Privacy Policy
Effective date: October 30, 2026
Kadraj is a self-hosted content studio operated by Murat Birben. This policy explains data handling when its operator connects a TikTok account.
Data processed
- When you authorize TikTok, Kadraj receives basic profile details such as your TikTok account identifier, display name, and username, plus authorization tokens needed to maintain the connection.
- Kadraj stores the TikTok connection and editorial post records, which may include a video reference, caption, planned time, publication status, and TikTok post identifier.
- When you explicitly start a post, the selected video file, caption, visibility, and posting options are sent to TikTok to carry out that request.
Purpose, storage, and sharing
This data is used to connect your account, show its connection status, plan posts, perform a post you explicitly confirm, and check its result. The application database and TikTok connection are stored on the operator's self-hosted Mac. The VPS only terminates HTTPS and forwards the TikTok OAuth callback through an encrypted SSH tunnel; it does not host the Kadraj application or its database. TikTok receives the information and media required for a post and processes them under TikTok's own privacy terms. Kadraj does not sell TikTok account data.
Retention and deletion
The refresh token is retained while the TikTok account remains connected. Disconnecting from Kadraj revokes the TikTok access grant and removes the stored connection token. Editorial post records may remain in the local database until the operator removes them. To ask about access, correction, or deletion of data held by the operator, contact the address below.
Security
Kadraj uses OAuth state validation and a restricted callback route. No internet-facing Kadraj dashboard or general API is provided at this hostname. No transmission over the internet can be guaranteed completely secure.
Contact
Privacy questions or requests: muratbirben@outlook.com.