Privacy Policy
Effective: August 11, 2026
This Privacy Policy explains how Nora Publisher ("Nora Publisher," "we," "us," or "our") handles information when a creator uses our desktop publishing workflow.
Information we process
When a creator connects TikTok, we may process the creator's TikTok Open ID, display name, profile image, authorization scopes, access and refresh tokens, available privacy and interaction settings, video metadata, publication identifiers, publication status, and limited diagnostic logs needed to operate and secure the service. We process the video file selected by the creator solely to prepare or transmit the requested publication.
Information we do not request
We do not ask for or store a creator's TikTok password. TikTok authentication and consent are handled by TikTok through OAuth. We do not sell personal information, build advertising profiles, or use connected-account data for unrelated marketing.
How we use information
- to authenticate the creator and display the connected account;
- to show current publishing capabilities and settings;
- to upload content only after the creator gives express consent;
- to report processing, moderation and publication status;
- to prevent duplicate posts, investigate errors and protect the service.
Legal bases
Where applicable, we process information to perform the service requested by the creator, based on the creator's consent for connected-account access, and for our legitimate interests in security, reliability and abuse prevention.
Sharing
We share content and required metadata with TikTok only when the creator initiates the relevant action. We may use infrastructure providers strictly to host or secure the service. We do not authorize those providers to use creator data for their own advertising.
Storage and security
Authorization credentials are stored server-side or in protected local storage and are not embedded in public client code. We apply access controls, encryption where appropriate and data minimization. No method of storage or transmission is completely secure.
Retention
Connected-account credentials are retained until they expire, are revoked, or the creator disconnects the account. Publication records and diagnostic logs are retained only as long as reasonably necessary for service operation, security and legal compliance. Creator-provided media is not retained longer than required for the requested workflow unless the creator explicitly saves it.
Creator choices and rights
Creators may revoke TikTok access through TikTok's settings, disconnect their account from Nora Publisher, and request access, correction or deletion of information associated with the service. Applicable law may provide additional privacy rights.
Children
Nora Publisher is not directed to children under 18 and we do not knowingly collect their personal information.
International processing
Information may be processed in countries other than the creator's country. Where required, we use lawful safeguards for international transfers.
Changes
We may update this policy to reflect changes to the service or law. We will publish the updated effective date on this page.
Contact
For privacy questions or requests, use the contact method listed on our Support page.