Legal
Privacy Policy.
This policy explains what information MMIX Publisher ("the Service") collects when you use it, how the information is used, and the choices you have. The Service is operated by Marketing MIX, 208 Booth Street, Ottawa, Ontario, Canada ("we", "us"). Contact: info@mmix.biz.
01What the Service does
The Service lets an account owner, or a Marketing MIX team member authorised by that owner, publish a short video that the owner selects to the owner's own TikTok account through TikTok's official Login Kit and Content Posting API. Support for YouTube, Facebook and LinkedIn is planned and will be added to this policy before it goes live.
02Information we receive from TikTok
When you choose "Log in with TikTok", TikTok asks you to approve the following permissions. We request only these:
| Permission | What we receive or do | Why |
|---|---|---|
| user.info.basic | Your TikTok open ID, display name (nickname) and avatar image. | To show which account a video will be posted to. |
| video.publish | Your posting settings from TikTok (available visibility options, whether comments, Duet and Stitch are allowed, maximum video length) and the ability to publish a post. | To build the posting screen and to publish the video you chose, only after you press Post. |
| video.upload | The ability to upload a video file to TikTok. | To transfer the video file you selected. |
We also receive an access token and a refresh token from TikTok, which allow the Service to act on the permissions above.
03Information you provide
- Video files. The file you pick is sent from your browser, through our server, directly to TikTok. We do not keep a copy after the upload finishes.
- Post details. The caption, visibility, interaction settings and commercial content disclosure you choose are sent to TikTok with the post. We do not store them.
04How information is stored
- Your TikTok tokens and open ID are kept only in an encrypted, HttpOnly session cookie in your own browser. We do not keep a database of TikTok users, tokens, profiles or videos.
- Your nickname and avatar are loaded from TikTok each time you open the posting screen and are not saved by us.
- The session cookie expires when TikTok's refresh token expires, or immediately when you log out.
- The Service runs on Cloudflare Pages. Cloudflare processes requests on our behalf and may keep standard technical logs (such as IP address and request time) for security, under its own privacy policy.
05How information is used
Only to provide the Service: showing the connected account, preparing and publishing the posts you request, and showing their processing status. We do not use TikTok data for advertising, profiling or analytics, and we do not combine it with other data.
06Sharing
We do not sell, rent or trade your information. Information is shared only with TikTok, to perform the actions you request, and with our hosting provider Cloudflare, as described above, or when required by law.
07Your choices and deletion
- Log out. The "Log out" button revokes the TikTok access token and deletes the session cookie.
- Remove access in TikTok. You can remove MMIX Publisher at any time in the TikTok app under Settings and privacy › Security › Apps and services permissions.
- Deletion request. Email info@mmix.biz with the subject "Data deletion" and we will delete any information related to you within 30 days and confirm by email. Videos already published on TikTok are controlled by you in your TikTok account.
08Security
All traffic uses HTTPS. The session cookie is encrypted and authenticated (AES-256-GCM) and is not readable by page scripts. Our TikTok client secret is stored only as a server-side secret.
09Children
The Service is intended for business use by adults and is not directed to anyone under 18.
10Changes and contact
We will post any change to this policy on this page and update the effective date. Questions or requests: info@mmix.biz, Marketing MIX, 208 Booth Street, Ottawa, Ontario, Canada.