Privacy policy

1. Scope of This Policy

This Privacy Policy explains how IronStack Software, operated by IronStack LLC ("IronStack," "we," or "us"), handles information when people use our websites, games, applications, support services, and web-based social publishing workflow.

2. Information We May Collect

The information we process depends on the service and features you use. It may include:

• Account and contact data: names, email addresses, usernames, support messages, and other information submitted to us.
• TikTok account data: profile information made available through the permissions an authorized user grants, such as an account identifier, display name, avatar, and authorization status.
• OAuth and authentication data: access tokens, refresh tokens, granted scopes, token expiration details, and related security records. TikTok Login Kit is used for authorization; IronStack does not receive a user's TikTok password.
• Publishing content: videos, captions, titles, scheduling or publishing instructions, and related metadata that authorized users submit for publishing.
• Service and log data: IP address, browser or device information, timestamps, feature usage, error records, and security or audit logs.
• Game and app data: where relevant, gameplay progress, settings, achievements, and other data needed to provide an IronStack game or application.

3. How We Use Information

We use information as reasonably necessary to provide, maintain, secure, and support our services. TikTok and social publishing data is used only to operate the integration and publishing features, including to:

• Authenticate authorized team members and connected accounts.
• Display connection status and permitted account information.
• Prepare, upload, publish, or schedule authorized game-related content.
• Diagnose errors, protect the workflow, and maintain audit records.
• Respond to support, privacy, and data deletion requests.

We do not sell personal information or TikTok account data.

4. Sharing and Third-Party Processing

We may provide information to TikTok when an authorized user asks us to perform an approved publishing action. We may also use hosting, cloud infrastructure, authentication, storage, logging, and support providers to operate the services. These providers process data only as needed to perform services for us and are subject to their own privacy and security terms. We may disclose information when required by law or when reasonably necessary to protect users, IronStack, or the security of the services.

5. Storage, Security, and Retention

We use reasonable technical and organizational safeguards designed to protect information, including access controls, restricted access to authentication data, and protected transmission. No online system is completely secure. We retain information only for as long as needed to operate the relevant service, maintain security and audit records, resolve disputes, or meet legal obligations. OAuth tokens are removed or made unusable when they are no longer needed or when access is revoked, subject to limited security or legal retention requirements.

6. Revoking TikTok Access

Users remain in control of the TikTok accounts they connect. TikTok access can be revoked through the connected TikTok account's app authorization or security settings. Revocation prevents future API access but does not automatically delete records that we must retain for security, legal, or completed publishing purposes. You may contact us if you need help confirming a disconnection.

7. Your Choices and Data Requests

Depending on your location, you may have rights to access, correct, receive, object to the processing of, or request deletion of personal information. You can submit a request using these public tools:

• Request a copy of your data
• Request deletion of your data

We may need to verify your identity and authority over the relevant account before completing a request.

8. Children's Privacy

The social publishing workflow is intended for authorized IronStack team members and is not directed to children. We do not knowingly collect personal information from children under 13 through that workflow.

9. Policy Updates

We may update this policy as our services or legal obligations change. We will post the revised policy on this page and update the date above.

10. Contact Us

For privacy questions, TikTok access concerns, or data requests, contact us at contact@ironstacksoftware.com or use our contact form.