Privacy Policy
Effective date: October 1, 2026 · Last updated: October 1, 2026
This Privacy Policy explains how HotHub Studio (the "Service"), operated by HotHub ("we", "us", "our"), collects, uses, stores and deletes information when you use the Service at tiktok.hothubofm.com.br, including information received from TikTok when you connect a TikTok account. We follow the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018).
1. Information we collect
1.1 Information received from TikTok
When you connect a TikTok account and approve the permissions on TikTok's authorization screen, we receive only the data covered by the permissions you granted:
| Permission (scope) | Data received | Why we use it |
|---|---|---|
| user.info.basic | Open ID, display name, avatar | Identify the connected account and show which account content will be posted to |
| user.info.profile | Username, bio, profile link, verified status | Display the account profile in the dashboard |
| user.info.stats | Follower, following, likes and video counts | Show account statistics and growth over time |
| video.list | List of your public videos with title, description, cover, link, duration, views, likes, comments and shares | Show video performance analytics |
| video.upload / video.publish | Publishing status and the ID of the published post | Upload and publish the content you choose, and show whether it was published |
We also receive access and refresh tokens that allow the Service to act on your behalf within the permissions you granted. We never receive or store your TikTok password.
1.2 Content you upload
Videos, images, captions, descriptions, and the scheduling and privacy settings you choose for each post.
1.3 Technical information
Session cookies required to keep you signed in to the dashboard, IP addresses used for security (such as blocking repeated failed login attempts), and server logs about publishing operations and errors.
2. How we use information
- To connect and display your TikTok accounts in the dashboard.
- To publish the videos, photos and carousels you request, at the time you choose.
- To show account and video statistics and their evolution over time.
- To keep the Service secure, prevent abuse and fix errors.
We do not sell your data, do not use it for advertising, do not build profiles of TikTok users for third parties, and do not use TikTok data for any purpose other than providing the Service to you.
3. Legal bases (LGPD)
We process data to perform the service you requested (art. 7, V), based on your consent given on TikTok's authorization screen (art. 7, I), and for our legitimate interest in keeping the Service secure (art. 7, IX).
4. Sharing
- TikTok: the content and settings you choose to publish are sent to TikTok through its official APIs.
- Infrastructure providers: our servers are hosted by a cloud provider that processes data only to host the Service.
- Legal requirements: we may disclose information if required by law or a valid order from a competent authority.
We do not share TikTok data with any other third party.
5. Storage and security
Data is stored on our own servers, accessible only through HTTPS. Access to the dashboard requires authentication, access tokens are kept only on the server and are never displayed in the browser, and media files are stored under random, non-guessable names. Image files are made available at a public URL only so that TikTok can download them when you publish a photo post.
6. Retention and deletion
- TikTok tokens and profile data: kept while the account is connected. When you disconnect an account in the dashboard, we revoke the access with TikTok and delete the account's tokens, profile data, statistics and video data from our database.
- Uploaded media: kept until you delete it in the dashboard.
- Logs: kept for a limited period for security and troubleshooting.
You can also revoke the Service's access at any time in the TikTok app: Settings and privacy → Security → Manage app permissions. After revocation, the Service can no longer access your account.
7. Your rights
Under the LGPD you may request confirmation of processing, access, correction, anonymization, portability or deletion of your data, information about sharing, and withdrawal of consent. To exercise these rights, contact us at the address below. We will respond within 15 days.
8. Children
The Service is not intended for anyone under 18, and we do not knowingly collect data from children.
9. Changes to this policy
We may update this Privacy Policy. The current version is always available on this page with its "Last updated" date.
10. Contact
Privacy requests and questions: suporte@hothubofm.com.br