Privacy Policy

makepost (“makepost”, “we”, “us”) is a tool that designs carousel-style slide decks with AI and, if you choose, publishes them to TikTok on your behalf. This policy explains what information we collect, why we collect it, and the choices you have — including, specifically, what happens to your TikTok account information when you connect it and when you disconnect it.

makepost is operated by an individual developer, not a registered company. If you have questions about this policy or your data, contact support@makepost.live.

1. Information we collect

Account information

When you create a makepost account you give us an email address and, if you sign up with a password rather than Google, a password (stored hashed by our authentication provider, Appwrite — we never see or store it in plain text). If you sign in with Google, we receive your name and email address from Google.

Content you create

The carousels you write or generate — their text, layout, colours, fonts, uploaded photos, and any “formats” or saved slides you build from them — are stored so you can come back to them. This is the core of the product; without storing it, there would be nothing to edit, reuse, or publish.

Pinterest boards and pins

If you add a Pinterest board or pin URL to a collection, we download the publicly visible images from that board or pin (via an internal downloading service) and store copies of them so they can be used as backgrounds in your carousels. We do not access your Pinterest account, and we do not collect anything beyond the public images and their source URL.

Your connected TikTok account

If you connect a TikTok account so makepost can publish on your behalf, TikTok gives us, and we store:

• Your TikTok user ID, username, display name and profile photo — so we can show you which account is connected;
• An OAuth access token and refresh token, and the permissions (“scopes”) you granted — specifically user.info.basic and video.publish. These are what let makepost act on your behalf; we never see or store your TikTok password.

We request only the scopes above: basic profile information, and the ability to publish video content you have created and approved. We do not request access to your followers, your direct messages, or any content other than what our app posts for you.

Payment information

Paid plans and credit purchases are processed by our payment provider, Creem. We receive your plan, purchase history and billing status, but makepost never receives or stores your card number — Creem handles that directly.

Automatically collected information

Like most web services, our servers and hosting/analytics providers log basic technical information (IP address, browser type, pages visited, timestamps) for security, debugging and abuse prevention.

2. How we use your information

• To operate the editor, save your carousels, and let you come back to them;
• To design carousels with AI, based on the topic and settings you provide (see “AI providers” below);
• To publish content to TikTok when, and only when, you explicitly schedule or post it — makepost never posts anything you haven’t reviewed and asked it to;
• To process payments and enforce plan limits;
• To respond to support requests, and to keep the service secure and working.

We do not sell your personal information, and we do not use your TikTok data for advertising.

3. How publishing to TikTok works

When you schedule or publish a carousel, makepost calls TikTok’s Content Posting API to publish the images directly to your connected TikTok account, using the caption, cover, visibility (public, followers-only or private) and other settings you chose before scheduling. Nothing is posted automatically without you first composing and approving it in the app. While makepost’s TikTok developer application is under TikTok’s review, TikTok may restrict published posts to private (visible only to you) regardless of the visibility you select — that is a platform-side restriction during audit, not a choice we make.

4. Who we share information with

We share information only with the service providers that make makepost work, and only for that purpose:

• TikTok — to publish the content you create, and to read your basic public profile so we can show which account is connected;
• Appwrite — our authentication and database provider, which stores your account, carousels and connected-account records;
• Cloudflare — object storage (R2) for uploaded and downloaded photos, and hosting;
• Anthropic and Google — the AI providers used to generate carousel text from the topic you provide. The topic and any content you ask them to write from is sent to whichever provider is configured; neither provider receives your TikTok tokens or account details;
• Pexels — stock photo search, when you search for a background photo instead of using your own;
• Creem — payment processing for paid plans and credits;
• We may also disclose information if required by law, or to protect the rights, safety or property of makepost, our users, or others.

We do not sell or rent your personal information to third parties.

5. How long we keep your data

We keep your account, carousels, formats and saved slides for as long as your account exists. Your TikTok access and refresh tokens, and the profile information tied to them, are kept only until you disconnect that account — see the next section. Scheduled and published post records are kept as part of your account history so you can see what was posted and when.

6. Disconnecting TikTok, and deleting your data

You can disconnect a TikTok account at any time from the TikTok Accounts section of your dashboard. Doing so immediately and permanently deletes the stored access token, refresh token, and TikTok profile information (user ID, username, display name, avatar) for that account from our database. It does not delete videos already published to TikTok — those are controlled from within TikTok itself.

To delete your makepost account entirely — including your carousels, saved formats, collections and any connected-account records — email support@makepost.live from the address on your account and we will delete it within 30 days. You can also delete individual carousels, formats, collections or saved slides yourself at any time from within the app.

7. Security

TikTok access and refresh tokens are stored server-side only and are never sent to or readable by your browser; every action that uses them (publishing, refreshing a token, disconnecting) happens on our server. We use industry-standard measures — encrypted connections, access-controlled storage, and per-account data isolation — to protect your information, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children’s privacy

makepost is not directed at, and is not intended for use by, anyone under 13 years old (or the minimum age required by TikTok to hold an account in your country, whichever is higher). We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

9. International users

makepost’s infrastructure providers operate data centres in multiple regions. By using makepost, you understand that your information may be processed and stored outside the country you live in.

10. Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page and, where appropriate, notify you in the app. Continuing to use makepost after a change means you accept the updated policy.

11. Contact us

Questions, data requests, or anything else about this policy: email support@makepost.live. This policy applies to the makepost service at makepost.live.