Privacy policy

Last updated: 21 October 2026

1. Who we are

I-RENT ENTERPRISES S.R.L., company ID 51276958, Bucharest, Romania, trading as i-vory Studio, is the controller of the personal data processed through i-vory Post. Data protection contact: contact@i-vory.studio.

2. What we process

• Your TikTok identifier (the open_id that TikTok gives to this app) and the access tokens TikTok issues when you log in. Tokens are stored encrypted.
• Your name and avatar are fetched from TikTok each time you open the posting page, to show which account you are posting to. We do not store them.
• The photos you add to a post, only for as long as needed to publish them.
• A reference to each post you send (TikTok's post identifier and the names of its temporary photo files), for two days, so the page can show you the progress.
• Two cookies, both strictly necessary: a session cookie (sid, 7 days) that keeps you logged in, and a short login-check cookie (st, 10 minutes) that protects the login against forgery. We use no analytics, no advertising and no tracking cookies.

We do not read your videos, messages or followers, and we cannot: the app only requests two permissions, user.info.basic and video.publish.

3. Why, and on what legal basis

To let you publish the posts you create, which is the service you ask for (performance of a contract, GDPR art. 6(1)(b)), and to keep the service secure and prevent abuse (legitimate interest, art. 6(1)(f)). The connection to your TikTok account is made only after you approve it on TikTok's own authorization page.

4. How long we keep it

• Photos: deleted as soon as TikTok has finished publishing the post, and automatically 3 hours after upload at the latest.
• Post references: 2 days.
• Session: 7 days, or until you log out.
• TikTok access tokens: until you delete your data, and in any case no longer than 365 days after you last logged in.

5. Deleting your data

Inside the app, use Delete my data. It revokes this app's access on TikTok and deletes your tokens, session and any photos that are still stored, immediately. You can also write to contact@i-vory.studio, or remove the app yourself in TikTok under Settings and privacy, Security and permissions, Apps and services.

6. Who else receives data

We do not sell your data. Cloudflare, Inc. hosts the service (Workers and KV storage) on our behalf. TikTok receives the photos and the post settings you choose, because publishing them to your account is the purpose of the service. Your use of TikTok is governed by TikTok's own terms and privacy policy.

7. Your rights

Under Regulation (EU) 2016/679 you have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time. You can complain to ANSPDCP, the Romanian data protection authority (www.dataprotection.ro). To use any of these rights, write to contact@i-vory.studio.

8. Changes

If we change this policy, the date at the top changes too. Changes that affect what we collect will be announced in the app before they take effect.