Content Sense

Privacy Policy

Last updated 4 September 2026

ContentSense is a private tool with a single operator. It holds almost no personal data, and what it does hold exists to do one job: upload a finished video to the operator's own TikTok account as a draft. This page says what is stored, where it goes, and how to get rid of it.

Who this covers

There are no public users. Accounts are created by the operator and there is no sign-up. The only personal data in the system belongs to the operator: an account to sign in with, and — if TikTok is connected — the details TikTok returns for that connection.

What is stored about a connected TikTok account

Connecting an account through TikTok Login Kit stores exactly this:

• The account identifier TikTok issues for this app, its display name and its avatar URL — shown in the panel so it is clear which account is connected.
• An access token and a refresh token, so drafts can be uploaded without reconnecting. Both are encrypted at rest with the application key, and neither is ever written to a log, an error message or an upload record.
• The scopes granted and the token expiry times, so the panel can say when a connection needs renewing.

The only scope requested is video.upload. It permits placing a video in the account's inbox as an unposted draft. It does not permit posting publicly, and it does not grant access to followers, messages, analytics or any other account data — none of which is requested or stored.

What is stored about content

Series, episodes, scripts, generated images, narration audio, rendered videos, uploaded or downloaded source recordings, their transcripts, and a record of what each generation cost. These are the operator's own working files. Source recordings are supplied by the operator, who is responsible for holding the rights to them.

Where data goes

ContentSense runs on a single server controlled by the operator. Content is sent to these third parties only as needed to produce it, and each is governed by its own privacy policy:

• OpenAI — script generation, narration, transcription.
• fal.ai — image generation.
• Google Cloud Storage — storage of generated media, on a private bucket with no public access.
• TikTok — the finished video, its caption and its hashtags, at the moment the operator asks for an upload.

TikTok tokens are never sent to any of the others, and nothing is sold, rented or shared for advertising. Some generation runs on the operator's own self-hosted models, in which case nothing leaves their infrastructure at all.

Retention and deletion

Disconnecting TikTok in the panel deletes the stored tokens; you can also revoke the connection from TikTok's own settings, which invalidates them immediately. Videos already uploaded as drafts live in the TikTok account and are managed there, not here. Generated media and records are deleted by the operator at their discretion and are kept no longer than they are useful.

Security

Tokens are encrypted at rest. Generated media is stored privately and served only through authenticated routes — nothing is on a public URL. Logs are written with credentials, tokens and pre-signed upload URLs redacted, because an upload URL is itself a capability. The panel requires a verified account to reach anything at all.

Cookies

A session cookie for signing in, and a CSRF cookie. There is no analytics, no tracking and no third-party script on this site.

Changes

This policy may change. The date at the top is the version in force.

Contact

Questions, or a request to delete data, can be sent to the operator of this deployment.