Your data, handled like evidence.

Dontdemoit Agent ("we", "us") is a workflow tool for creating, scheduling, and publishing AI-assisted video content, and for measuring how that content performs after it is published. This Privacy Policy explains what information we collect when you use dontdemoit.com (the "Service"), how we use it, and the choices you have.

We receive certain personal data from third-party platforms — TikTok and Instagram — only when you explicitly connect those accounts to the Service. Sections 3 and 4 describe exactly what we request and why. We do not sell your personal data.

When you register and use the Service, we collect:

• Account details — your name, email address, workspace name, and password or single sign-on identifier.
• Content you create — canvas workflows, images, video assets, scripts, captions, and scheduling preferences you upload into the Service.
• Support communications — messages you send us when requesting help.

When you connect a TikTok account, you authorize Dontdemoit Agent through TikTok Login Kit with the following scopes:

• user.info.basic — your TikTok display name and avatar so we can show which account is connected.
• video.list — metadata of your public videos (video ID, title/description, cover image URL, publish time) plus engagement counters such as view count, like count, comment count, and share count, which we use to power your analytics dashboard.
• video.publish / video.upload — used only at your explicit instruction to publish a video you created in Dontdemoit Agent to your own TikTok account.

When you connect an Instagram professional account, you authorize Dontdemoit Agent through Meta's OAuth flow with permissions equivalent to:

• instagram_business_basic — your account ID, username, and profile picture to identify the connected account.
• instagram_business_manage_insights — insights for media you published through or linked to the Service, such as views, reach, likes, comments, saves, and shares.
• Content publishing permission — used only at your explicit instruction to publish media you created in Dontdemoit Agent to your own account.

We process the data described above to:

• Operate the Service — authenticate you, store your workflows, publish content on your behalf when you instruct us to, and refresh access tokens so connections keep working.
• Provide analytics — retrieve view counts and other engagement metrics for content you choose to track and display them in your dashboard.
• Improve reliability — monitor errors, prevent abuse, and maintain security.
• Communicate with you — service updates, connection warnings, and responses to support requests.

We share personal data only with: (a) TikTok and Instagram/Meta, strictly through their official developer APIs and only to perform actions you requested; (b) infrastructure providers that host our application and databases under contractual confidentiality obligations; and (c) authorities where required by law.

We never sell personal data, and we do not use your platform content or analytics to train models for third parties.

We keep your data while your account is active. When you disconnect a TikTok or Instagram account, we revoke the stored access token and delete token material within 30 days; aggregated historical metrics may be retained in anonymized form.

If you delete your account, all associated content, connection records, and tokens are deleted within 30 days, except where longer retention is required by law.

You can revoke our access to your TikTok account at any time via TikTok → Settings → Security & permissions ("Manage app permissions"), and revoke Instagram access via Instagram → Settings → Website permissions → Apps and websites.

Access tokens are encrypted at rest and transmitted only over TLS. Access to production systems is limited to personnel who need it to operate the Service. No method of transmission or storage is perfectly secure, but we design our systems to protect your data against unauthorized access, alteration, or destruction.

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any right, contact [email protected]. If you are in the EEA/UK, you may also lodge a complaint with your local supervisory authority.

The Service is not directed to children. You must meet the minimum age required by TikTok and Instagram in your country to connect those accounts, and in no event may you use the Service if you are under 16.

We may update this Privacy Policy as the Service evolves. Material changes will be announced in-app at least 14 days before they take effect. The effective date above reflects the latest revision.

Dontdemoit operates the Service. For privacy questions or requests, email [email protected].