Privacy Policy

Last updated: 2026-06-02

This Policy describes how ContentOps Studio (the "Service"), operated by VPCF SERVIÇOS LTDA, collects, uses, stores and protects personal data, in accordance with the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018).

1. Controller and contact

Controller: VPCF SERVIÇOS LTDA, enrolled under CNPJ No. 61.246.311/0001-20. Contact for privacy matters and exercise of data subject rights: victor@vpcfservices.com.

2. Data we collect

• Registration: email and console access credentials.
• Connected platform account: when you connect TikTok via OAuth, we receive basic account information (identifier and display name via user.info.basic) and the access tokens needed to upload and publish authorized videos.
• Operational content: authorized source videos, generated clips, captions, transcripts and publication metadata created while using the Service.
• Technical logs: operation and audit logs for security and diagnostics.

3. How we use the data

• Operate the discovery, assisted editing, review and publishing flow.
• Authenticate the user and connect, with consent, destination platform accounts.
• Upload and publish videos to TikTok only upon the user's explicit consent.
• Ensure security, prevent abuse and maintain an audit trail.

4. Tokens and security

Access tokens of connected platforms are stored encrypted and are never exposed in API responses or in the browser. We apply access controls, encryption at rest for sensitive credentials, and per-organization isolation (multi-tenant).

5. Sharing

We do not sell personal data. We share data only: (a) with destination platforms (e.g., TikTok) to the extent necessary to perform the publication you authorize; (b) with infrastructure providers that process data on our behalf; and (c) when required by law.

6. Retention and deletion

We keep data for as long as necessary for the purposes described. The user may disconnect the TikTok account at any time, revoking access, and request deletion of their data through the contact above.

7. Data subject rights (LGPD)

You may request confirmation of processing, access, correction, anonymization, portability, deletion, and revocation of consent, as well as information about sharing. To exercise these rights, contact victor@vpcfservices.com.

8. Changes

This Policy may be updated. Material changes will be communicated through the Service's channels.