Privacy policy

Last updated 4 October 2026

This policy explains what the Influencer tool at influencer.totenkode.no ("the tool"), operated by Totenkode AS, Norway ("we"), does with personal data. The tool is a private publishing tool used by our own team to post our own videos to TikTok.

What we process

• Your sign-in: the email address of your Google account, used to check that you may use the tool. It is kept in a signed cookie in your browser for up to 12 hours.
• Your TikTok connection: when you connect TikTok, TikTok gives us an access token and a refresh token, your TikTok open ID, and, through the creator info API, your nickname, username, avatar and posting settings. The tokens are kept only in the tool's memory while it runs and are used only to post the videos you choose and to show their status. They are not written to disk or a database.
• Your videos and captions: a video you choose is stored temporarily on our server only for as long as it takes to upload it to TikTok, and is deleted right after. Captions and settings are sent to TikTok with the video.
• Technical logs: our hosting (Amazon Web Services, in the EU) keeps request logs, such as IP addresses and error messages, for up to 30 days for security and troubleshooting.

What we access on TikTok

With your permission (Login Kit scopes user.info.basic, video.publish and video.upload) we read your basic TikTok profile (open ID, nickname, username, avatar) and the posting options of your account (allowed privacy levels, comment/Duet/Stitch settings, maximum video length), and we upload and publish the videos you choose. We do not read your followers, messages, or existing videos.

Storage and retention

• TikTok tokens and profile details are kept only in the memory of the running tool, never in a database or on disk. They are discarded when you disconnect, when the token expires, or when the tool restarts (at the latest on the next deployment).
• Uploaded videos are kept in a temporary file only until the upload to TikTok has finished, and then deleted immediately.
• Request logs are kept for up to 30 days and then deleted. The sign-in cookie lasts at most 12 hours.
• Data is stored and processed on servers in the EU (Amazon Web Services) and is protected with encryption in transit (HTTPS).

What we do not do

We do not sell, rent or share your data with anyone except TikTok (to post your video) and our hosting provider. We do not use your data for advertising or profiling, and we do not read your followers, messages or other content.

Legal basis

We process the data to provide the tool you asked to use (GDPR article 6(1)(b)) and, for logs, our legitimate interest in keeping the service secure (article 6(1)(f)).

Your choices and rights

• Disconnect TikTok in the tool at any time; we then revoke the token with TikTok. You can also remove the tool's access in TikTok's settings under Security and permissions.
• Sign out at any time, which removes the sign-in cookie.
• You have the right to access, correct and delete your data, and to complain to the Norwegian Data Protection Authority (Datatilsynet).

Deletion on request

You can ask us at any time to delete everything we hold about you by writing to the address below; we act on it within 30 days. Disconnecting TikTok in the tool deletes your tokens and profile details at once and revokes our access at TikTok.

Contact

Questions or requests: didrik@totenkode.no.