Privacy Policy

Effective date: 22 September 2026 · Last updated: 22 September 2026

1. Who we are

The app is operated by the owner of the TikTok account @izsurucutr. The same account is the only account the app is authorized to act on. Contact for any privacy question or request: reach the operator through that TikTok account.

2. What data the app accesses

• TikTok account basics (user.info.basic): the account's open ID, display name, and avatar, used to confirm which account is connected.
• TikTok upload permission (video.upload): the ability to send a video file to TikTok and into the authorizing account's TikTok inbox, only when the operator starts an upload.

The app does not read followers, direct messages, analytics, or any other users' data, and it does not request scopes it does not use.

3. Where data is stored

• OAuth tokens (access and refresh tokens) are stored in Windows Credential Manager on the operator's computer, protected by the Windows user account. They are never written to a log, a file in the project directory, or any remote service.
• Content pipeline data (source clips, renders, captions, approval decisions) is stored in a local SQLite database on the same computer.
• Video files stay in local project folders until the operator uploads one.

There is no ClipFarmer server. The app does not transmit personal data to the developer or to any third party, and it contains no analytics, telemetry, or advertising components.

4. Legal basis and purpose

Data is processed only to perform the actions the operator explicitly requests: authorizing the app on TikTok, reading which account is connected, and uploading a video the operator has approved. Authorization is given by the operator directly through TikTok's consent screen.

5. Sharing

No data is sold, rented, or shared. When the operator uploads a video, the video file and its metadata are sent to TikTok, which processes them under TikTok's own Privacy Policy. Aside from that, the app makes no other network calls that carry personal data.

6. Retention and deletion

• Disconnecting the account in the app, or removing the app's access in TikTok (Settings and privacy → Security & permissions → Manage app permissions), invalidates the stored token immediately.
• Tokens can be deleted at any time from Windows Credential Manager on the operator's machine.
• Local pipeline data and rendered files can be deleted by deleting the application's data folder; nothing is retained anywhere else.

Because the app stores data only on the operator's own computer, there is no server-side copy for us to delete on request. A request sent to the contact above will be answered within 30 days.

7. Children

The app is not directed at children and is not offered to anyone under the age required to hold a TikTok account.

8. Security

Tokens are held in the operating-system credential vault, not in plain files. OAuth authorization uses PKCE and a loopback callback on 127.0.0.1, so the authorization code is never exposed on the network. Access can be revoked at any time on TikTok's side.

9. Changes

If this policy changes, the revised version will be published on this page with a new effective date. Material changes will also be noted in the app's release notes.

10. Contact

Privacy questions and data requests: contact the operator of ClipFarmer Studio through the TikTok account @izsurucutr.