1Scope and controller
This policy explains how VIELUMI COMPANY LIMITED (business registration 0319013155) processes personal data related to the Vielumi website and workspace.
- It covers the public site, account registration, workspace features, support, and user-initiated third-party authorization flows.
- Material updates are reflected by the date on this page.
2Information we collect
2.1 Information you provide
- Account and contact details such as name, email, and company.
- Uploaded video, images, audio, captions, publishing settings, and product materials.
- Support requests and contact-form submissions.
2.2 Information collected automatically
- Device, browser, IP, session, and security logs needed to operate and protect the service.
- Activity records such as login, upload, authorization, publish confirmation, and status checks.
2.3 Information we do not collect
- We do not request or store your TikTok password.
- We do not collect passport, national-ID, or birth-date data for ordinary service use.
3TikTok data and purposes
We process TikTok-related data only after you choose to connect your account.
- This may include open_id, nickname, username, avatar, granted scopes, encrypted access and refresh tokens, creator_info posting settings, publish IDs, and status.
- We use the data only to identify the destination account, render current settings, submit original content on your instruction, report status, support disconnect, and secure the service.
- A TikTok post begins only after you preview the content, manually choose settings, and expressly confirm.
4Legal bases and user control
- We process data to provide requested services, perform our agreement, secure the platform, and comply with law.
- You may disconnect TikTok in Authorization Management. Disconnecting asks TikTok to revoke the token and removes locally stored access and refresh tokens.
- You may access, correct, or request deletion of account data, subject to legal retention requirements.
5Storage and providers
- Account, authorization, and operations records are stored in Cloudflare D1.
- User media is stored in Cloudflare R2.
- Short-lived OAuth state uses a secure HttpOnly cookie that expires after about ten minutes; the default session cookie expires after about seven days.
6Retention
- TikTok tokens are retained until disconnect, expiry, or account deletion.
- Media and publishing records are retained until you delete them or close the account.
- Verified deletion requests are normally completed within 30 days; records needed for law, security, fraud prevention, or isolated backups may remain for up to 90 additional days.
8Your rights, children, and contact
- Privacy requests: info@vielumi-global.com
- Mail: No. 18, N4 Street, Jamona Golden Silk Residential Area, Tan Thuan Ward, Ho Chi Minh City, Vietnam
- Vielumi is not directed to children below the digital-consent age in their jurisdiction.