This Privacy Policy describes how the 3AM Broadcast content publishing application ("the App") handles data.
What the App accesses: When the operator authorizes the App via TikTok's OAuth flow, the App receives a TikTok access token and basic profile information (open ID, avatar, display name) for the authorizing account only. When the operator authorizes the App via Google's OAuth flow, the App receives a Google access token scoped only to YouTube video uploads (the youtube.upload scope) for the authorizing account's own YouTube channel. When the operator authorizes the App via Meta's OAuth flow (Facebook Login for Business), the App receives a Page access token scoped only to publishing video content to the operator's own Facebook Page and linked Instagram professional account. In all cases this access is used exclusively to publish video content that the operator has already created, directly to that same account.
What the App does not do: The App does not collect, store, or process data from any TikTok, Google/YouTube, Facebook, or Instagram user other than the single authorizing operator account. It does not read, analyze, or store other users' content, comments, or profile data. It does not sell, share, rent, or otherwise transfer any data to third parties, advertisers, or data brokers. The App does not use Google or Meta user data for advertising, and no human reads that data except as needed for security, legal compliance, or with the operator's own explicit consent.
Google API Services User Data Policy: The App's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Storage and security: Access tokens are stored securely on infrastructure controlled by the operator and are used only to make authorized API calls to TikTok's Content Posting API, the YouTube Data API, or Meta's Graph API (Facebook Pages and Instagram). Tokens are never exposed in application logs or shared outside the operator's own systems.
Data retention: Access and refresh tokens are retained only as long as needed to continue publishing on the operator's behalf, and are deleted if the operator revokes the App's access or discontinues its use.
The App holds no data belonging to any user other than the operator who authorized it. There is no user database, no third-party profile data, and no stored content from other people's accounts — so for everyone except the operator, there is nothing to delete.
The only data the App stores is the operator's own OAuth access and refresh tokens for the accounts they connected. The operator can have those deleted in either of two ways:
Deleting tokens does not remove videos already published to a connected account — those are ordinary posts owned by that account, and are removed by deleting them on the platform itself.
Changes to this policy: This policy may be updated as the App's functionality changes. Continued use of the App after changes constitutes acceptance of the updated policy.
Contact: contact@3ambroadcast.com