Last updated: January 4, 2026
Flowctory ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services (collectively, the "Service").
By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.
This Privacy Policy should be read alongside our Terms of Service.
When you register for a Flowctory account, we collect and store:
You can register and log in using email and password, or through Google or Facebook OAuth. Your TikTok account is connected separately (see section 2.2) and is not used for login authentication.
When you connect your TikTok account to Flowctory (a separate step from registration), we receive and store the following information from TikTok:
You can connect multiple TikTok accounts to your Flowctory account to manage content across different profiles.
We store OAuth access tokens and refresh tokens required to communicate with TikTok's API on your behalf. These tokens allow us to upload content to your TikTok account without storing your TikTok password. Tokens are stored per connected TikTok account.
When you upload a video through the Service, the video file is temporarily stored on our servers solely for the purpose of transferring it to TikTok. Videos are automatically deleted from our servers after successful upload to TikTok or within 24 hours, whichever occurs first.
We store information about your posts, including:
We automatically collect certain technical information when you use the Service:
We do not use third-party analytics services or tracking tools.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:
Processing is necessary to provide you with the Service, including:
We process certain data based on our legitimate interests, including:
We may process your data when required by law, such as responding to legal requests or complying with applicable regulations.
Where required, we will obtain your explicit consent before processing your data. You may withdraw your consent at any time.
We use the information we collect to:
We do not use your personal information for advertising purposes or sell it to third parties.
We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy:
| Data Type | Retention Period |
|---|---|
| Account data (email, profile info) | Until you delete your account |
| TikTok account data | Until you disconnect the TikTok account or delete your Flowctory account |
| TikTok OAuth tokens | Until revoked, expired, or you disconnect the TikTok account |
| Video files | Deleted within 24 hours of upload |
| Post metadata | 90 days after posting |
| Subscription & billing data | Until you delete your account (payment details stored by Stripe) |
| Server logs | 30 days |
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):
You have the right to request a copy of the personal data we hold about you.
You have the right to request correction of any inaccurate personal data we hold about you.
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
You have the right to object to the processing of your personal data based on our legitimate interests.
You have the right to request that we restrict the processing of your personal data in certain circumstances.
Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.
You have the right to lodge a complaint with a supervisory authority. In France, the supervisory authority is the Commission Nationale de l'Informatique et des Libertés (CNIL): www.cnil.fr.
To exercise any of these rights, please contact us at contact@flowctory.com. We will respond to your request within 30 days.
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):
You have the right to request that we disclose:
You have the right to request that we delete the personal information we have collected from you, subject to certain exceptions.
You have the right to opt-out of the sale of your personal information. However, Flowctory does not sell personal information.
We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices, or provide you with a different level of service for exercising your rights.
To exercise your CCPA rights, please contact us at contact@flowctory.com. We will verify your identity before processing your request.
Flowctory is based in France (European Union). If you access the Service from outside the EU, please be aware that your information may be transferred to, stored, and processed in the EU.
When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as:
TikTok, as a third-party service, may transfer your data internationally according to their own privacy policy.
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.
The Service is not intended for children under the age of 16 in the European Union or 13 in other jurisdictions. We do not knowingly collect personal information from children under these ages.
If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at contact@flowctory.com. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to delete that information.
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes:
We encourage you to review this Privacy Policy periodically to stay informed about our data practices.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
FlowctoryData Protection Authority
If you are in the EU and have concerns about our data practices, you may contact the French data protection authority (CNIL) at www.cnil.fr.