ProductPost Privacy Policy

Effective date: September 9, 2026

ProductPost is operated by Heart Of Beauty Future Technology (Shenzhen) Co., Ltd. ("ProductPost," "we," "us," or "our"). We provide a web application that helps creators turn product URLs, images, and written briefs into reviewable vertical videos and, when a creator chooses, publish approved content to connected TikTok, Instagram, Facebook Page, or Threads accounts. This policy explains what information we collect, why we use it, and the choices available to you.

Information we collect

Account information

When you create or use an account, we may receive your name, email address, profile image, authentication provider identifier, and basic account settings. We use this information to authenticate you, operate your workspace, prevent abuse, and provide support.

Product and creative content

We process content you choose to provide, including product page URLs, uploaded product images, written briefs or scripts, extracted product facts, creative prompts, generated videos, captions, hashtags, review decisions, and related project metadata. You should only provide content that you own or are authorized to use.

TikTok integration data

ProductPost's TikTok integration is not available in mainland China. It is available only to eligible users in countries and regions where TikTok officially operates. ProductPost does not support use from mainland-China IP addresses and does not provide or promote methods to bypass TikTok's regional restrictions.

If you connect TikTok, TikTok may provide an account identifier (open_id), creator nickname, username, avatar URL, granted scopes, access token, refresh token, and token expiration information. ProductPost stores access and refresh tokens in encrypted form on the server. We do not receive or store your TikTok password.

When you use TikTok publishing, we process the selected privacy level, interaction settings, commercial-content disclosures, AI-generated-content flag, caption, TikTok publish identifier, processing status, error information, and publicly available post identifier when TikTok returns one. ProductPost requests the creator's latest available publishing options before showing the final post screen.

Meta integration data

If you connect Instagram, Facebook Pages, or Threads, Meta may provide account or Page identifiers, display names, profile images, granted permissions, encrypted access tokens, token expiration information, and content identifiers or performance metrics needed for publishing and reporting. ProductPost does not receive or store your Meta password.

Technical and usage data

We may collect IP address, browser and device information, request timestamps, security events, feature usage, diagnostic logs, cookie identifiers, and similar data needed to secure, maintain, and improve the service. A short-lived, HTTP-only cookie protects the TikTok OAuth flow from request forgery.

Billing information

If paid plans are offered, payment processors handle payment card details. ProductPost may receive transaction identifiers, plan information, billing email, payment status, and limited billing metadata. We do not store full payment card numbers.

How we use information

We use information to:

• provide authentication, product parsing, storage, AI generation, review, download, and publishing features;
• connect authorized social accounts and carry out publishing actions you explicitly confirm;
• preserve project and job status, prevent duplicate requests, and display processing results;
• detect fraud, abuse, security incidents, and violations of our Terms;
• respond to support requests and service communications;
• analyze reliability and improve ProductPost; and
• comply with applicable law and enforce our agreements.

We do not sell personal information. We do not use connected social-platform data to build advertising profiles or publish content without your explicit action.

Service providers and disclosures

We may share limited information with providers that help operate ProductPost, including cloud hosting and content delivery, database and object storage, authentication providers, AI model providers, payment processors, analytics providers if enabled, and the social platform you connect or publish to. These providers process data under their own terms and privacy obligations.

We may also disclose information when required by law, to protect users or the service, in connection with a business transaction, or with your direction or consent.

Data retention

We retain account and project information while your account is active or as needed to provide the service. Generated assets remain available until you delete them, request deletion, or they expire under an applicable service limit. Social-platform authorization data is retained until you disconnect the platform, delete your account, or the authorization expires. Security, billing, and legal records may be retained as reasonably necessary for legal, fraud-prevention, and accounting needs.

Security

We use technical and organizational safeguards appropriate to the information we process. Connected-platform access and refresh tokens are encrypted at rest and kept server-side. No security method is perfect, and we cannot guarantee absolute security.

Your choices and rights

You choose whether to connect a social platform and whether to approve or publish any generated video. You may revoke ProductPost's access from ProductPost or the platform's connected-app settings. You may request access, correction, export, or deletion of your ProductPost data, subject to applicable law.

For deletion steps and timelines, see our Data Deletion Instructions.

Children

ProductPost is not directed to children under 13, and we do not knowingly collect personal information from children under 13. A higher minimum age may apply in your country or under TikTok's terms.

International processing

ProductPost and its providers may process information in countries other than your own. Where required, we use appropriate safeguards for international transfers.

Changes to this policy

We may update this policy to reflect changes in the service, law, or our data practices. We will post the updated policy here and change the effective date.

Contact

Questions or privacy requests can be sent to contact@productpost.app.

Data controller: Heart Of Beauty Future Technology (Shenzhen) Co., Ltd.
Unified Social Credit Code: 91440300MADYJM6T0F
Registered address: Room 333, Bank of Shanghai (Multipurpose Hall), No. 70 Xin'an 2nd Road, Longjing Community, Xin'an Subdistrict, Bao'an District, Shenzhen, Guangdong, China