Privacy Policy — Andorra SMM Bot

Last updated: August 10, 2026

1. Introduction

This Privacy Policy describes how Andorra SMM Bot ("the App") accesses, uses, and protects information obtained through the TikTok API on behalf of the TikTok business accounts that have authorized it.

The App is an internal content-publishing tool operated for a small set of ski and hospitality businesses in Andorra. It is not a public consumer product, does not accept sign-ups from the general public, and only operates on TikTok accounts whose owners have explicitly granted it access through TikTok's official OAuth authorization flow.

2. Information We Collect

When an account owner authorizes the App, TikTok grants access to the following data, strictly limited to what is required for the App's functionality:

• Basic account information (open ID, display name, avatar) — user.info.basic
• Public profile information (profile links, verification status) — user.info.profile
• Account statistics (follower count, following count, likes count, video count) — user.info.stats
• List of the account's public videos — video.list
• Ability to upload video content to the account — video.upload

The App does not collect information from TikTok users who are not the authorized account owners, and does not access private messages, analytics beyond the scopes above, or any data unrelated to content publishing.

3. How We Use This Information

• Basic account and profile information is used solely to identify which authorized brand account a publishing action applies to.
• Account statistics are used to display basic performance context to the account owner within the App's own interface.
• video.list and video.upload are used to publish content prepared by the account owner (or generated with their explicit input) directly to their own TikTok account.

We do not sell, rent, or share this information with any third party. We do not use it for advertising, profiling, or any purpose beyond operating the App for the authorized account owner.

4. Data Storage and Security

Access and refresh tokens issued by TikTok are stored on our own server infrastructure, are never displayed publicly, and are transmitted only over encrypted (HTTPS) connections. Access to this infrastructure is restricted to the operator of the App.

5. Data Retention

Tokens and related account data are retained only for as long as the authorization remains active. If an account owner revokes access (via TikTok's app-permission settings or by contacting us), all associated tokens and cached data are deleted within 30 days.

6. Your Rights

Account owners may, at any time:

• Revoke the App's access directly from TikTok (Settings → Manage apps and devices)
• Request confirmation of what data is held, and its deletion, by contacting us at the address below

7. Accounts Covered

This App is authorized only by the following TikTok business accounts, at the explicit request of their respective owners:

• @skiinstructorandorra
• @ski_instrucrors_andorra
• @gourmet_andorra

No other TikTok account is able to use or be affected by this App.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

9. Contact

Questions about this policy or requests regarding your data can be sent to: mr.alexander.arkhipov+tiktok@gmail.com