requirements and necessary for authorized service operations.

We do not disclose TikTok-provided personal information to unrelated advertisers, data brokers, or unauthorized third parties.

8. Data Storage and Security

We use appropriate technical and organizational safeguards designed to protect personal information and TikTok authorization credentials against unauthorized access, disclosure, alteration, and loss.

These safeguards include measures intended to:

• Protect authentication credentials and access tokens.

• Restrict access to sensitive information.

• Secure communications and data transmission.

• Limit access to authorized personnel and systems.

• Monitor application security and investigate suspicious activity.

• Protect stored customer-uploaded content.

• Support secure deletion of information when no longer needed.

Where applicable, TikTok API credentials and secrets are handled through restricted server-side systems rather than publicly exposed client-side code.

Access to TikTok authorization data is limited to the systems and personnel that require it for legitimate operational purposes.

No internet-connected service can guarantee absolute security. We continuously assess security risks and take appropriate steps to address identified vulnerabilities.

If a security incident requires notification under applicable law or TikTok's requirements, we will provide the necessary notifications and take appropriate corrective actions.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to applicable legal, contractual, and TikTok-specific requirements.

In particular:

• Account information may be retained while an Endpoint Clients customer account remains active.

• TikTok access and refresh tokens may be retained while the connection remains authorized, necessary for functionality, and permitted by TikTok.

• Customer-uploaded content and scheduling configurations may be retained while required to provide the requested functionality.

• Publishing records and diagnostic logs may be retained for legitimate operational, security, or legal purposes, subject to restrictions on TikTok-provided information.

• TikTok profile and creator information will be retained only while reasonably necessary and permitted for approved functionality.

• Information that is no longer necessary will be deleted or anonymized in accordance with applicable requirements.

Where TikTok imposes additional limitations on retention, use, or deletion of information obtained through its APIs, those restrictions will apply.

We distinguish between customer-submitted content and information obtained directly through TikTok APIs when determining applicable retention requirements.

We will delete applicable TikTok information when required by a valid user deletion request, account closure, disconnection, TikTok's developer terms, or applicable law, subject to legally required retention.

If TikTok terminates our access to relevant developer services, we will cease use of the affected APIs and delete TikTok information as required by TikTok's applicable terms.

10. User Data Deletion Instructions

Endpoint Clients provides a method for individuals to request deletion of personal information and TikTok platform data associated with our Services.

To request deletion of your data:

Step 1: Send an email to info@endpointclients.com.

Step 2: Use the email subject line: "Data Deletion Request – Endpoint Clients".

Step 3: Include the email address associated with your Endpoint Clients account and identify the relevant connected TikTok account, where known.

Step 4: Indicate whether you wish to delete data associated with a particular TikTok connection or request deletion of your entire Endpoint Clients account.

Step 5: Our team will review the request, perform reasonable identity or authorization verification where necessary, and process the deletion in accordance with applicable laws and TikTok requirements.

Eligible deletion requests may result in the removal of:

• Stored TikTok access and refresh tokens.

• TikTok account identifiers and connection information.

• TikTok profile information obtained through approved APIs.

• Associated TikTok API data no longer required or permitted to be retained.

• Pending content publishing workflows associated with the deleted connection.

• Customer-uploaded content covered by the request.

• Customer account information and related records covered by the request.

Certain information may be retained where legally required or permitted, including limited records necessary to meet compliance or security obligations.

Important: Removing information from Endpoint Clients does not automatically remove content already published directly on TikTok.

Users may need to manage or delete previously published content directly through their TikTok accounts.

Revoking TikTok Access

Users may revoke Endpoint Clients' access through TikTok's account settings.

To review and remove connected third-party applications:

1. Open the TikTok application.

2. Navigate to Profile.

3. Open the Menu and select Settings and privacy.

4. Select Security & permissions.

5. Open Apps and services permissions.

6. Locate Endpoint Clients and select Remove access.

Menu labels may vary by region or application version.

When supported, Endpoint Clients may also initiate token revocation through TikTok's official OAuth revocation mechanism.

Revoking access prevents continued authorized API activity after the revocation takes effect.

A separate data deletion request may be necessary to remove personal information already retained by Endpoint Clients, subject to applicable deletion requirements.

Users may submit data deletion requests through the email process above without logging into the Endpoint Clients platform.

11. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Request access to personal information we hold about you.

• Request correction of inaccurate information.

• Request deletion of eligible personal information.

• Object to or restrict certain processing activities.

• Request a portable copy of eligible information.

• Withdraw consent where processing relies on consent.

• Revoke authorized TikTok account access.

• Submit a complaint to an applicable data protection authority.

Requests may be directed to info@endpointclients.com.

We may need to verify your identity or authority before processing certain requests.

We will not unlawfully discriminate against users for exercising applicable privacy rights.

Rights relating to information held independently by TikTok may also be exercised directly through TikTok's privacy tools and processes.

12. International Data Transfers

Endpoint Clients serves customers internationally and may use service providers or technical infrastructure located in countries other than the country in which a user resides.

Where personal information is transferred internationally, we will use appropriate safeguards and lawful transfer mechanisms where required by applicable data protection laws.

International transfers of personal information received through TikTok's developer services are also subject to applicable TikTok contractual requirements and data protection terms.

13. Third-Party Platforms and TikTok

Our Services integrate with TikTok, which is an independently operated third-party platform.

TikTok operates under its own privacy policies, terms of service, developer policies, content guidelines, and technical requirements.

Our integration with TikTok is subject to the applicable TikTok Developer Terms of Service, developer documentation, approved APIs, and user authorization requirements.

Endpoint Clients is not responsible for TikTok's independent privacy practices, API availability, content moderation decisions, account restrictions, or changes in platform functionality.

Users should review the relevant TikTok policies before authorizing our integration.

Relevant TikTok Policies and Documentation:

• TikTok Privacy Policy: https://www.tiktok.com/legal/page/us/privacy-policy/en (U.S. version; other regional policies may apply)

• TikTok Developer Terms of Service: https://t.tiktok.com/legal/page/global/tik-tok-developer-terms-of-service/en

• TikTok Developer Documentation: https://developers.tiktok.com/

• TikTok Content Sharing Guidelines: https://developers.tiktok.com/docs/en/content-sharing-guidelines

• TikTok App Review Guidelines: https://developers.tiktok.com/docs/en/app-review-guidelines

Endpoint Clients is independently operated and is not owned, sponsored, or endorsed by TikTok.

14. Children's Privacy

Our Services are designed for businesses and authorized professional users aged 18 or older.

We do not knowingly collect personal information directly from children for the purpose of providing customer accounts.

We do not intentionally offer TikTok account connection or content publishing features to individuals who do not meet our eligibility requirements.

If we become aware that personal information has been collected in violation of applicable children's privacy laws, we will take appropriate steps to delete it.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, applicable legal requirements, security practices, or TikTok's developer policies and integration requirements.

The latest version will be made publicly available with an updated effective date.

Where required by law, we will provide additional notice or obtain consent before material changes take effect.

16. Contact Information

If you have questions about this Privacy Policy, the handling of your personal information, TikTok integrations, or data deletion requests, please contact:

Endpoint Clients

Website: https://www.endpointclients.com/

Email: info@endpointclients.com

Office: New City Phase 2, F-Block, Street 6B, House # 1, Wah Cantt Wah Cantt, Punjab 47040.

For privacy-related requests, use the subject line:

Privacy Request – Endpoint Clients

For data deletion requests, use:

Data Deletion Request – Endpoint Clients

© 2026 Endpoint Clients. All rights reserved.