Privacy Policy

Last Updated: September 14, 2026

Welcome to Xenobyte ("we," "our," or "us"). We provide autonomous content rendering and distribution software for digital creators. This Privacy Policy details how we handle creator data, specifically concerning our integration with third-party developer APIs including the TikTok for Developers Platform.

1. Information We Collect

When you connect your TikTok creator account to Xenobyte via official OAuth 2.0 authorization, we may access:

Basic Profile Identity: Your public TikTok username, display name, and avatar solely to confirm account authentication within your Xenobyte local dashboard.
Posting Authorization Tokens: Secure OAuth refresh and access tokens necessary to deliver videos to your designated publishing queue or draft inbox upon your explicit command.
Upload Metadata: Video file titles, descriptions, and hashtags defined directly by you during publication.

2. How We Use TikTok API Data

Data obtained via TikTok APIs is strictly used to:

Authenticate you as the rightful owner of the creator account.
Upload and publish media created by you to your TikTok profile upon your instruction.
Retrieve video posting status to confirm whether an upload was successfully published or queued.

We NEVER sell, rent, license, or trade TikTok user data, nor do we use creator content to train third-party advertising or profiling models.

3. Data Storage and Security

Xenobyte operates with a decentralized local-first architecture. Your authorization credentials and private media assets are retained securely under cryptographic standards. API tokens are stored securely and never exposed in cleartext.

4. Third-Party Sharing

We do not share your TikTok account information with any external third parties except as strictly necessary to fulfill API communication with TikTok servers (ByteDance Ltd.).

5. User Data Deletion and Revocation

You maintain 100% control over your data:

You can revoke Xenobyte's access at any time via your TikTok App settings (Settings and Privacy → Security → Manage App Permissions).
Upon revocation or request, all local cached tokens and associated profile identifiers are immediately deleted from your system.
To request full data erasure, contact us directly at contact@xenobyte.org.

6. Contact Us

If you have any questions regarding this Privacy Policy or our API data practices, contact:
Xenobyte Developer Support
Email: contact@xenobyte.org