Privacy Policy

1. Information we collect

Account information

When you register, we collect your name, email address, and authentication information. Passwords are stored as protected password hashes rather than readable passwords. We also maintain essential session identifiers used to keep you signed in.

Connected social-account information

When you connect TikTok or another supported platform, we receive the information and permissions you authorize. For TikTok, this may include your platform-specific user ID, display name, profile image, approved scopes, access token, refresh token, and token expiration times. Social access and refresh tokens are encrypted before storage.

Content and publishing information

We process videos, filenames, captions, audience choices, interaction settings, commercial-content disclosures, AI-content disclosures, publishing identifiers, and processing results that you provide or generate through Relay.

Technical information

Our infrastructure may automatically process IP addresses, browser and device information, request timestamps, security events, diagnostic data, and similar information needed to deliver and protect the service.

2. How we use information

We use information to:

• create and secure your Relay account;
• connect, refresh, and disconnect authorized social accounts;
• store media and carry out the publishing instructions you explicitly approve;
• show creator-specific privacy and interaction options;
• track upload, processing, and publishing status;
• prevent fraud, abuse, unauthorized access, and technical failures;
• support users and respond to privacy requests; and
• comply with law and enforce our Terms.

Where applicable, we rely on performance of our agreement with you, your consent, compliance with legal obligations, and our legitimate interests in operating and protecting Relay.

3. TikTok and other platform data

Relay accesses platform data only through official authorization flows and only within scopes you approve. We use TikTok data to identify the connected creator, display current publishing options, submit content at your direction, check publishing status, refresh authorization, and revoke access when you disconnect.

We do not sell TikTok user data, use it for targeted advertising, or share it with unrelated third parties. TikTok’s own processing is governed by TikTok’s privacy policy and terms.

4. How information is shared

We may share or make information available:

• With connected platforms: when you direct Relay to publish or request account information.
• With infrastructure providers: Cloudflare provides hosting, database, object storage, networking, and security services used by Relay.
• For legal and safety reasons: when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or secure the service.
• During a business transaction: in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

We do not sell personal information.

5. Storage, security, and international processing

Relay uses Cloudflare D1 for application records and Cloudflare R2 for uploaded media. We use access controls, encrypted transport, encrypted social tokens, signed media URLs, and other safeguards designed to protect information. No system can guarantee absolute security.

Our providers may process information in countries other than your own. Where required, we use appropriate measures intended to protect information during international processing.

6. Retention and deletion

We retain account information while your account is active and as reasonably necessary to operate the service, resolve disputes, maintain security, or meet legal obligations. Social tokens are retained until you disconnect the platform, the authorization expires, or your account is deleted.

Uploaded media and publishing records may remain after you disconnect a platform. You may request deletion of your account, uploaded content, or associated personal information by emailing us. Some limited information may be retained when required for security, legal compliance, or the establishment or defense of legal claims.

7. Cookies

Relay uses essential cookies and similar browser storage to authenticate sessions, maintain security, and remember necessary application state. Relay does not currently use advertising cookies or sell cookie-derived information.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your personal information, object to certain processing, or withdraw consent. You may also:

• disconnect a social platform from Relay’s Connections page;
• revoke Relay directly through the connected platform’s account settings; and
• request account or content deletion by contacting us.

We may need to verify your identity before completing a request. You may also have the right to complain to your local data-protection authority.

9. Children’s privacy

Relay is not directed to children under 13, and we do not knowingly collect their personal information. Higher minimum ages may apply depending on local law or the connected platform. If you believe a child has provided information to Relay, contact us so we can investigate and delete it where appropriate.

10. Changes to this policy

We may update this Policy as Relay’s features or legal obligations change. We will post the revised version with a new effective date and provide additional notice where required.

11. Contact and privacy requests

For questions, requests, or complaints about privacy, email privacy@aldas.dev.