Privacy Policy
Effective date: July 31, 2026
This Privacy Policy explains how StoryFactory (“StoryFactory”, “we”, “us”, or “our”), operated by Romans Ozernojs, collects, uses, stores, and deletes information when you use the website at https://storyfactoryvideo.win and related services.
1. Information we collect
Information received from TikTok
When you choose to connect TikTok, TikTok may provide authorization information such as an access token, refresh token, authorized scopes, token expiration information, and an account identifier such as an open ID. When permitted, StoryFactory also requests basic profile information such as your TikTok display name and avatar so that you can confirm which account is connected.
Video and upload information
When you explicitly select and upload a video, StoryFactory processes the video bytes, filename, file size, media type, duration, upload progress, TikTok publish identifier, and processing status as needed to transfer the video to TikTok. Video bytes are relayed to TikTok during the active upload and are not intentionally retained by StoryFactory as stored video files.
Information you provide
We may receive information you send to support, including your email address, message content, and any files or details you choose to provide.
Technical information
Our hosting provider may process basic request and security information, such as IP address, browser type, timestamps, requested pages, and diagnostic logs, to deliver and protect the service.
2. How we use information
We use information to:
- connect the TikTok account you explicitly authorize;
- show which authorized TikTok account and scopes are active;
- perform actions you request, such as transferring a selected video draft and displaying its processing status;
- refresh or revoke authorization when required;
- maintain security and prevent unauthorized use;
- respond to support and privacy requests;
- diagnose errors and improve reliability;
- comply with applicable legal obligations.
3. TikTok permissions
StoryFactory requests only permissions needed for the displayed functionality. These include user.info.basic for basic authorized account identification and video.upload to transfer a video selected by the user. We do not use these permissions to access unrelated account functions.
4. Legal basis
Where the EU General Data Protection Regulation applies, we process information based on your consent when you connect TikTok, performance of the service you request, our legitimate interests in securing and operating the service, and compliance with legal obligations. You may withdraw authorization through TikTok and may request deletion as described below.
5. Storage and retention
Authorization data is stored only for as long as needed to provide the connected functionality, maintain security, or meet legal obligations. Temporary upload metadata, such as filename, file size, publish identifier, progress, and processing status, is retained for a limited period to support the active workflow and is normally configured to expire within approximately 24 hours. TikTok upload URLs are short-lived and protected by signed session data. StoryFactory does not intentionally retain uploaded video files after relaying their bytes to TikTok.
When you use the self-service deletion function for the current browser session, StoryFactory attempts to revoke TikTok authorization and removes the associated active authorization and upload metadata. Backup or security logs may persist for a limited period according to the hosting provider's retention practices.
6. Sharing and service providers
We do not sell personal information. We use Cloudflare to host, secure, and operate the website and server functions. Information and selected video bytes are exchanged with TikTok when you initiate authorization, profile retrieval, upload, status, or revocation actions. These providers process information according to their own terms and data-protection commitments.
7. International transfers
Service providers may process information in countries outside your country of residence. Where required, appropriate safeguards should be used for such transfers.
8. Your choices and rights
Depending on applicable law, you may have rights to access, correct, delete, restrict, object to processing, or obtain a copy of personal information. You may also withdraw TikTok authorization through TikTok's settings. Submit a request at [email protected] or use our data deletion page.
9. Children
StoryFactory is not directed to children under the minimum age required to use the service or TikTok in their jurisdiction. We do not knowingly collect information from children in violation of applicable law.
10. Security
We use reasonable technical and organizational measures intended to protect authorization and upload data, including encrypted HTTPS transport, restricted secret access, server-side token exchange, signed short-lived upload sessions, same-origin request checks, secure cookies, and access controls. No method of storage or transmission is completely secure.
11. Changes
We may update this Privacy Policy when the service or legal requirements change. The effective date at the top identifies the latest published version.
12. Contact
Operator: Romans Ozernojs
Country: Latvia
Email: [email protected]
Website: https://storyfactoryvideo.win