Privacy Policy

When you authorize ClipOps to access a TikTok or Instagram account through the platform's official login, ClipOps receives only the data covered by the permissions you grant:

• Account identity — the platform's account identifier, username or display name, and, where provided, follower count.
• Post metadata — post or media identifiers, public URLs, captions or descriptions, publish timestamps, media type, and duration where the platform reports it.
• Analytics metrics — performance counts the platform makes available for your own posts, such as views, likes, comments, shares, saves, reach, and watch-time measures. ClipOps stores only metrics the platform actually returns; it does not infer or fabricate metrics.
• Authorization data — OAuth access tokens, refresh tokens, granted scopes, and token expiry times needed to keep the connection working.

ClipOps does not access private messages, contacts, payment details, or content belonging to other users. It does not scrape platform websites; it uses only official platform APIs.

The information is used solely to provide analytics and insights about your own content: importing your posts, recording performance snapshots over time, comparing posts against your account's own history, comparing the same clip across platforms, and generating recommendations. Data may also be entered manually by you and combined with platform data for the same purposes.

ClipOps does not use the information for advertising, profiling of third parties, or any purpose unrelated to operating the analytics tool.

ClipOps does not sell, rent, or trade personal data or connected-account data to anyone. Data is not shared with third parties except the platform APIs described below, infrastructure providers that host the service under confidentiality obligations, or where required by law.

ClipOps communicates with TikTok (TikTok for Developers Login Kit and Display API) and Meta (Instagram API with Instagram Login) using their official interfaces. Your use of those platforms remains governed by their own terms and privacy policies. ClipOps only requests the minimum permissions needed to identify the account, list its posts, and read the post metrics the platform exposes.

If ClipOps is configured to use an optional AI analysis provider, only post metadata and aggregated metrics are sent to that provider to generate written analysis. Access tokens and account credentials are never sent.

Imported post metadata and analytics snapshots are retained for as long as the account remains in ClipOps so that historical comparisons continue to work. OAuth tokens are retained only while a connection is active. One-time authorization records used to complete a login expire within minutes and are not reused.

You can disconnect a TikTok or Instagram account at any time from the account's page in ClipOps. Disconnecting revokes the authorization where the platform supports it and permanently deletes the stored tokens. You can also revoke ClipOps from your TikTok or Instagram account settings. Imported posts and snapshots can be deleted from ClipOps, and deleting an account in ClipOps removes all of its posts, snapshots, and connections. To request deletion of any data, email streamscene@clipsmith.org.

OAuth tokens are encrypted at rest with AES-256-GCM using a key that is kept outside the database and never committed to source control. Authorization flows use single-use state values and, where supported, PKCE. Access to the ClipOps deployment and its database is restricted to the operator. No method of transmission or storage is completely secure, and ClipOps cannot guarantee absolute security.

This policy may be updated as ClipOps changes. The effective date at the top of the page indicates the current version. Material changes will be reflected here before they take effect.

Questions, access requests, or deletion requests: streamscene@clipsmith.org