Privacy Policy

Last updated: 18 September 2026

1. Summary

Karma Files is a publishing tool. It processes only the information needed to connect to the TikTok account you authorize and to transfer the video you choose to upload. It does not sell data, does not run advertising, and does not build profiles.

2. Information we process

When you connect a TikTok account, the Service receives and stores:

• An access token and refresh token issued by TikTok, which allow the Service to act on the authorization you granted.
• The TikTok account identifier (open_id) associated with that authorization.
• The display name and avatar URL returned by TikTok, used only to show you which account is connected.
• The scopes you approved, so the Service knows which actions are permitted.

When you upload a video, the Service processes:

• The video file you selected, which is transferred to TikTok and then deleted from the server.
• The caption and hashtags you entered, which are sent to TikTok with the video.
• The publish_id and status TikTok returns, kept so the result of an upload can be shown to you.

3. What we do not collect

• We never ask for or store your TikTok password.
• We do not access your TikTok messages, followers, analytics, or other account data.
• We do not collect payment information.
• We do not use third-party advertising or tracking cookies.

4. How information is used

The information is used only to:

• Authenticate your TikTok account for the actions you request.
• Transfer the video and caption you selected to your TikTok inbox.
• Display the connection status and upload result back to you.

We do not use your information for advertising, profiling, or automated decision-making, and we do not sell or rent it to anyone.

5. Storage and security

Authorization tokens are stored on a private server and protected by file permissions that restrict access to the server operator. Video files are held only for the duration of the transfer and are removed immediately afterwards. Access to the server is restricted, and connections to the Service use HTTPS.

6. Sharing

Information is transmitted to TikTok because that is the purpose of the Service. Beyond that, we do not share information with third parties except where required by law.

7. Retention and deletion

Authorization tokens are kept until you disconnect the account. You can disconnect at any time from inside the Karma Files uploader, which deletes the stored token immediately. You may also revoke the app's access from your TikTok account settings. To request deletion of any other stored record, email the address in section 9 and we will act on the request.

8. Your choices and rights

You control which account is connected and when it is disconnected. Depending on where you live, you may have rights to access, correct, or delete personal information. Requests can be made using the contact details below.

9. Contact

Privacy questions and data requests: support@karmafiles.duckdns.org, or use the contact page. Please use the subject line Data request for deletion or access requests.

10. Changes to this policy

If this policy changes, the revision date at the top of this page will be updated. Continued use of the Service after a change means you accept the updated policy.