Privacy Policy

StepCode Technology ("StepCode", "we", "us", or "our") respects your privacy and is committed to protecting personal and account data processed through our website (https://stepcode.tech) and software applications, including StepCode Studio (collectively, the "Services").

1. Information We Collect

We collect and process only the minimum data strictly necessary to operate our Services and execute actions explicitly requested by authenticated users:

• Account & Contact Information: Name, email address, and organization details provided when contacting us or authenticating into StepCode Studio.
• TikTok API Data (via TikTok Login Kit & Content Posting API): When you explicitly authorize StepCode Studio via TikTok OAuth 2.0 (scopes user.info.basic, video.publish, and/or video.upload), we receive your TikTok open_id, display name, avatar image URL, creator posting capabilities (privacy options, max video duration, comment/duet/stitch availability via /v2/post/publish/creator_info/query/), and OAuth access/refresh tokens.
• Google & YouTube API Data (via YouTube Data API v3): When you authorize StepCode Studio via Google OAuth 2.0 (scope https://www.googleapis.com/auth/youtube.upload), we receive OAuth access/refresh tokens and basic YouTube channel identifiers required to upload videos and thumbnails that you approve.
• Meta & Instagram Graph API Data: When you connect an Instagram Professional account (scopes instagram_basic and instagram_content_publish), we receive the Instagram Business/Creator Account ID, username, and OAuth tokens required to publish Reels.
• Media Content & Metadata: Video files (.mp4), cover images (.png/.jpg), captions, titles, tags, and scheduling timestamps created or uploaded within StepCode Studio.

2. How We Use Your Information

We use the collected information exclusively to:

• Authenticate your identity and display your connected social profile inside StepCode Studio;
• Upload, schedule, and publish short-form educational videos, captions, and thumbnails to your connected TikTok, YouTube, and Instagram accounts upon your explicit instruction;
• Maintain security, audit logs, error diagnostics, and prevent unauthorized access.

We never sell, rent, trade, or monetize your personal data or OAuth tokens with third parties or advertisers. We do not use user data obtained from Google, TikTok, or Meta APIs to train generalized artificial intelligence or machine learning models.

3. Google API Services User Data Policy (Limited Use Disclosure)

Specifically, StepCode Studio uses YouTube API Services solely to upload and manage video content on the authenticated user's own YouTube channel as explicitly initiated by the user. By using our YouTube integration, you also acknowledge and agree to the Google Privacy Policy and the YouTube Terms of Service.

4. TikTok & Meta Platform Compliance

Our integration with TikTok complies with the TikTok Terms of Service, TikTok Privacy Policy, and TikTok Content Sharing Guidelines. Every TikTok post requires explicit creator selection of privacy status, interaction controls, and commercial disclosure. Our Instagram integration complies with the Meta Privacy Policy.

5. Data Storage, Security & Retention

• Encryption: All data in transit is encrypted via HTTPS/TLS 1.3. OAuth 2.0 access and refresh tokens are stored encrypted at rest and restricted to isolated backend services.
• Temporary Media Staging: When a video is staged in object storage (Cloudflare R2) so that TikTok or Instagram servers can fetch the media file during publishing, the temporary public object is automatically purged after the publishing job finishes.
• Retention: OAuth tokens and account metadata are retained only while your account connection remains active. When you disconnect an account or request deletion, tokens are immediately revoked and deleted.

6. How to Revoke Access & Delete Your Data

You have full control over your connected accounts and may revoke StepCode's access or request complete deletion of your data at any time through any of the following methods:

• Inside StepCode Studio: Click Disconnect Account in the Settings / Publishing panel to immediately delete stored OAuth tokens and profile metadata.
• Google / YouTube Security Settings: Revoke StepCode's access directly at https://security.google.com/settings/security/permissions.
• TikTok App Settings: Open the TikTok mobile app → Profile → Menu → Settings and Privacy → Security and Permissions → Apps and Services Permissions → select StepCode Studio and tap Remove Access.
• Instagram / Meta Settings: Revoke access at https://www.facebook.com/settings?tab=business_tools.
• Email Request & Dedicated Deletion Page: Visit https://stepcode.tech/data-deletion or email privacy@stepcode.tech. We process all deletion requests within 72 hours.

7. Your Rights Under LGPD, GDPR & CCPA

Depending on your jurisdiction (including Brazil's Lei Geral de Proteção de Dados, LGPD Law No. 13.709/2018, the EU GDPR, and California CCPA), you have the right to request access, correction, portability, anonymization, or deletion of your personal data, and to revoke consent at any time by contacting privacy@stepcode.tech.

8. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer at:
StepCode Technology
Email: privacy@stepcode.tech / contact@stepcode.tech
Website: https://stepcode.tech

Política de Privacidade

A StepCode Technology ("StepCode", "nós" ou "nosso") respeita a sua privacidade e protege os dados pessoais e credenciais processados em nosso site (https://stepcode.tech) e softwares, incluindo o StepCode Studio ("Serviços").

1. Dados que Coletamos

Coletamos apenas os dados estritamente necessários para executar as ações solicitadas por usuários autenticados:

• Dados do TikTok (TikTok Login Kit & Content Posting API): Ao autorizar o StepCode Studio via OAuth 2.0 (escopos user.info.basic, video.publish e/ou video.upload), recebemos seu open_id, nome de exibição, avatar, configurações de publicação da conta e tokens OAuth para envio dos vídeos aprovados por você.
• Dados do Google e YouTube (YouTube Data API v3): Ao autorizar o escopo https://www.googleapis.com/auth/youtube.upload, recebemos os tokens OAuth e identificadores básicos do canal para publicar os vídeos YouTube Shorts e miniaturas aprovados por você.
• Dados da Meta / Instagram Graph API: Ao conectar uma conta Profissional do Instagram (escopos instagram_basic e instagram_content_publish), recebemos o ID da conta profissional, nome de usuário e tokens OAuth para publicar Reels.
• Arquivos de Mídia e Metadados: Vídeos (.mp4), capas (.png), títulos, legendas e horários de agendamento configurados no StepCode Studio.

2. Como Utilizamos os Dados

Utilizamos os dados exclusivamente para autenticar sua conta, exibir seu perfil no painel de publicação e enviar os vídeos, capas e legendas aprovados para suas contas no TikTok, YouTube e Instagram. Nunca vendemos, alugamos ou compartilhamos seus dados ou tokens com terceiros ou anunciantes, nem utilizamos dados de APIs do Google, TikTok ou Meta para treinar modelos de inteligência artificial.

3. Política de Dados do Usuário dos Serviços de API do Google (Uso Limitado)

Ao utilizar a integração com o YouTube, você também concorda com os Termos de Serviço do YouTube e com a Política de Privacidade do Google.

4. Segurança, Armazenamento e Retenção

Toda comunicação ocorre via HTTPS/TLS 1.3. Os tokens OAuth são armazenados de forma criptografada e arquivos temporários de trânsito em nuvem (Cloudflare R2) são removidos automaticamente após a conclusão da publicação.

5. Como Revogar Acesso e Excluir Seus Dados (LGPD, Lei nº 13.709/2018)

• No Google / YouTube: Revogue o acesso em https://security.google.com/settings/security/permissions.
• No aplicativo do TikTok: Acesse Perfil → Menu → Configurações e privacidade → Segurança e permissões → Permissões de apps e serviços e remova o acesso do StepCode Studio.
• No Instagram / Meta: Revogue em https://www.facebook.com/settings?tab=business_tools.
• Solicitação Direta de Exclusão: Acesse https://stepcode.tech/data-deletion ou envie um e-mail para privacy@stepcode.tech. Todas as solicitações são atendidas em até 72 horas.

Política de Privacidad

StepCode Technology ("StepCode", "nosotros") respeta su privacidad y protege los datos personales y las credenciales procesadas a través de https://stepcode.tech y nuestras aplicaciones, incluido StepCode Studio.

1. Datos que Recopilamos y Uso

Recopilamos únicamente los datos necesarios para autenticar sus cuentas y publicar los videos aprobados por usted:

• TikTok (Login Kit & Content Posting API): open_id, nombre para mostrar, avatar y tokens OAuth (alcances user.info.basic, video.publish, video.upload) para publicar videos con la configuración de privacidad e interacción elegida por el creador.
• Google / YouTube Data API v3: Tokens OAuth e identificadores básicos del canal (alcance youtube.upload) para subir YouTube Shorts aprobados por el usuario.
• Meta / Instagram Graph API: Identificador de cuenta profesional y tokens OAuth (alcances instagram_basic, instagram_content_publish) para publicar Reels.

2. Política de Uso Limitado de los Servicios de API de Google

Al usar la integración con YouTube, usted acepta los Términos del Servicio de YouTube y la Política de Privacidad de Google.

3. Revocación de Acceso y Eliminación de Datos

Puede revocar el acceso en cualquier momento desde Google Security Settings, desde la configuración de permisos de aplicaciones en TikTok o Meta, o solicitando la eliminación inmediata en https://stepcode.tech/data-deletion o escribiendo a privacy@stepcode.tech.