Privacy Policy

Last Updated: August 16, 2026

Welcome to Keyucc Studio ("we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and protect information when you visit legal.keyucc.top or use Keyucc Studio's creator publishing and commerce-integration services (collectively, the "Services").

Please read this Privacy Policy carefully. By accessing or using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms, please do not access the Services.

1. Information We Collect

1.1 Information You Provide

When you authorize our application through the TikTok platform, we may collect the following information via TikTok's API:

• Account Information: Your TikTok display name, profile avatar, and Open ID, which are used solely for account identification and authentication.
• Content Data: When you use our publishing or scheduling features, we temporarily process your video files and associated metadata (including captions, hashtags, and tags) strictly for the purpose of publishing to your TikTok account.

1.2 Information Collected Automatically

Like most website operators, we automatically collect certain technical information when you access our site, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system type and version
• Pages viewed and time spent on pages
• Referring website or platform

This technical data is collected for security monitoring, debugging, and service improvement purposes only.

1.3 Cookies and Tracking Technologies

We may use essential cookies and similar technologies to maintain sessions, protect the Services, and remember security-related preferences. We do not use cookies to sell personal information or to deliver third-party targeted advertising. You can control cookies through your browser settings; disabling essential cookies may prevent some features from working.

2. How We Use Your Information

We use the collected information exclusively for the following purposes:

• To authenticate and manage your TikTok account authorization and linked permissions.
• To schedule, publish, and manage video content on your behalf via the TikTok Content Posting API.
• To retrieve, process, and display only the analytics and performance data that you authorize us to access.
• To maintain the security and integrity of our Services, including fraud prevention and technical troubleshooting.
• To communicate with you regarding service updates, support requests, and policy changes.

3. Data Storage and Security

We use reasonable administrative, technical, and organizational measures designed to protect the information we process:

• Transport security: The legal website is served over HTTPS. Our production services are designed to use encrypted connections for data in transit.
• Access control: Access to personal data is limited to personnel and service providers who need it to operate, secure, or support the Services.
• Token management: We limit use of TikTok authorization tokens to the authorized features and take steps to protect them from unauthorized access.
• Data minimization: We aim to collect and retain only the data reasonably needed to provide the Services.

4. Data Retention

We retain your personal data only for as long as necessary to provide our Services:

• Account and authorization data: Retained while your account remains active or as needed to provide the authorized feature. When you delete your account or revoke TikTok authorization, we will delete or de-identify the associated data unless retention is required by law or necessary to resolve a security, fraud, or legal matter.
• Content files: Retained only for the time needed to process the publishing request and troubleshoot a failed request, then deleted or de-identified.
• Log data: Retained for a limited period needed for security, fraud prevention, and debugging, then deleted or de-identified.

5. Your Rights (GDPR & CCPA Compliance)

5.1 Under the GDPR (European Economic Area)

If you are a resident of the EEA, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data (subject to legal obligations).
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Request a machine-readable copy of your data.
• Right to Object: Object to our processing of your data based on legitimate interests.

5.2 Under the CCPA / CPRA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of personal information held by the business, subject to certain exceptions.
• Right to Opt Out: Opt out of the sale or sharing of personal information (we do not sell or share your data).
• Right to Non-Discrimination: Exercise your CCPA rights without receiving discriminatory treatment.
• Right to Limit Use of Sensitive Personal Information: Request that we limit the use of sensitive personal information, if applicable, to the purposes disclosed in this policy.
• Automated Decision-Making: We do not use automated decision-making, including profiling, that produces legal or similarly significant effects.
• "Shine Do Not Sell": We do not sell or share your personal information for targeted advertising purposes.

To exercise any of these rights, contact us at support@keyucc.top. We will verify your request and respond within the period required by applicable law.

6. Third-Party Services

Our Services interact with the following third-party platforms:

• TikTok: We use TikTok's official API to access authorized account information and publish content. TikTok's own Privacy Policy governs the data you share with them: https://www.tiktok.com/legal/privacy-policy
• Service providers: We may use hosting, storage, email, security, and support providers that process information only as needed to provide services to us and subject to appropriate contractual or legal safeguards.

7. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete such information promptly.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Where required, we use appropriate safeguards for international transfers, such as contractual protections or another lawful transfer mechanism.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

11. Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal data. You will have the opportunity to opt out of such transfer at that time.

12. Legal Disclosure

We may disclose your personal data when required by law, in response to a subpoena, court order, or governmental request, or to protect the rights, property, or safety of Keyucc Inc., our users, or others. Any such disclosure will be limited to the information reasonably necessary to comply with the legal requirement.

13. Links to Third-Party Websites

Our Services may contain links to third-party websites and services, including but not limited to TikTok and AWS. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review their privacy policies before providing any personal information to them. The inclusion of any links does not imply our endorsement of the linked sites.