Privacy Policy

Last updated: July 9, 2026

1. Introduction

This Privacy Policy describes how Aigility ("Aigility", "we", "us", or "our"), accessible at https://www.useaigility.com, collects, uses, stores, and protects your personal information when you use our platform, including features that integrate with TikTok through TikTok's official Login Kit and Content Posting API. By using Aigility, you agree to the practices described in this policy.

2. TikTok User Data Handling

When you choose to connect your TikTok account to Aigility via TikTok Login Kit, we collect and process only the basic profile information that TikTok makes available through its official API and that you explicitly authorize on TikTok's consent screen. This is limited to: your TikTok display name, your avatar (profile picture) URL, and your unique TikTok identifiers (open ID and, where granted, union ID). We use this data solely to identify your connected account inside Aigility, display it to you in your dashboard, and enable the publishing features you request.

We do not collect your TikTok password, private messages, contact lists, follower lists, or any data beyond the scopes you explicitly approve. We do not sell, rent, or share your TikTok data with third parties, and we do not use it for advertising, profiling, or any purpose unrelated to the core functionality of Aigility.

3. OAuth Token Storage & Security

To interact with the TikTok API on your behalf, Aigility receives OAuth 2.0 access tokens and refresh tokens issued by TikTok. These tokens are treated as highly sensitive credentials and are protected as follows:

  • Tokens are stored encrypted at rest using industry-standard AES-256 encryption in our secured database infrastructure, with encryption keys managed separately from the data they protect.
  • Tokens are transmitted exclusively over encrypted TLS (HTTPS) connections and are never exposed in URLs, client-side code, browser storage, or application logs.
  • Access to token storage is restricted to the minimum backend services required to perform the actions you authorize, under strict access controls.
  • Tokens are used solely to perform the specific actions you request (such as publishing a video you created) and never for any undisclosed purpose.
  • When you disconnect your TikTok account or revoke access, the associated tokens are permanently deleted from our systems.

4. Public Interactions & Content Publishing

Aigility uses TikTok's official Content Posting API to publish video content to your TikTok profile. We will only publish content to your TikTok account with your explicit, per-action authorization. Every post is initiated by you: Aigility never posts, edits, deletes, or otherwise interacts with your TikTok account automatically or without your direct instruction. You review and confirm each piece of content before it is submitted to TikTok, and you may configure whether content is posted publicly or saved as a draft, subject to the options TikTok's API provides. You retain full ownership of, and responsibility for, all content published through Aigility.

5. Data Deletion & Access Revocation

You are in control of your data at all times. You can revoke Aigility's access to your TikTok account and request deletion of your data through either of the following methods:

A. Revoking access directly in the TikTok app:

  1. Open the TikTok app and go to your Profile.
  2. Tap the Menu (☰) button, then select Settings and privacy.
  3. Tap Security & permissions (or Security), then Apps and services / Manage app permissions.
  4. Select Aigility from the list of connected apps and tap Remove access.

Once access is revoked on TikTok, our OAuth tokens become invalid and Aigility permanently deletes the revoked tokens from our servers.

B. Requesting full data deletion from Aigility:

You may request the immediate and permanent deletion of all your personal data — including your TikTok profile information, all stored OAuth access and refresh tokens, and any associated account records — by disconnecting your TikTok account in your Aigility settings, or by emailing support@useaigility.com with the subject line "Data Deletion Request". We will execute the deletion promptly and confirm completion within 30 days at the latest. Deletion is permanent and irreversible; no copies of your TikTok data or tokens are retained in our production systems after deletion.

6. Data Retention

We retain your data only for as long as your account remains active and connected. TikTok OAuth tokens are deleted immediately upon disconnection or revocation. Basic account records are deleted upon a verified deletion request as described in Section 5.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by the "Last updated" date at the top of this page. Continued use of Aigility after changes take effect constitutes acceptance of the revised policy.

8. Contact

For any privacy-related questions or requests, contact us at support@useaigility.com.