Privacy Policy
This Privacy Policy explains what information wbps ("we", "our") collects from users of https://page.fvz.ai, how we use it, and the choices you have. wbps is an independent third-party tool and is not affiliated with TikTok Inc. or ByteDance Ltd.
1. Information We Collect
1.1 From TikTok via OAuth (scope: user.info.basic)
open_id,union_id— TikTok's stable identifiers for your account, used to associate your wbps session with your TikTok account.display_name,avatar_url— used for personalising the wbps user interface.
1.2 OAuth tokens
access_token(TikTok issues a 24-hour expiry) — used by wbps to call the Content Posting API on your behalf.refresh_token(1-year expiry) — used to obtain a new access_token without re-prompting you.
Tokens are stored in encrypted Cloudflare KV, scoped to your wbps session, and are never exposed to your browser nor to third parties other than TikTok.
1.3 From you when you publish
- The video file you upload (streamed through wbps to TikTok and not persisted on wbps servers).
- The caption / title, privacy_level, and "disable duet / comment / stitch" flags you set.
1.4 Automatically collected
- IP address, user-agent, request timestamps — kept for up to 7 days in operational logs for abuse prevention and debugging.
2. How We Use Information
- To authenticate you with TikTok via OAuth and call the official Content Posting API endpoints
/v2/post/publish/video/init/and/v2/post/publish/status/fetch/on your behalf. - To display your TikTok display name and avatar in the wbps interface.
- To provide reliability and security (rate limiting, abuse detection, debugging).
We do not use your data for advertising, profiling, or model training. We do not sell your data.
3. Data Retention
- Video files: streamed pass-through to TikTok. Not persisted on wbps servers.
- OAuth tokens: deleted on Sign out, on token revocation, or when the wbps session expires (90 days).
- Webhook event records: retained for up to 30 days for audit and idempotency, then automatically purged.
- Operational logs: up to 7 days.
4. Data Sharing
The only third party your data is shared with is TikTok, and only to the extent strictly required to perform the operation you have requested (sign-in, upload, publish, status fetch, token refresh, token revoke). We do not share your data with advertisers, analytics vendors, data brokers, or any other third party.
5. Your Rights
- Revoke access: click "Sign out" in the wbps dashboard, which calls TikTok's
/v2/oauth/revoke/endpoint, or visit https://www.tiktok.com/setting/manage-app-permissions. - Delete your data: email [email protected]; we will delete all data associated with your account within 7 days.
- Access / correction: contact us with the same address; we will respond within 30 days.
6. Security
The Service is served over HTTPS only. OAuth client secrets are stored in Cloudflare Workers Secrets and are never exposed to the browser. KV namespaces holding session and token material are encrypted at rest by Cloudflare. Session cookies are HttpOnly, Secure, SameSite=Lax.
7. Children's Privacy
wbps is not directed to children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect data from such users. If you believe a child has provided data to us, please contact us and we will delete it.
8. International Transfers
wbps is hosted on Cloudflare's edge network. Data may be processed in any country in which Cloudflare operates. By using the Service you consent to this processing.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the Policy was last revised. Continued use of the Service after a change constitutes acceptance of the revised Policy.
10. Contact
For privacy questions or requests, please email [email protected].