Schedly Privacy Policy

1. Who we are

Schedly SAS ("Schedly", "we", "us") provides a workflow tool that helps users schedule and publish TikTok content with explicit consent. Our primary place of business is Paris, France.

2. Data we collect

• Account data: Name, email, and company details you provide when creating an account or contacting support.
• TikTok profile data: Basic profile information such as user ID, username, and avatar as returned by TikTok Login.
• Tokens and permissions: Access tokens and scope approvals required to authenticate and perform user-authorized posting.
• Content data: Video files, captions, and scheduling details you upload or create.
• Usage data: Logs of consent events, publish confirmations, and audit history.

3. How we use data

• Authenticate users via TikTok Login and confirm consented scopes.
• Enable user-initiated publishing and scheduling through the TikTok Content Posting API.
• Store drafts and approvals until users confirm publishing.
• Maintain audit logs for compliance, troubleshooting, and security.
• Respond to support requests and legal or policy obligations.

4. Legal basis (EEA/UK)

We process personal data under the following bases: (a) contract performance to deliver the Schedly service, (b) consent for TikTok Login and publishing permissions, and (c) legitimate interests for security, fraud prevention, and service improvement. You may withdraw consent at any time.

5. Data retention

We retain access tokens until you revoke TikTok access or delete your account. Draft content is retained until you publish or delete it, typically within 30 days. Audit logs are retained for up to 12 months to support compliance and security.

6. Sharing and disclosures

We do not sell or rent personal data. We share data only with TikTok to complete authorized publishing and with infrastructure providers that host the service. We may disclose information if required by law.

7. Security

We use encryption in transit, access controls, and logging to protect data. Only authorized staff may access user data for support and compliance purposes.

8. Your rights

Depending on your location, you may request access, correction, deletion, or portability of your data. You can also revoke TikTok access from TikTok settings or within Schedly. We respond to verified requests within 30 days.

9. Data deletion

You can request deletion by emailing support@schedly.app. We will delete your Schedly account data and revoke tokens. See the Delete Data page for detailed steps.

10. Cookies

We use essential cookies to keep you signed in and to maintain session security. We do not use advertising cookies or sell personal data.

11. International transfers

We primarily process data in the European Union. If data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses.

12. Changes to this policy

We may update this policy as the service evolves. If changes are material, we will notify users and update the effective date.

13. Contact

Questions? Contact us at support@schedly.app.