Effective August 27, 2026
Privacy Policy
This notice explains the limited data used by the local NOVA Creator Studio TikTok Sandbox integration.
1. Controller and contact
NOVA Creator Studio is the development project operated for TikTok target user @darkfrequency679. Privacy requests can be sent directly to asamitko@abv.bg. This notice must be updated with the operator's full public legal details before any public or multi-user launch.
2. Data the integration processes
- Authorization data: TikTok
open_id, access and refresh tokens, token expiry, granted scopes and a non-reversible local fingerprint. - Basic profile permission: Login Kit includes
user.info.basic. The current NOVA workflow does not call TikTok's profile-info endpoint to retrieve avatar or display-name fields. - Upload data: the creator-selected MP4, upload size and the suggested caption are sent directly from the Desktop app to TikTok when the creator starts an Upload-to-Inbox test.
- Local operational records: asset hashes, TikTok publish identifiers, processing status, timestamps and test-only receipts used to resume safely and avoid duplicate uploads.
3. Why the data is used
The data is used only to authenticate the authorized target user, deliver the requested draft to TikTok Inbox, check its processing status, resume interrupted transfers, prevent accidental duplicates and diagnose failures. Processing begins after the creator's explicit OAuth authorization and requested upload action.
4. Storage and security
OAuth client credentials and user tokens are encrypted locally using the operating system-backed NOVA secure store. Local receipts remain within the creator's project directory. NOVA does not operate a remote database for this Sandbox and does not copy OAuth secrets into this website.
5. Sharing
Video and authorization data are shared with TikTok only as needed for Login Kit and the Content Posting API. They are not sold, rented or used for advertising. The public policy website may be served by Cloudflare, which can process ordinary network information such as IP address and request metadata to deliver and protect the site under its own privacy terms.
6. Cookies and analytics
This website sets no advertising or analytics cookies, contains no tracking scripts and has no contact form. Email contact opens the visitor's chosen mail application.
7. Retention
OAuth tokens are retained locally until they expire, are revoked or the creator disconnects TikTok. Upload receipts remain until the creator deletes the local project records. Any information sent in a support email is retained only as long as needed to answer and document the request.
8. Choices and rights
The creator can withdraw authorization at any time by disconnecting TikTok in NOVA and revoking the app in TikTok account settings. Where applicable, individuals may request access, correction, deletion, restriction, portability or objection, withdraw consent, and complain to their local data-protection authority. Instructions are available on the Data Deletion page.
9. Children
The development Sandbox is not directed to children and is limited to its named adult operator target user.
10. Changes
This notice will be revised before the data use, audience, hosting or product status changes. The effective date identifies the current version.