Privacy Policy

Effective date: 6 September 2026 · Controller: Bin Abdullah LLC · Contact: hello@bryteai.studio

1. What Bryte Publisher does with your data

Bryte Publisher (publisher.bryteai.studio) lets you post videos to your own TikTok account. It is designed to hold as little data as possible. We do not run user accounts of our own, we do not keep a database of users, and we do not store your videos.

2. Data we receive from TikTok

When you sign in with TikTok you grant the following permissions, and TikTok sends us the data listed:

• user.info.basic — your TikTok open ID, display name and avatar. We use these only to show you which account you are posting to.
• video.upload and video.publish — the ability to upload a video and publish it to your account, and to read the publishing status of that post. We also read your creator settings (available privacy levels, whether comments, Duet and Stitch are enabled, and the maximum video length) so the post form matches your account.

We also receive an access token and a refresh token from TikTok so the Service can act on your behalf.

3. Where that data lives

• Access and refresh tokens are encrypted (AES-256-GCM) and stored only in an HttpOnly cookie in your own browser for up to 30 days. They are not written to any database or log on our side. Signing out deletes the cookie immediately.
• Your profile details and creator settings are fetched from TikTok when you open the post page and displayed to you; they are not stored.
• Videos and captions are transmitted through our server to TikTok's upload endpoint in memory during the request and are not saved.

4. Data we collect ourselves

Our hosting provider (Cloudflare) processes standard connection data such as IP address, browser type and request timestamps to deliver the site and protect it from abuse. We do not use advertising trackers or analytics cookies.

5. How we use data

Only to provide the Service: authenticate you with TikTok, show you the account you are posting to, upload and publish the video you chose, and report the publishing status back to you. We do not sell, rent or share your data with third parties, and we do not use TikTok data for advertising, profiling or any purpose other than the posting you requested.

6. Sharing

Data is shared only with TikTok (to perform the sign-in and posting you asked for, under TikTok's Privacy Policy) and with Cloudflare as our hosting processor.

7. Retention and deletion

Because nothing is stored server-side, deleting your data is immediate: sign out of Bryte Publisher (deletes the encrypted cookie) and, if you wish, remove the app in TikTok under Settings → Security → Manage app permissions, which invalidates the tokens. You can also email hello@bryteai.studio and we will confirm within 30 days.

8. Security

All traffic uses HTTPS. Tokens are encrypted with a server-side key and are never exposed to page scripts. API secrets are held as encrypted environment variables on Cloudflare.

9. Your rights

Depending on where you live (for example under the GDPR or UK GDPR), you may have rights to access, correct, delete or object to processing of your personal data. Contact us at the address above; because we store no account data, most requests are satisfied by signing out and revoking the app in TikTok.

10. Children

The Service is for adults aged 18 or over and is not directed at children.

11. Changes

We will post any changes here with a new effective date.

12. Contact

Bin Abdullah LLC · hello@bryteai.studio · bryteai.studio