Your data.
Clearly explained.

About this policy

This policy covers the Tokengines website and Bot Studio. Use the contact form for privacy requests; we may need to verify your identity before disclosing account data.

Information we process

Account: email address, password hash, verification and reset tokens, session identifier, expiry date, browser information and IP address. Social connections: platform identifiers, profile name, avatar, OAuth permissions and authorization tokens.

Content: uploaded videos, captions, tags, destination settings, scheduled dates, publishing results, saved ideas, account statistics, bot configurations, theme sources and detected public YouTube videos. Contact messages contain the details you submit.

Authorization tokens

TikTok, YouTube and Instagram authorization happens on their own websites. Tokengines stores encrypted access and refresh tokens to perform the authorized actions, including scheduled publication. Your platform passwords are not collected.

Purposes and legal bases

Providing your requested account, publishing, scheduling and statistics features is necessary to perform the service contract. Session security, abuse prevention and operational diagnostics serve our legitimate interest in protecting the service. Platform access is limited to the permissions you grant and can revoke.

Storage and retention

Application sessions expire after seven days. Verification and reset links have a limited lifetime and are invalidated after use. Expired records are removed by periodic maintenance. Scheduled video files are encrypted on the server and deleted after their destinations finish; jobs requiring a manual review can retain their file until resolved. Instagram also needs a temporary unencrypted copy accessible via a signed URL, expiring after twenty-four hours.

Account records, ideas, theme configurations and publishing history remain stored until deleted or until an account deletion request is fulfilled. Text drafts and display preferences are kept in your browser; a selected video file is not restored after reloading the editor. Cookies maintain your session and language/theme preferences.

Ask us for the retention periods that apply to backups, contact messages and server logs. These periods depend on the hosting and email configuration.

Recipients and transfers

Videos and publishing metadata are sent to the destinations you select: TikTok, Google/YouTube or Meta/Instagram. Email delivery uses the configured email provider (Resend in the default deployment). Public YouTube events use Google WebSub; Discord notifications, when enabled, go to the configured Discord channel. The website font is served from Tokengines, without an external font request.

These providers may process information outside the EEA under their own terms and transfer safeguards. Request the list of providers and applicable safeguards through the contact form. We do not sell your personal data.

Security

Passwords are hashed; social tokens, queued reset links and scheduled video files are encrypted. HTTPS, session checks, CSRF protections, access controls and request limits protect the service. No internet service can promise absolute security.

Your rights and connections

Disconnect a platform from your dashboard or revoke access in its own settings. Disconnection does not delete your Tokengines account or already published videos. You can request access, correction, erasure, restriction, objection or portability as applicable through the contact form. You may lodge a complaint with your supervisory authority (CNIL in France).