Privacy Policy

Last updated: July 2, 2026

This privacy policy describes how Snipe Social ("we", "us", "the application") collects, uses, and protects information when you use our service at this website.

1. Information We Collect

• Account information: name and email address, used for login.
• TikTok account data: when you authorize TikTok via OAuth, Snipe Social receives an access token, refresh token, TikTok user identifier, display name, avatar URL, and video metadata/metrics available through the scopes you approve.
• Instagram account data: when you authorize Instagram via OAuth, Snipe Social receives an access token, your Instagram username, account type, and profile picture URL.
• Content you upload: media files (images/videos), captions, hashtags, location, and schedule, stored in our database and Cloudflare R2 storage.
• Operational logs: IP address, user agent, request paths, and audit events for security and debugging.

2. How We Use Information

• To authenticate you and operate the service.
• To publish scheduled content to TikTok and Instagram on your behalf, using each platform's official API.
• To show post status, TikTok video metrics, Instagram insights, and comment/lead management views inside Snipe Social.
• To send relevant in-app notifications about content status.
• To maintain audit logs for security and operational integrity.

3. Data Storage & Security

• TikTok and Instagram access tokens are encrypted at rest using AES-256-GCM.
• Account passwords are hashed using bcrypt.
• Communication uses HTTPS (TLS).
• Media files are auto-deleted from Cloudflare R2 three (3) days after successful publish.

4. Data Sharing

We do not sell or rent your personal data. We share data only with the following providers required to operate the service:

• Meta / Instagram: to publish content via the Instagram Graph API.
• TikTok: to authenticate connected TikTok accounts, publish scheduled videos, check publishing status, and retrieve video metrics that are displayed to the authorized user.
• Cloudflare R2: for media storage.
• Database hosting: for application data.

5. Your Rights

• You may disconnect your TikTok or Instagram account at any time from the Accounts page; the access token will no longer be used by Snipe Social.
• You may request deletion of your account and associated data by contacting us at the email below.
• You may request a copy of your data.

6. Data Retention

Account and content metadata are retained for as long as your account is active. Media files are retained for up to 3 days after successful publish, then auto-deleted. Audit logs are retained for security and compliance purposes.

7. Children's Privacy

Snipe Social is not intended for users under the age of 13. We do not knowingly collect data from children.

8. Changes to this Policy

We may update this policy from time to time. The "Last updated" date at the top will reflect any changes.

9. Contact

For questions about this privacy policy or to exercise your rights, contact: isabayufathurrohman@gmail.com

10. Data Deletion Request

To request deletion of all data associated with your account, send an email to the address above with subject "Data Deletion Request". We will process the request within 30 days.