Privacy Policy

1. Who we are

Social AI Manager (“the application”) is a desktop application for Windows that helps you plan, schedule, publish and analyze social media content. It is published by Soren Delort, a private individual (“we”, “us”).

We are the data controller for the personal data we receive ourselves: the messages you send us, and the technical logs of this website kept by our hosting provider. The data processed by the application stays on your computer: we do not receive it and have no access to it (see Where information is stored).

You can contact the data controller at request@chesslearning.fr.

This policy applies to the Social AI Manager application and to this website. It does not apply to the social media platforms you connect, which are governed by their own privacy policies (see Third-party services).

2. In short

• The application stores its data on your computer. We do not operate a server that receives your account information, your videos or your statistics.
• There is no Social AI Manager account and no telemetry.
• The application only communicates with the official APIs of the platforms you connect (today: TikTok), to do what you ask.
• You can disconnect TikTok at any time and delete all the application’s data (see Disconnecting and deleting your data).

3. Information the application processes

The application only processes the information needed for the features you use. When you connect a TikTok account, it receives from TikTok only the data covered by the permissions (scopes) you approve on TikTok’s authorization page.

TikTok account information

• Basic profile (user.info.basic): TikTok account identifiers (open_id, union_id), display name and avatar link.
• Profile (user.info.profile): username, profile link and verified status.
• Account statistics (user.info.stats): number of followers, accounts followed, total likes and number of videos.

Authorization information

You sign in on TikTok’s own page, in your browser. The application never asks for, receives or stores your TikTok password. After you approve access, TikTok issues an access token and a refresh token, which the application stores encrypted together with the permissions granted and their expiry dates. See OAuth tokens.

Your TikTok videos and their statistics

With the video.list permission, the application retrieves the list of your public TikTok videos, including videos you published without Social AI Manager (up to the 200 most recent ones at the first synchronization). For each video: its identifier, publication date, caption, cover image link, share link, duration, dimensions, and the number of views, likes, comments and shares. Each collection is kept with its date so that you can follow results over time.

Content you schedule

The video files you import (copied into the application’s library folder, unless you choose to leave them where they are), their thumbnails, and the captions, hashtags, dates and publication settings you enter. Original files are never modified or deleted.

Publication information

For each publication: target platform, scheduled date, status, the identifiers returned by TikTok and any error message returned by TikTok. When direct posting is used, the application asks TikTok, just before each upload, which privacy and interaction options are available for your account, as TikTok requires.

AI agents and local API (Pro)

If you enable the local API, the application stores its API key (encrypted), the publications and recommendations created by your agents, and an activity log of their requests.

Technical information

Application settings, the application version, a random installation identifier generated on your computer (no hardware fingerprint), and logs used for troubleshooting. Tokens, secrets and keys are masked before anything is written to the logs. A diagnostic report is only created when you ask for it, stays on your computer and excludes tokens, account names and identifiers.

When you contact us

If you write to us, we receive your email address and the content of your message.

This website

This website is informational. It has no user accounts or forms, and it does not use cookies, analytics or advertising trackers. As with any website, our hosting provider (Hostinger International Ltd) may process standard technical data, such as IP address, browser type, requested page, date and time, in server logs for security and operation purposes.

4. How the information is used

The information described above is used only to:

• connect the TikTok account you choose and show which account is connected;
• send the videos you schedule to TikTok, at the time you select, and follow their status;
• retrieve and display the statistics of your videos and account;
• provide your own AI agents with the context you allow through the local API, when you enable it;
• apply the limits of your plan, keep the application secure and diagnose problems;
• respond to your requests and messages.

We do not sell this information, we do not share it with other users, and we do not use it for advertising or for purposes unrelated to the features you use.

5. OAuth tokens

OAuth tokens are used only to let the application communicate with TikTok within the permissions you granted: for example to upload a video you scheduled or to retrieve its statistics. They are never used for any other purpose.

• tokens are encrypted with AES-256-GCM; the encryption key is protected by Windows (DPAPI) for your Windows account;
• they are never displayed, never written to logs, never included in diagnostic reports and never given to AI agents using the local API;
• communication with TikTok uses encrypted HTTPS connections;
• TikTok access tokens expire after 24 hours and are renewed automatically with the refresh token, which TikTok issues for up to 365 days;
• we will never ask you for a password or a token, including in support requests.

