M8 Apps · M8 Social Publisher
M8 Social Publisher Privacy Policy
This policy explains how M8 Apps, operated by Kenneth Adrian Yepez, processes information when creators and businesses use M8 Social Publisher, our self-hosted Postiz service, and connect a TikTok account.
Effective date: August 26, 2026
Information we collect
We process the account details you provide, workspace configuration, support communications, and technical information required to secure and operate the service.
When you authorize TikTok, TikTok may provide an account identifier, avatar, display name, username, and the permissions you approve. We process only the TikTok data needed to identify the connected account and provide the publishing features you choose.
We also process media you select, editable captions and titles, privacy and interaction settings, commercial-content disclosures, publishing requests, and the processing status returned by TikTok.
How we use information
We use information to authenticate authorized users, connect TikTok accounts, display the account that will receive a post, validate creator-specific posting options, upload drafts or publish content after express user action, show delivery status, provide support, prevent abuse, and maintain service reliability.
We do not sell personal information or use TikTok user data for unrelated advertising, profiling, or data-broker activities.
TikTok permissions and user control
M8 Social Publisher requests user.info.basic to show the authorized account, user.info.profile to display the authorized username, video.upload to send a user-selected draft to TikTok, and video.publish to publish only after the user reviews the content and posting settings.
Connecting TikTok is optional. You may decline individual permissions, disconnect the channel in M8 Social Publisher, or revoke access in TikTok settings. We do not publish without a user's explicit action.
Sharing and service providers
Information may be processed by infrastructure, hosting, storage, monitoring, communications, and security providers acting on our behalf. We send information to TikTok only as necessary to perform the action you request.
We may disclose information when required by law or when reasonably necessary to protect users, the service, or the public.
Retention and security
We retain information only as long as reasonably necessary to operate the service, complete requested publishing workflows, provide support, meet legal obligations, resolve disputes, and prevent abuse. Retention depends on the data type and account status.
TikTok access and refresh tokens are kept server-side and protected by technical and administrative access controls. No transmission or storage method is completely secure.
Your rights and deletion
You may request access, correction, export, restriction, objection, or deletion where applicable. Email support@m8apps.com from the address associated with your account and use the subject M8 Social Publisher Data Request.
After verifying the request, we delete or de-identify account data, stored TikTok identifiers, tokens, media, and configuration that we are not required to retain for security, fraud prevention, disputes, or legal compliance.
Children, international use, and updates
The service is intended for businesses and creators who can enter a binding agreement and is not directed to children under 13. Information may be processed in the United States and locations where our providers operate.
We may update this policy and will post the revised effective date. Contact support@m8apps.com or M8 Apps, 539 W Commerce St, Unit 835, Dallas, TX 75208, USA.