Effective August 28, 2026
Privacy Policy
This notice explains the limited data used by the local NOVA Creator Studio TikTok Sandbox integration.
1. Controller and contact
NOVA Creator Studio is the development project operated for TikTok target user @darkfrequency679. Privacy requests can be sent directly to asamitko@abv.bg. This notice must be updated with the operator's full public legal details before any public or multi-user launch.
2. Data the integration processes
- Authorization data: TikTok
open_id, access and refresh tokens, token expiry, granted scopes and a non-reversible local fingerprint. - Creator and posting data: Login Kit includes
user.info.basic. Before a Direct Post, the creator-info endpoint supplies current username, nickname, privacy choices, interaction availability and maximum video duration. TikTok may also return an avatar URL; NOVA does not retain or expose that signed URL. - Upload data: the creator-selected MP4, upload size, confirmed caption and hashtags, privacy level, interaction controls and required declarations are sent directly from the Desktop app to TikTok only after exact-post consent.
- Local operational records: asset hashes, TikTok publish identifiers, processing status, timestamps and test-only receipts used to resume safely and avoid duplicate uploads.
3. Why the data is used
The data is used only to authenticate the authorized target user, show accurate current posting choices, deliver the confirmed private Direct Post, check its processing status, resume interrupted transfers, prevent accidental duplicates and diagnose failures. Uploading begins only after explicit OAuth authorization and per-post consent.
4. Storage and security
OAuth client credentials and user tokens are encrypted locally using the operating system-backed NOVA secure store. Local receipts remain within the creator's project directory. NOVA does not operate a remote database for this Sandbox and does not copy OAuth secrets into this website.
5. Sharing
Video and authorization data are shared with TikTok only as needed for Login Kit and the Content Posting API. They are not sold, rented or used for advertising. The public policy website may be served by Cloudflare, which can process ordinary network information such as IP address and request metadata to deliver and protect the site under its own privacy terms.
6. Cookies and analytics
This website sets no advertising or analytics cookies, contains no tracking scripts and has no contact form. Email contact opens the visitor's chosen mail application.
7. Retention
OAuth tokens are retained locally until they expire, are revoked or the creator disconnects TikTok. Upload receipts remain until the creator deletes the local project records. Any information sent in a support email is retained only as long as needed to answer and document the request.
8. Choices and rights
The creator can withdraw authorization at any time by disconnecting TikTok in NOVA and revoking the app in TikTok account settings. Where applicable, individuals may request access, correction, deletion, restriction, portability or objection, withdraw consent, and complain to their local data-protection authority. Instructions are available on the Data Deletion page.
9. Children
The development Sandbox is not directed to children and is limited to its named adult operator target user.
10. Changes
This notice will be revised before the data use, audience, hosting or product status changes. The effective date identifies the current version.