Looppost ("we", "our", or "us") operates looppost.xyz (the "Service"). This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal data.
By using Looppost, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.
When you connect your TikTok account, we request the following scopes and receive the associated data:
| Scope | Purpose | Data stored |
|---|---|---|
user.info.basic | Identify you and display your profile | TikTok user ID (open_id), display name, profile picture URL |
video.list | Fetch your published videos for analytics | Video IDs, titles, view/like/comment/share counts (stored in snapshots) |
video.upload | Upload carousel images to TikTok | Not stored — used transiently during upload |
video.publish | Publish carousels directly to your TikTok profile | Publish ID returned by TikTok (stored for status tracking) |
We also store your access token and refresh token to act on your behalf. We do not store your TikTok password.
When you connect an Instagram professional account, we request only the following permissions:
| Permission | Purpose | Data stored |
|---|---|---|
instagram_business_basic | Identify the connected professional account | Instagram account IDs, username, display name, account type, and profile picture URL |
instagram_business_content_publish | Publish images, carousels, and Reels you explicitly submit | Published media ID and publication status |
instagram_business_manage_insights | Display performance dashboards for your Instagram media | Media IDs and periodic snapshots of views, reach, likes, comments, shares, saves, and total interactions when available |
We store an encrypted long-lived Instagram access token and its expiration date so scheduled posts can be published. We never receive or store your Instagram password. Instagram access is used only after you connect an account and only for the actions described above.
/uploads/ on our server)We collect periodic snapshots of your TikTok and Instagram media performance (including views, reach, likes, comments, shares, saves, and total interactions when provided by the platform) to display growth curves and dashboards. This data is stored in our database and is never sold or used for advertising.
We use server-side session cookies to keep you logged in. Sessions expire after 30 days of inactivity.
We do not:
Your data is retained as long as your account is active. You can request full deletion at any time — see Data Deletion.
Uploaded images are deleted from our server automatically after a post is published or cancelled. Session data expires after 30 days.
Looppost integrates with the TikTok API and Instagram API. Your use of Looppost is also governed by:
We also use Cloudflare R2 for secure image storage. Images are stored temporarily and deleted after publishing or account deletion.
We do not use any third-party analytics, advertising, or tracking services.
If you revoke Looppost's access from your TikTok account settings, TikTok will notify us via a server-to-server callback. Upon receiving this notification, we automatically delete all data associated with your TikTok account, including tokens, posts, analytics snapshots, and uploaded images.
If you remove Looppost from your Instagram authorized apps, Meta sends Looppost a signed deauthorization request. We delete the connected Instagram account record, its encrypted token, scheduled posts, analytics snapshots, and associated uploaded media. Content already published on Instagram must be deleted from Instagram itself.
You have the right to:
Looppost is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe we have collected data from a child, contact us immediately.
We may update this Privacy Policy. We will notify users of material changes by updating the "Last updated" date. Continued use of the Service constitutes acceptance of the updated Policy.
For privacy-related requests: privacy@looppost.xyz
For data deletion requests: looppost.xyz/data-deletion