Privacy Policy

Last updated: November 3, 2026

This Privacy Policy explains how Incognito ("we", "us") collects, uses and protects information in our internal social media management tool available at https://smm.incognito.asia (the "Service"). The Service is used only by our authorized team members to plan, schedule and publish content to social media accounts we own or manage.

1. Information we collect

Account information: name, email address and password (stored hashed) of team members who log in to the Service.
Connected platform data: when a team member connects a social media account (including TikTok), we receive OAuth access and refresh tokens and basic profile information (such as account ID, display name and avatar).
TikTok data: with the scopes user.info.basic, video.upload, video.publish and video.list, we access basic profile info, upload and publish videos you choose, and read the list and performance metrics of videos on the connected account.
Content: captions, images and videos uploaded to the Service for publishing.
Technical data: server logs such as IP address and timestamps, used for security and troubleshooting.

2. How we use information

To authenticate team members and operate the Service.
To publish content to connected accounts only when a team member schedules or approves it.
To display analytics for content published from connected accounts.

We do not sell personal data, use it for advertising, or use TikTok data for any purpose other than providing the features above.

3. Sharing

We share data only with the social platforms you connect (e.g., TikTok) in order to publish content and retrieve analytics, and with infrastructure providers that host the Service on our behalf. We may disclose information if required by law.

4. Storage and security

The Service is self-hosted on servers we control. Access tokens are stored encrypted. Access to the Service is restricted to authorized team members.

5. Retention and deletion

We keep data while the related account remains connected or the team member remains active. Disconnecting a social account in the Service deletes its stored tokens. You can also revoke access at any time in your TikTok app settings (Settings and privacy → Security → Manage app permissions). To request deletion of your data, contact us at the address below and we will respond within 30 days.

6. Children

The Service is not directed to anyone under 18.

7. Changes

We may update this policy; the "Last updated" date will reflect changes.

8. Contact

Incognito
Email: it@incognito.asia