Privacy Policy

This policy explains what information Loop ("Loop", "we", "us") collects when you use our scheduling and publishing service at loop.workin.top, why we collect it, how long we keep it and how you can have it removed. We collect the minimum needed to make scheduled publishing work.

1. Who we are

Loop is an independent product, currently in private beta. For any question about this policy, about the data we hold or to request deletion, contact adwcpro@gmail.com. We answer privacy requests within 30 days.

2. Information you give us

• Account details. The email address you register with and, if you set one, a display name.
• Content you upload. Video files, cover images and captions you add in order to schedule a post.
• Schedule data. Which connected account a post is for, the date and time you chose, and the current status of that post.
• Messages. Anything you send us by email or through the beta access form.

3. Information we receive from TikTok

When you connect a TikTok account, you are taken to TikTok's own authorisation screen and you approve the permissions there. We never see or store your TikTok password. With your authorisation we receive and store:

• your TikTok account identifier (open ID), username, display name and avatar image URL — so you can tell your connected accounts apart;
• access and refresh tokens, which let Loop publish on your behalf at the scheduled time. Tokens are encrypted at rest and are never shown in the interface or shared;
• for posts published through Loop: the post identifier and its public metrics such as views, likes, comments and shares.

We do not request or receive direct messages, follower lists, private analytics or any data about accounts you have not connected.

4. Information collected automatically

Our servers keep standard technical logs — IP address, browser type, time of request and the page requested — for security and troubleshooting. These logs are kept for 30 days and then deleted. We use a first-party session cookie to keep you signed in. We do not run advertising or cross-site tracking cookies.

5. How we use the information

• to publish the videos you scheduled, to the accounts you chose, at the time you chose;
• to show you the state of your queue and whether a post succeeded or failed;
• to display performance figures for posts published through Loop;
• to keep your account secure and to investigate abuse or technical faults;
• to reply to you when you contact us.

We do not use your content or your TikTok data for advertising, and we do not use it to train machine learning models.

6. Legal basis

Where the GDPR applies, we process your data to perform the contract you entered into by using Loop (Article 6(1)(b)), on the basis of your consent for connecting a TikTok account (Article 6(1)(a)), and on our legitimate interest in keeping the service secure (Article 6(1)(f)).

7. Sharing

We do not sell, rent or trade your data. We share it only with:

• TikTok — the video, caption and posting instruction, because that is the point of the service;
• our infrastructure providers — hosting and storage suppliers that process data on our instructions and are bound by confidentiality;
• authorities — only where we are legally required to, and only to the extent required.

8. How long we keep it

• Uploaded video files — deleted within 7 days after the post is published or cancelled.
• TikTok tokens — deleted immediately when you disconnect the account, and automatically when they expire and are not renewed.
• Schedule history and metrics — kept while your account is active, so you can see what was published.
• Technical logs — 30 days.
• Everything else — removed within 30 days of you deleting your Loop account.

9. Your rights

You can ask us to show you the data we hold about you, correct it, delete it, or export it in a machine-readable form. You can withdraw your authorisation at any time — either by disconnecting the account inside Loop, or directly in TikTok under Settings → Security → Manage app permissions. Revoking there stops Loop from publishing immediately. Write to adwcpro@gmail.com to exercise any of these rights. If you are in the EU or UK and believe we handled your data badly, you may complain to your national data protection authority.

10. Security

Traffic to Loop runs over HTTPS. Tokens are encrypted at rest, access to production systems is limited to the people who operate the service, and uploads are stored in private buckets that are not publicly listable. No system is perfect; if a breach affects your data we will notify you without undue delay.

11. Children

Loop is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a minor has created an account, write to us and we will delete it.

12. International transfers

Our servers are located in the European Union. If data is transferred outside the EEA, we rely on the European Commission's standard contractual clauses.

13. Changes

If we change this policy we will update the date at the top and, when the change is significant, notify registered users by email before it takes effect.

14. Contact

Questions, data requests and complaints: adwcpro@gmail.com.