All SNS Publish Privacy Policy

This Privacy Policy explains how All SNS Publish, operated by ミチガエル株式会社, processes information when you use the app.

1. Information We Process

• OAuth authorization data and access tokens for connected YouTube, X, and TikTok accounts.
• OAuth callback parameters received at https://www.all-sns-publish.com/callback, including authorization code, state, and granted scopes when returned by the platform.
• Post plan data such as captions, titles, hashtags, media paths or source URLs, privacy settings, and schedule settings.
• TikTok creator information returned by creator_info/query, including avatar URL, username, nickname, privacy options, interaction restrictions, and maximum video duration.
• Confirmation evidence showing that the creator reviewed content, selected privacy, confirmed metadata, and accepted required disclosures.
• Operational logs and status results for posting, retries, failures, and platform responses.

2. How We Use Information

• To authenticate with connected platform APIs.
• To complete OAuth callback handling, exchange authorization codes for tokens, and refresh or revoke tokens when requested.
• To generate platform-specific posting payloads.
• To run scheduled YouTube and X posting when configured by the operator.
• To prepare TikTok Content Posting API application evidence and creator-controlled posting records.
• To diagnose failures, avoid duplicate posting, and show posting status.

3. Storage and Security

Tokens are stored locally in token files or supplied through environment variables. Secrets are not committed to source control or embedded in public client code. Authorization codes are used only to complete token exchange and should not be published in support tickets, screenshots, or source control. Operators restrict filesystem and server access to authorized personnel only.

4. Sharing

The service sends content and metadata only to the connected platforms selected in a post plan. Application evidence may be shared with TikTok during app review. Tokens, client secrets, and unpublished OAuth callback values are not sold or intentionally shared with third parties.

5. Retention

Post plans, confirmation evidence, tokens, logs, and state files are retained by the operator until deleted or rotated. Local tokens can be removed to disconnect an account from future posting.

6. User Control

Creators can revoke platform access from the relevant platform account settings. Operators can revoke TikTok access and delete local tokens, post plans, logs, and generated application evidence. Privacy or deletion requests can be sent to the contact address below.

7. Changes

We may update this policy. The effective date at the top of this page indicates when the current version took effect.

8. Contact

For privacy questions, contact info@michi-gaeru.net.