Overview
Culture Corner is a short-form cultural-education video project operated by Elevare Digital ("we," "us"). It publishes content to a single authorized TikTok account, @culturalcorner0, through TikTok's official Content Posting API. This policy explains what account data the integration accesses, how sign-in works, where tokens are kept, and how to have your data removed.
Signing in with TikTok Login Kit
Connecting the integration to the authorized account uses TikTok Login Kit, TikTok's standard OAuth 2.0 authorization flow. Only the operator of Culture Corner completes this sign-in, once, for the single authorized account. Login Kit is not exposed as a public "sign in" option for site visitors, and no visitor accounts, credentials, or personal data are collected through it.
API scopes and the data behind them
The integration requests exactly three TikTok API scopes and no others:
user.info.basic— reads the authorized account's own public profile fields (open ID, display name, username, bio) so the pipeline can confirm it is publishing as the correct account.video.upload— uploads a rendered episode to the authorized account's TikTok drafts for review before anything is made public.video.publish— publishes a reviewed draft directly to the authorized account's feed.
None of these scopes give access to followers, direct messages, comments, other users' videos, or any analytics beyond what TikTok exposes for the authorized account itself. No data belonging to viewers, followers, or other TikTok users is accessed, collected, or processed.
How OAuth tokens are stored
The access and refresh tokens issued after sign-in are stored encrypted in a server-side backend database — never in a browser, a mobile app, or any client-facing storage. They are used exclusively by the automated publishing pipeline to refresh sessions and post approved content without requiring the operator to log in again for every video.
Content publishing
Video episodes are generated and rendered internally, then uploaded as private drafts and published to @culturalcorner0 only. The integration does not publish on behalf of, or to, any other account, and does not accept or relay content from any third party.
Retention
OAuth tokens are retained for as long as the integration remains connected to the authorized account. Rendered video source files are kept for a limited period after publishing to allow re-uploads if a post needs to be corrected. Nothing is retained longer than needed to operate the publishing pipeline.
Deletion requests
The authorized account owner can revoke the integration's access at any time from TikTok's app-permissions settings, which immediately invalidates the stored tokens. Anyone can also request deletion of any data held about the authorized account or the publishing pipeline by emailing mike@codecityapp.com; such requests are processed within a few business days.
No sale of personal data
We do not sell, rent, or share the data described in this policy with data brokers or advertisers, and we do not use it for advertising or any purpose outside operating the Culture Corner publishing pipeline.
Third parties
Backend storage and processing are provided by Supabase. Some video and animation assets are generated using third-party AI tooling before publishing. These providers process data solely on our behalf to operate the pipeline described above.
Changes to this policy
This policy may be updated as the integration evolves. The "Last updated" date at the top reflects the most recent revision.
Contact
Questions about this policy or requests regarding your data: mike@codecityapp.com
← Back to Culture Corner