Effective date: August 2025
Controller: Ultimate Graphics Corporation (“UGC,” “we,” “us,” “our”)
Website: https://www.ultimategraphics.com.ph
App home: https://www.ultimategraphics.com.ph/publisher

This policy explains how we handle data for UGC TikTok Publisher, a public tool operated by Ultimate Graphics Corporation that lets TikTok creators and social teams upload and publish videos from desktop.

By using the App or initiating a TikTok authorization, you agree to this policy.

1) What this policy covers

• The /tiktokpublisher page and the App endpoints we use to authenticate with TikTok and publish videos.

• The /callback endpoint that receives TikTok OAuth parameters and forwards them to our secure backend.

This policy does not cover TikTok’s own products or policies. When you authorize with TikTok, your use is also subject to TikTok’s terms and privacy notices.

2) Data we collect and receive

a) TikTok account & authorization

• Basic profile data returned by TikTok after you grant permission (e.g., username/handle, avatar URL, available posting/privacy options).

• OAuth tokens (access and refresh tokens) and granted scopes (e.g., user.info.basic, video.upload, video.publish).

b) Posting inputs you provide

• Captions and hashtags, privacy selection, and interaction settings (comments/duet/stitch).

• Video files you upload through the App, or video URLs you provide if posting from a verified URL source.

c) Operational and audit metadata

• Timestamps, HTTP status codes, and request/response envelopes from our calls to TikTok’s API.

• Hashed token fingerprints (short, non-reversible hashes) for troubleshooting.

• We do not write full tokens or secrets to logs.

d) Website telemetry (minimal)

• The /publisher page is informational. We do not inject advertising or cross-site tracking.

• Our website and infrastructure may perform routine server logging (e.g., IP address, user agent) for security and performance.

3) How we use the data

• Authenticate you with TikTok and maintain a valid session to post content you request.

• Prepare and publish videos to TikTok (or save to drafts) using the settings you choose.

• Provide reliability (e.g., chunked uploads, status polling) and perform troubleshooting, security monitoring, and audit.

• Comply with law and enforce our Terms (e.g., handling abuse or rights inquiries).

We do not use your data for advertising, profiling, or resale.

4) Legal bases (where applicable)

• Performance of a contract / requested service (posting content you ask us to post).

• Legitimate interests (operating a secure, reliable tool; preventing abuse).

• Consent (where required by platform terms or local law, e.g., connecting a TikTok account).

5) Data sharing and processors

We share data only as needed to operate the App:

• TikTok — to authenticate, upload media, and publish posts you authorize.

• Infrastructure providers — secure hosting and network services that run the App and the /callback forwarder.

• Support operations — limited access to operational artifacts when necessary to resolve an issue you report.

We do not sell or “share” personal information for cross-context behavioral advertising.

6) Storage, security, and retention

• Tokens: stored server-side in a restricted location and transmitted only over TLS. We do not write raw tokens to logs; only short hashed fingerprints may appear for diagnostics. Tokens are retained until they expire, are revoked, or you disconnect, and are then removed during routine maintenance.

• Video files: kept only as needed to post or troubleshoot a failed upload. We aim to delete successfully posted files within 24 hours and failed/draft files within 7 days, unless needed longer for support or legal reasons.

• Logs: operational logs (with no raw tokens) are retained for up to 180 days and then deleted or anonymized.

• Access controls: least-privilege access for staff; administrative access is logged.

• Transport: all App communications use HTTPS/TLS.

Security can never be absolute, but we implement technical and organizational measures appropriate to the risks of this service.

7) International transfers

Our infrastructure and TikTok’s services may process data in multiple countries. Where required, we use appropriate safeguards (e.g., contractual measures with service providers).

8) Your choices & rights

• Disconnect / revoke access: you can disconnect the App from your TikTok account at any time via TikTok settings or by contacting us.

• Access / correction: request a summary or correction of the data we hold related to your use of the App.

• Deletion: request deletion of stored tokens, media, and related logs (subject to legal/audit obligations).

• Objection / restriction: where applicable, you may object to or request restriction of certain processing.

We will respond in accordance with applicable law and our security protocols.

9) Children

The App is not directed to children under 13 (or the age defined by local law). We do not knowingly collect data from children through this service.

10) Third-party links

The /tiktokpublisher page may link to TikTok or other documentation. Those sites are governed by their own policies, which we do not control.

11) Changes to this policy

We may update this policy from time to time. Material changes will be dated at the top of the page. Your continued use of the App after an update indicates acceptance of the revised policy.

12) Contact

Ultimate Graphics Corporation
Email: app@ultimategraphics.com.ph

When contacting us about a specific TikTok authorization or upload, please include your TikTok handle and an approximate timeframe so we can locate relevant records.