Privacy Policy
Last updated: September 9, 2026
Overview
kotopost ("we", "us") helps creators generate content and publish it to their own social media accounts, including TikTok and Instagram. This policy explains what we collect, how we use it, and how you can remove it.
Information we collect
- Account & authentication: when you connect a social account, we store an access token and your account ID and username for that platform, so we can act on your behalf at your direction.
- TikTok data you authorize: when you connect TikTok via TikTok Login Kit, we access your basic profile information (user.info.basic) to confirm the connected account, and we publish videos you explicitly choose to your own TikTok account using TikTok's Content Posting API (video.upload, video.publish). We access only what you authorize.
- Instagram data you authorize: your own media list, basic metrics, comments on your posts, and messages your account receives — accessed only with the permissions you grant.
- Content you create: media and captions you generate or publish through kotopost.
How we use it
We use this information solely to provide the features you request: publishing content you create to your own accounts, showing your media and insights, and helping you reply to comments and messages on your own account. We never post without your direction, we do not sell your data, and we do not use it for advertising.
How we share it
We share data only with the platforms required to deliver the service (e.g. TikTok to publish your videos, Meta/Instagram to publish your content) and infrastructure providers that host our application. We do not share your data with third parties for their own purposes.
Data retention & deletion
We retain your connection data until you disconnect the integration or delete your account. When you disconnect TikTok or Instagram from kotopost, or remove kotopost's access from your platform settings (e.g. TikTok Settings → Security → Apps), we delete the stored access token and connection record. You can also request deletion at any time by emailing support@kotopost.com, or via our data deletion page.
Your choices
You can disconnect TikTok or Instagram from within kotopost at any time, which removes our stored token for that account. You can also revoke kotopost's access directly in your TikTok or Instagram security settings.
Contact
Questions about this policy: support@kotopost.com