Privacy Policy

This Privacy Policy explains how Appetite Social OS, operated by Appetite Think Labs, handles information when people connect supported social accounts to Appetite applications and choose to share or upload content. It applies to Appetite Social OS, its connection flows, sharing tools, and related support services.

Information users provide

• Information sent when requesting support, exercising a privacy choice, or reporting a problem.
• Content and related details a user deliberately selects for sharing or upload.
• App and referral context needed to return the user to the originating Appetite experience.

Information from connected platforms

When a user authorizes TikTok or another supported service, Appetite Social OS receives only information available under the scopes the user grants. Depending on the platform and connection, this can include:

• Platform account identifiers, profile or account information, username, and account type.
• Access and refresh tokens, authorization status, granted scopes, and token expiry metadata.
• Upload, draft, or publishing status returned by the platform, including TikTok draft handoff identifiers and errors.
• Technical logs needed to secure, maintain, and troubleshoot the integration.

For TikTok V1, Appetite Social OS requests user.info.basic to identify the connected account and video.upload to perform a user-directed draft upload. Appetite Social OS does not request video.publish for V1 and does not offer TikTok Direct Post.

Content selected for sharing

Appetite Social OS processes only content a user explicitly chooses to share or upload. For TikTok V1, an eligible video selected by the user is uploaded to the user's TikTok inbox as a draft. The user completes editing and publication inside TikTok. Appetite Social OS does not automatically publish that draft.

How Appetite Social OS uses information

• Authenticate users with connected services and maintain authorized account connections.
• Fulfill explicit connect, share, upload, draft, disconnect, and deletion requests.
• Operate attribution and return users to the correct Appetite application.
• Protect Appetite Social OS, prevent abuse, troubleshoot failures, and meet platform or legal requirements.

We process this information to provide the service a user requests, operate and secure Appetite Social OS, and meet applicable contractual, platform, and legal obligations. We do not claim a jurisdiction-specific legal basis where it does not apply.

Sharing links and referral attribution

Appetite Social OS can create branded sharing links for content from an Appetite application. Those links may include an internal referral identifier and standard campaign parameters so we can attribute a visit to the originating app, content, or sharing channel. We use this information to route the visitor, measure the requested share experience, prevent abuse, and troubleshoot delivery. Referral information is not used to access a visitor's TikTok account and is not sold or rented.

When information is shared

We send information to TikTok or another connected service only as needed to complete the integration action the user requests. We may also use infrastructure and service providers that process information on our behalf to operate and secure Appetite Social OS. We may disclose information when reasonably necessary to comply with law, protect users, investigate abuse, or defend the service. We do not sell or rent personal data, and we do not use data received from connected platforms for unrelated advertising or profiling.

Token handling and retention

Access and refresh tokens are encrypted and stored server-side only. They are not returned to public pages. Appetite Social OS retains connection data while needed to provide the authorized integration, and keeps limited technical or audit records only as long as needed for security, troubleshooting, compliance, or dispute resolution. Retention can vary by the type of record and applicable platform requirements.

User-selected media is processed for the requested share or upload and is retained only as needed to complete, retry, secure, or document that action. Draft identifiers, status records, and redacted audit events may be retained longer when reasonably needed for support, security, platform compliance, or dispute resolution. Users may request deletion as described below.

Disconnecting TikTok and revoking access

A user may disconnect TikTok through the relevant Appetite experience or revoke access in TikTok. Revocation stops future authorized use and causes stored connection credentials to be removed or invalidated. Some minimal records may be retained when required for security, compliance, or to document the deletion.

Deletion and user choices

Users may request access, correction, disconnection, or deletion of information associated with Appetite Social OS. Instructions are available on the Data Deletion page. Some choices may also be available in the connected platform. Requests can be sent to the contact address below; we may need to verify the requester before acting.

Security

Appetite Social OS uses encrypted credential storage, signed authorization state, scoped access controls, provider signature checks where available, replay protection, redacted logs, and restricted server-side access. No online service can guarantee absolute security, but we maintain safeguards proportionate to the information and integrations we operate.

Children's privacy

Appetite Social OS is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can investigate and take appropriate action.

International processing

Appetite Social OS and its service providers may process information in countries other than the user's own. Where required, we take reasonable steps to use appropriate protections for that processing.

Changes to this policy

We may update this Privacy Policy as Appetite Social OS, connected-platform requirements, or applicable obligations change. We will post the updated date on this page and provide any additional notice required by applicable law.

Contact

Privacy questions and requests: privacy@appetitethinklabs.com