North Codex ("North," "we," "us," or "our") operates a private, internal social-media workflow used to prepare and manage content for North-owned social accounts. This policy describes how that workflow handles information when an authorized North operator connects a TikTok account or another supported social-media account.
Information we handle
Depending on the permissions an operator grants, the workflow may receive:
- Basic account information, such as an account identifier, display name, username, and profile image.
- OAuth authorization tokens and the permissions associated with them.
- Information about North-owned posts and videos, including captions, media, upload or publication status, and identifiers returned by the platform.
- Account or content statistics when the operator grants the relevant analytics permission.
- Technical records needed to operate and troubleshoot the workflow, such as timestamps, workflow status, and error messages.
We do not intentionally request passwords from TikTok or other connected social platforms. Authentication occurs on the platform's own authorization screen.
How we use information
We use this information only to connect authorized North social-media accounts; create, upload, schedule, or publish content after required human review and approval; display connection and posting status; diagnose failures; protect the system; and maintain a limited operational record.
North's automation may prepare drafts, but it does not approve content. A human must review and approve each post before scheduling or publication.
Storage and service providers
The workflow is self-hosted for North's internal use. Connection credentials, tokens, drafts, and operational data may be stored in North-controlled local application storage and backups. Encrypted network traffic may pass through infrastructure providers used to make the private application reachable online.
We use service providers only as needed to operate the workflow, including the relevant social platform, the self-hosted Postiz software, and Cloudflare for secure network connectivity. TikTok account data is not intentionally sent to an AI model as part of the TikTok connection process.
Sharing and sale
We do not sell connected-account information. We do not use it for third-party advertising. We disclose information only to service providers needed for the functions described above, when required by law, or to protect the security and integrity of the service.
Retention and deletion
We retain information only while reasonably needed to operate the internal workflow, maintain necessary records, or meet legal obligations. An authorized operator can revoke a platform connection through the platform or request deletion of associated North-held data. Some limited records may remain temporarily in backups or security logs until they expire through normal retention processes.
To request access, correction, or deletion, contact kender@northcodex.org.
Security
We use reasonable administrative and technical safeguards, including restricted account access, encrypted connections, and non-public application registration. No system can guarantee absolute security.
Children
This internal workflow is not directed to children and is intended for use only by authorized North operators who are legally able to manage the connected accounts.
Changes
We may update this policy when the workflow, connected platforms, or legal requirements change. The effective date above will be revised when changes are published.
Contact
Questions about this policy may be sent to kender@northcodex.org.