Privacy Policy

Last updated: 10 November 2026 · Effective immediately

Your privacy matters to us. This Policy explains clearly what information Connectt Studio collects when you use it, why, how it is protected, how long it is kept, who it is shared with (no one, except where described below) and how you can control or delete it at any time. We collect the minimum information needed to provide the service, we never sell it and we never use it for advertising.

Who we are
Scope
Information we collect
Information from TikTok
Information from Google and YouTube
How we use information
Legal bases (GDPR)
Sharing and disclosure
Security
Retention and deletion
Disconnecting your account
Your rights
Cookies
Children
International transfers
Changes to this Policy
Contact

1. Who we are

Connectt Studio (“the Service”) is operated by JOAO REBELO SANTOS, UNIPESSOAL, LDA (“we”, “us”, “our”), a company registered in Portugal. For the purposes of the EU General Data Protection Regulation (GDPR) and the Portuguese data protection law, we are the controller of the personal data processed through the Service.

2. Scope

This Policy applies to the website at studio.stilkobenhavn.dk and to the Service. It does not apply to TikTok, Google or YouTube, which process data under their own policies — the TikTok Privacy Policy and the Google Privacy Policy — nor to any third-party website linked from the Service.

3. Information we collect

Connected account information received from TikTok or Google when you choose to connect an account (described in sections 4 and 5).
Content you provide: the videos, thumbnails, captions, hashtags and settings you upload or enter in order to publish them.
Access tokens issued by the platforms when you authorise the Service, which allow it to act only within the permissions you approved.
Publishing records: the status of each publication you request (for example, “processing”, “published” or an error message), so that we can show it to you.
Support communications: the information you send us when you contact us.
Technical data: limited server logs (such as IP address, date and time of requests) kept for security and to prevent abuse.

We do not collect your platform password, payment details, contacts, messages, precise location or any data about your followers or viewers.

4. Information from TikTok

When you connect a TikTok account through TikTok Login Kit, TikTok shows you the permissions requested and you decide whether to grant them. The Service requests only:

Permission	Information	Why we need it
`user.info.basic`	Your open ID, display name and avatar.	To identify your connected account and show you, before publishing, which account the content will be posted to.
`video.upload`	Permission to send a video to your TikTok inbox as a draft.	So you can finish editing and publish the video yourself in the TikTok app, when you choose this option.
`video.publish`	Permission to publish a video you have reviewed directly to your profile, and the publishing options TikTok makes available for your account (available privacy levels, whether comments, Duet and Stitch are allowed, maximum video duration).	To publish your content with the caption, audience and interaction settings you select, and to show only the options TikTok allows for your account.

5. Information from Google and YouTube

When you connect a YouTube channel through Google's sign-in, Google shows you the permissions requested. The Service requests only:

Permission	Information	Why we need it
`youtube.upload`	Permission to upload videos to your channel.	To publish the videos you upload to the Service.
`youtube`	Your channel's videos, playlists, thumbnails and video details.	To set the title, description, thumbnail, playlist and publication time you choose.
`yt-analytics.readonly`	Aggregated statistics of your own videos.	To show you how your content is performing.

Google API Limited Use. The Service's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and to the YouTube API Services Developer Policies. By using the Service with YouTube you also agree to the YouTube Terms of Service.

6. How we use information

We use information only to provide the Service you asked for:

to connect your accounts and show you which account you are publishing to;
to publish or schedule the content you choose, with the settings you choose;
to show you publishing status and the performance of your own content;
to answer your support requests;
to keep the Service secure, prevent abuse and comply with legal obligations.

We never sell your information, never use it for advertising or profiling, never share it with data brokers and never use it or your content to train artificial-intelligence or machine-learning models. Platform data is used solely to provide the Service and is never transferred to third parties for their own use.

7. Legal bases (GDPR)

Performance of a contract — to provide the Service you request under our Terms of Service.
Consent — when you authorise a platform connection; you can withdraw it at any time by disconnecting.
Legitimate interests — to keep the Service secure and prevent misuse.
Legal obligation — where the law requires us to keep or disclose information.

8. Sharing and disclosure

With the platform you choose: when you publish, your content and settings are sent to TikTok or YouTube, as you instructed.
With service providers: carefully selected hosting and cloud infrastructure providers that store and process data on our behalf, under written confidentiality and security obligations, and only to run the Service.
For legal reasons: if required by law, court order or a competent authority, or to protect the rights, safety and security of users and of the Service.

We do not share, sell, rent or trade your information with anyone else.

9. Security

Access tokens and secrets are encrypted at rest and kept only on protected servers; they are never exposed in the browser, in source code or in logs.
All connections use HTTPS/TLS encryption; sign-in uses the platforms' official OAuth flows with anti-forgery (state) protection.
Access to our systems is restricted to authorised personnel and protected by strong authentication, including two-factor authentication.
We request only the minimum permissions needed, and review our safeguards regularly in line with industry standards.

If a security incident affecting your personal data occurs, we will notify you and the competent authority as required by law.

10. Retention and deletion

Information	How long we keep it
Access tokens	Only while your account is connected; deleted immediately when you disconnect or revoke access.
Account information (open ID, display name, avatar)	Only while your account is connected; deleted within 7 days after disconnection.
Uploaded videos and captions	Only for as long as needed to publish them; deleted from our servers within 30 days after publication or after you cancel.
YouTube analytics	No longer than 30 days unless refreshed, in line with YouTube API policies.
Publishing records	Up to 12 months, to show your history; deleted earlier at your request.
Security logs	Up to 90 days.

You can ask us to delete all your information at any time by writing to the contact below; we complete deletion within 7 days and confirm it to you. If the Service ends, all platform data is deleted.

11. Disconnecting your account

You can revoke the Service's access at any time, instantly: on TikTok, in the app under Settings and privacy → Security → Apps and services permissions; on Google, at myaccount.google.com/permissions. After revocation the Service can no longer access your account and your tokens are deleted.

12. Your rights

Under the GDPR you have the right to access your data, to rectify it, to erase it, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting earlier lawful processing. To exercise any right, write to us at the contact below; we reply within 30 days at the latest. You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), or with the authority of your country of residence.

13. Cookies

We use only a strictly necessary session cookie, which keeps you signed in and protects the sign-in process against forgery. We do not use analytics, advertising or tracking cookies, and we do not track you across other websites.

14. Children

The Service is intended for users aged 18 or over. We do not knowingly collect information from anyone under 18; if we learn that we have, we delete it promptly.

15. International transfers

Some providers may process data outside the European Economic Area. Where this happens, transfers are protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

16. Changes to this Policy

We may update this Policy to reflect changes to the Service or the law. The date at the top shows the latest version. If a change materially affects how we use your information, we will inform you and, where required, ask for your consent again.

17. Contact

JOAO REBELO SANTOS, UNIPESSOAL, LDA — Connectt Studio
Portugal
Privacy and support: connectt.business@gmail.com