6. Where information is stored

All the information listed above is stored on your computer, in the application’s data folder (%APPDATA%\SocialAIManager): its database, imported videos, thumbnails, logs and backups.

When you publish, the application sends your video directly from your computer to TikTok through TikTok’s official API. The application’s local service only accepts connections from your own computer. This website plays no part in publishing.

7. Artificial intelligence

Social AI Manager does not include an AI model and does not send your data to an AI provider. The local API lets AI agents or scripts that you run on your computer read the context you allow and prepare publications. If such an agent sends data to an external service, that transfer is under your control and subject to that service’s terms.

8. Third-party services

When you connect TikTok, you authorize access directly with TikTok, which decides what data it shares according to the permissions you approve. Content you publish is then subject to TikTok’s own terms and privacy policy: TikTok Privacy Policy (opens in a new tab).

Instagram, YouTube and Facebook are not connected through an API today: the application does not exchange any data with them. This website is served by our hosting provider, as described above and in the Legal notice.

9. Legal bases for processing

Where data protection laws such as the EU or UK General Data Protection Regulation (GDPR) apply, the processing relies on:

• performance of a contract, to provide the features you ask the application to perform;
• consent, when you connect a social media account. You can withdraw it at any time by disconnecting the account or revoking access;
• legitimate interests, to keep the application and this website secure and working properly;
• legal obligations, where information must be kept or disclosed by law.

10. Data retention

Information stored by the application remains on your computer until you delete it. Disconnecting an account deletes its tokens immediately; its publication history and statistics are kept so that you do not lose your history, until you delete them.

Messages you send us are kept for as long as needed to handle your request and any follow-up, then deleted.

11. Disconnecting and deleting your data

Disconnect your TikTok account

In the application, open Settings → Social networks → TikTok (Paramètres → Réseaux sociaux → TikTok) and choose Disconnect. The application asks TikTok to revoke its authorization and deletes the stored tokens. Scheduled publications for this account will not be sent until you reconnect it.

You can also remove Social AI Manager’s access at any time from TikTok’s settings, in the list of apps and services connected to your account.

Delete specific data

You can delete publications and library videos in the application. Deleting a library video removes the copy managed by the application; your original files are never touched.

Delete all data

The application does not yet offer a single button that erases all its data. To delete everything, quit the application (Settings → Desktop application → Stop the service and quit), then delete the folder %APPDATA%\SocialAIManager, which contains the database, tokens, library copies, thumbnails, logs and backups.

Data we hold

Because the application’s data stays on your computer, we cannot access or delete it remotely. The only personal data we may hold is the email correspondence you send us; to have it deleted, write to request@chesslearning.fr.

12. Security

Measures in place include: encryption of tokens and keys (AES-256-GCM with a key protected by Windows DPAPI), HTTPS communication with TikTok, a local service that only listens on your computer and requires authentication, masking of sensitive values in logs, and requesting only the permissions needed for the features you use.

No method of storage or transmission is completely secure. Because the application stores data on your computer, keeping your device and Windows account protected also helps keep your information safe.

13. Your rights

Depending on where you live, and in particular under the GDPR, you may have the right to access, correct and delete your personal data, to restrict or object to certain processing, to receive your data in a portable format, to withdraw your consent at any time, and to lodge a complaint with your data protection authority. In France, this is the CNIL (www.cnil.fr (opens in a new tab)).

Most of the data processed by the application is under your direct control on your computer, as described above. For any other request, contact us at request@chesslearning.fr. We may need to verify your identity before responding, and we will respond within the time required by applicable law.

14. Children’s privacy

Social AI Manager is not intended for children. It must not be used by anyone under 13, or under the minimum age required by the connected platforms or by the law of their country. We do not knowingly process personal data of children.

15. Changes to this policy

We will update this Privacy Policy when the application or applicable laws change, and before any new processing starts, for example online licence checks or new platform integrations. The “Last updated” date at the top of this page shows when it was last revised.

16. Contact

For any question about this Privacy Policy or about your personal data, contact us at:

request@chesslearning.fr

Please do not include passwords, access tokens or other credentials in your message.