Hafsa Social Privacy Policy

Last updated: September 1, 2026

1. Controller

Ömer Hakan Ölçer – Hafsa Software, Fritz-Reuter-Str. 19, 21629 Neu Wulmstorf, Germany. Contact: [email protected].

2. Service and purpose

Hafsa Social is a self-hosted workspace used by authorized creators to prepare, schedule and publish their own original or properly licensed social-media content. It is not an advertising network and does not sell personal data.

3. TikTok data

When a creator connects TikTok through Login Kit, Hafsa Social may receive the creator's open identifier, display name, avatar, profile information, account statistics and public video list according to the permissions shown on TikTok's authorization screen. These data are used only to identify the selected profile, display connection and reporting information, and complete creator-requested publishing.

For Content Posting API operations, the service transfers the creator's selected video, caption, privacy and related publishing settings to TikTok. Hafsa Social does not download or republish TikTok content.

4. Legal basis and creator control

Processing is performed to provide the service explicitly requested by the authorized creator and, where applicable, on the basis of consent. A TikTok connection can be disconnected from the publishing workspace or revoked through TikTok account settings at any time.

5. Storage and security

The public site, application and approved media storage use Cloudflare infrastructure. OAuth credentials are stored server-side and are not exposed publicly. Access to the publishing dashboard is restricted to authorized persons. Technical logs are retained only as needed for security, delivery reconciliation and legal obligations.

6. Sharing

Data are shared only with the service providers required to operate Hafsa Social and with the social platform selected by the creator for an authorized publishing request. We do not sell, rent or use connected-account data for targeted advertising.

7. Deletion and requests

Creators may disconnect their profile at any time. Requests for access, correction or deletion of local connection and publishing metadata can be sent to [email protected]. Verified requests are generally handled within 30 days, subject to mandatory legal and security retention.

8. Platform terms

Use of TikTok features is also subject to TikTok's own terms and privacy policy. Hafsa Social requests only the permissions required for the functions described on this website and on the authorization screen.