1. Scope
This Privacy Policy applies to Vinelabs, its website and its authenticated growth marketing workspace. It covers information you provide directly, information generated through your use of the service and data received from social platforms you choose to connect.
2. Information we collect
Account and workspace information
We process identifiers such as your email address, account ID, workspace membership, preferences and subscription status so we can authenticate you and provide the service.
Product and content information
We process product names, URLs, descriptions, target audiences, creative profiles, scripts, videos, captions, schedules, experiments and corrections you submit or approve.
Connected platform information
If you connect TikTok, we receive an account identifier, the permissions granted and OAuth credentials needed to keep the connection active. When authorised and available, we also process the videos, captions and publishing instructions you submit, platform post IDs, publishing status, errors and permitted performance metrics. We do not receive your TikTok password.
Technical information
We may process basic device, browser, IP address, security, request and error information needed to operate, protect and diagnose the service.
3. How we use information
- provide authentication, workspaces and requested product features;
- create and store product intelligence and approved creative context;
- connect social accounts through official authorisation flows;
- upload, schedule or publish content when you explicitly request or configure it;
- retrieve permitted metrics and produce performance insights;
- process subscriptions, enforce plan limits and maintain billing records;
- prevent fraud, investigate errors and protect the service; and
- comply with legal obligations and enforce our terms.
4. TikTok data and permissions
Vinelabs requests only the TikTok permissions needed for its visible features:
- user.info.basic identifies and displays the connected TikTok account;
- video.upload transfers a user-approved video to TikTok for further action there; and
- video.publish publishes a user-approved or user-scheduled video through TikTok's official Content Posting API.
We use TikTok data only to provide and maintain the connection and publishing features you choose. We do not sell TikTok user data or use it to build advertising profiles for third parties.
5. Legal bases
Where data protection law requires a legal basis, we process information to perform our contract with you, based on your consent for optional social connections, for legitimate interests such as service security and reliability, and to comply with legal obligations. You can withdraw social-platform consent by disconnecting or revoking the connection.
6. How information is shared
We share information only as needed with infrastructure, database, authentication, payment, AI, video and social-platform providers that help deliver the service; with other authorised members of your workspace; when you direct us to publish; or where required by law. We do not sell personal information.
A connected platform receives the content and instructions you choose to send to it. Its processing is governed by its own privacy policy.
7. Storage, security and retention
Workspace data is protected by access controls designed to limit it to authorised members. Social access and refresh tokens are stored in server-only records and are not exposed to the browser. We use reasonable technical and organisational safeguards, but no service can guarantee absolute security.
We retain account and workspace information while your account is active and as reasonably needed for the purposes above. Connection credentials are removed or made unusable when a connection is revoked or deleted. Limited billing, security and legal records may be kept longer where required.
8. Your choices and rights
Depending on your location, you may have rights to:
- access, correct or delete personal information;
- object to or restrict certain processing;
- receive a portable copy of eligible information;
- withdraw consent where processing relies on consent; and
- complain to your local data protection authority.
You can disconnect TikTok in the Vinelabs Connections area or revoke Vinelabs from your TikTok account settings. To request account or data deletion, email privacy@vinelabs.io from the address associated with your account.
9. International processing
Service providers may process information in countries other than your own. Where required, we use recognised safeguards for international transfers.
10. Children
Vinelabs is a business service and is not directed to children. We do not knowingly collect personal information from children below the minimum age required by applicable law.
11. Changes and contact
We may update this policy as the service changes. The latest version and effective date will remain available on this page. Privacy questions and rights requests can be sent to privacy@vinelabs.io.