Postloop

Privacy Policy

Last updated: September 29, 2026

This policy explains what data Postloop ("Postloop", "we") collects when you use the content planning and analytics panel on this site, why we collect it, and what choices you have. Postloop is operated by Ali Balcı. You use the panel to manage TikTok accounts that you own or are authorized to manage.

1. Information we collect

  • Postloop account information: the email address you use to log in to the panel and a hash of your password (or a hash of your API key).
  • TikTok account data, received only after you connect an account with TikTok Login and approve the permissions: your TikTok open ID, username, display name, avatar URL, and your follower, following, like and video counts (scopes: user.info.basic, user.info.profile, user.info.stats); your public videos and their view, like, comment and share counts (video.list); and the access and refresh tokens TikTok provides so we can publish the posts you schedule (video.publish) or send them to your TikTok inbox as drafts (video.upload).
  • Content you create: the images, videos, captions, hashtags, titles, privacy settings, schedules and content strategy notes you add to Postloop.
  • Billing: if you subscribe to a paid plan, payment is processed by our payment provider. We receive your plan and payment status; we never see or store your full card number.
  • Operational data: an activity log of actions (for example, a draft being created, or a post being published or failing) and basic technical data in server logs, such as IP address and browser type.

We do not collect your TikTok password, your direct messages, your contacts, or any data from accounts you have not connected.

2. How we use information

  • To publish and schedule the posts you create on the accounts you connect, using the TikTok Content Posting API.
  • To show account overviews, post performance and best posting times using Display API data.
  • To keep the service secure, prevent abuse, fix bugs and provide support.

We do not sell your data, we do not use TikTok data for advertising or profiling, we do not train machine learning models on TikTok user data, and we do not share this data with data brokers.

3. How we share information

  • TikTok: your content and settings are sent to TikTok when a post is published, and we call TikTok APIs to read the data listed above.
  • Service providers host the app, the database and file storage. They may process data only to provide services to us.
  • Legal reasons: when required by law, or when needed to protect the rights and safety of users.

4. Storage and security

TikTok access and refresh tokens are encrypted at rest with AES-256-GCM. Passwords and API keys are stored only as hashes. Media that TikTok downloads is served through signed links that expire. Access to the panel requires authentication, and every automated or AI-assisted action is recorded in the activity log. No system is completely secure, but we work to protect your data.

5. Retention and deletion

  • TikTok data is kept only while the account stays connected. When you disconnect an account in Postloop, its tokens are deleted immediately; profile data, synced metrics and posts are deleted within 30 days.
  • You can delete drafts and media in the panel at any time. To delete your Postloop account and all related data, send an email to [email protected]. We complete your request within 30 days.
  • You can remove Postloop's access directly in TikTok: Settings and privacy, Security and permissions, Apps and services. Once access is removed, we can no longer read the account or publish posts to it.

6. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data; to object to or restrict certain processing; and to withdraw your consent. To exercise these rights, contact: [email protected].

7. Children

Postloop is intended for people aged 18 and over and is not directed at children. We do not knowingly collect information from anyone under 18. If you believe a child has provided us with data, contact us and we will delete it.

8. Changes to this policy

We may update this policy. We will change the date above and announce significant changes in the panel. Continuing to use Postloop after a change means you accept the updated policy.

9. Contact

For questions or requests about this policy: [email protected]. See also: Terms of Service.