Privacy Policy
Effective 18 October 2026
This policy explains what data Loopost uses, why, where it is kept and how you can remove it. Loopost is a free dashboard to prepare, preview and publish your own photo carousels and short videos to your TikTok account.
1. Data controller
The data controller is Vagabond Studio, based in France, which publishes and runs Loopost (we, us). For any question about your data, write to said.souidi.career@gmail.com.
2. TikTok data we use
When you connect a TikTok account, you sign in on TikTok with the official Login Kit and you approve the permissions below. Loopost asks for these three scopes and no other.
| Scope | What it gives Loopost | How it is used |
|---|---|---|
user.info.basic | Your TikTok open ID, display name and avatar. | To show which account is connected and to link your posts to the right account. |
video.upload | The right to send content to your TikTok inbox as a draft. | Only when you choose Send to inbox for a post. |
video.publish | The right to publish content directly on your TikTok profile. | Only when you choose Post directly, with the caption and privacy level you picked. |
Connecting also gives Loopost an access token and a refresh token issued by TikTok. They let the service send the posts you ask for, on your behalf.
Loopost does not read your TikTok password, messages, followers, likes, comments, watch history, videos you did not prepare in Loopost, or any other data from your TikTok account.
3. Other data we use
- The content you prepare. Photos, videos, slide texts, hooks, captions, and the privacy and scheduling options you choose.
- Brand settings. The description of your brand, audience and tone that you write, if you fill it in, used to suggest wording.
- Publishing records. Which post was sent, when, to which account, and the status or error returned by TikTok.
Loopost is free and collects no payment data. It uses no advertising trackers and no analytics trackers, and sets no cookies beyond what is strictly needed to keep you signed in.
4. Why we use it, and on what basis
- To connect your account and publish the content you ask Loopost to publish. Legal basis, the performance of the service you requested (article 6.1.b GDPR).
- To keep the service secure, fix errors and prevent abuse. Legal basis, our legitimate interest (article 6.1.f GDPR).
Your data, and in particular your TikTok data, is never sold, rented, shared with advertisers, used for advertising, or used to train any artificial intelligence model.
6. Where it is stored and how it is protected
Data is stored on a server controlled by us, located in the European Union, with access limited to us.
TikTok access tokens and refresh tokens are stored only on the server, encrypted with AES 256 GCM. They are never sent to your browser, never displayed in the interface and never written to logs. Connections to Loopost and to TikTok are encrypted with HTTPS.
Because TikTok and some providers are based outside the European Union, sending a post or a request to them may involve a transfer of data outside the EU, covered by their own safeguards.
7. How long we keep it
- TikTok account information and tokens are kept while the account is connected and deleted from the server as soon as you remove the account in Loopost.
- Content you prepare is kept until you delete it in Loopost or delete your Loopost account.
- Publishing records are kept while your Loopost account exists and are deleted with it.
8. Revoking access
You can cut Loopost's access to your TikTok account at any time, in two ways.
- In Loopost, open Settings, then Connected accounts, and remove the account. Loopost revokes its access at TikTok and deletes its tokens right away.
- In the TikTok app, open your profile, then Settings and privacy, then Security, then Manage app permissions, and remove Loopost. The tokens stop working immediately, and the account and its tokens are deleted from Loopost when you remove it there or ask us by email.
9. Deleting your data
To delete everything Loopost holds about you, open Settings, then Account, then Delete account, and confirm with your password. Your workspaces, content, media, connected accounts and publishing records are deleted at once, and Loopost's access to your TikTok account is revoked.
You can also email said.souidi.career@gmail.com with the subject Loopost data deletion and the TikTok display name of the account concerned. In that case your account information, tokens, content and publishing records are deleted within 30 days, and you get a confirmation by email.
Posts already published on TikTok stay on TikTok until you delete them there.
10. Your rights
Under the GDPR and French law, you can ask to access, correct or delete your data, to receive it in a portable format, and to restrict or object to its use. You can withdraw your consent at any time by disconnecting your account. Send your request to said.souidi.career@gmail.com, an answer is given within one month.
If you think your rights are not respected, you can file a complaint with the CNIL, the French data protection authority, at cnil.fr.
11. Children
Loopost is not meant for children. It is not offered to anyone under 16 in the European Union, or under the minimum age TikTok sets in your country. If you believe a child has connected an account, contact us and the data will be deleted.
12. Changes to this policy
This policy may be updated when the service changes, for example if Loopost asks TikTok for a new scope. The effective date at the top of this page shows the latest version, and significant changes will be announced in the service before they apply.