Privacy Policy

This Privacy Policy explains how FB AutoPilot Studio ("we", "our", "Service"), operated by Henry, under UK LTD (SHABNAM SHAHG LTD)16608766 handles information collected from users when they use our content scheduling and analytics tool for Facebook Pages and TikTok accounts.

1. Information We Collect

• Account credentials you provide: Facebook App ID, Facebook Page Access Tokens, TikTok OAuth access tokens, Google Drive API key, and Google Drive folder URLs. These are entered by you into the dashboard and stored in our database.
• Page metadata: Facebook Page name, Page ID, follower count, post performance metrics. TikTok account username, follower count, video performance metrics.
• Content metadata: Video filenames, captions, and posting schedules you configure.
• Usage logs: Posting activity (success/failure timestamps), error logs, and refresh history.

2. How We Use Information

• To publish your videos to your authorized Facebook Pages and TikTok accounts on the schedule you configure.
• To display analytics (views, likes, comments, follower growth) for the accounts you connect.
• To diagnose errors and improve the reliability of the Service.

We do NOT use your data for advertising, do NOT sell it, and do NOT share it with third parties except as described below.

3. Use of TikTok Data

• We use the TikTok Content Posting API to publish videos you choose to your connected TikTok account.
• We use TikTok's Login Kit to authenticate your account via OAuth 2.0. You can revoke access at any time in your TikTok security settings or in our dashboard.
• TikTok access tokens and refresh tokens are stored encrypted at rest and used only to perform actions you have requested.
• We do NOT share TikTok data with any third party except service providers strictly required to operate the Service.
• Where applicable, we comply with TikTok's AI content disclosure requirements by setting the is_aigc flag for AI-generated content posted through our Service.

4. Use of Facebook Data

We use the Facebook Graph API to publish posts and retrieve insights on Pages you have explicitly authorized. We follow the same principles as Section 3: minimum necessary data, no sharing, revocable consent.

5. Data Storage and Security

Data is stored on Railway (railway.app) infrastructure. Access tokens are encrypted at rest. The dashboard is password-protected. We do not retain video content on our servers — videos are streamed from your Google Drive folder directly to Facebook/TikTok at posting time.

6. Data Retention

We retain account configuration data for as long as your account is active. When you delete a Page or Account from the dashboard, all associated tokens and configuration are removed. If you request a refund, your data is retained for 30 days then permanently deleted. Activity logs are kept for diagnostic purposes for up to 90 days.

7. Your Rights

• You can view, edit, or delete any data we hold about you at any time via the dashboard.
• You can revoke our access to your Facebook or TikTok accounts at any time through the respective platform's security settings.
• You can request a full export or deletion of your data by contacting us at the email below.

8. Children

The Service is not directed to anyone under 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy. Material changes will be announced in the dashboard. Continued use after a change constitutes acceptance.

10. Contact

For any privacy questions or data requests, contact: autopilotstudio9@gmail.com