Privacy Policy

Last updated: June 15, 2026

This Privacy Policy explains how Apex Content Studio, operated by Andrea Galliazzo, P'le Tripoli, 20146 Milano, Italy ("Apex", "we", "us", or "our"), collects, uses, shares, and protects information when an authorized user accesses the website, connects a TikTok account, reviews content, and submits approved content as a TikTok draft/inbox upload.

Summary of key points

Apex Content Studio is an authorized creator workflow. We collect only information needed to operate the website, connect TikTok, display the connected account, support manual review, and submit approved draft/inbox uploads. We do not sell personal data, do not use marketing cookies, and do not enable automatic Direct Post publishing.

1. Information we collect

We collect information you provide or authorize through the service, including review text, captions, post titles, media URLs, selected destination settings, approval status, and support communications. When you connect TikTok, we may receive basic TikTok account information such as open ID, display name, and avatar URL through TikTok Login Kit.

The service may also process OAuth access tokens, refresh tokens, OAuth state values, and session identifiers provided by or related to TikTok so the requested integration can function. These tokens are used to operate the TikTok connection and are not shown in the user interface.

2. Information collected automatically

We may collect limited technical information such as IP address, browser type, device information, pages visited, request timestamps, error logs, deployment logs, and cookie/session identifiers. This information is used for security, debugging, service operation, performance monitoring, and abuse prevention.

3. How we use information

We use information to provide and operate Apex Content Studio, identify the connected TikTok account, display the account in the review screen, prepare content previews, process user edits, record manual approval, submit approved draft/inbox uploads through TikTok's Content Posting API, troubleshoot errors, secure the service, respond to support requests, and comply with legal or platform obligations.

4. Legal bases for processing

Where the GDPR, UK GDPR, or similar privacy laws apply, we rely on appropriate legal bases, including performance of a service or pre-contractual steps, legitimate interests in operating and securing an authorized content workflow, consent where required for TikTok authorization or similar actions, and compliance with legal obligations. You may withdraw consent where processing is based on consent, without affecting processing that occurred before withdrawal.

5. How we share information

We share information with TikTok only as needed to provide the TikTok Login Kit and Content Posting API integration. This may include authorization data, connected account identifiers, approved content, captions, media URLs, and related upload metadata. We may also share information with infrastructure and hosting providers that help operate the service, or when required by law, security needs, or platform compliance. We do not sell personal information.

Current service providers include Vercel for hosting, deployment, infrastructure, and runtime logs, and TikTok for account authorization and content upload functionality. At this stage, Apex Content Studio does not use a persistent application database, email marketing provider, analytics provider, or advertising cookies.

6. Cookies and session data

Apex Content Studio uses cookies or similar session storage to maintain login state, OAuth state, security checks, and connected-account workflow continuity. These cookies are necessary for the service to operate and are not used for third-party advertising, behavioral profiling, or marketing analytics.

7. Data retention

We retain information only for as long as reasonably necessary to provide the connected-account workflow, maintain security, troubleshoot upload issues, comply with legal obligations, and satisfy TikTok platform requirements. OAuth/session data is retained only while needed for the connected account workflow. Logs may be retained for security, debugging, abuse prevention, and operational reliability, and are deleted or anonymized when no longer needed.

8. User choices and control

You can revoke TikTok access through TikTok account settings where available. You may contact privacy@apexdex.app to request access, correction, deletion, or disconnection assistance, subject to identity verification, legal requirements, and operational limitations.

9. Privacy rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, objection to processing, or withdrawal of consent. If you are in the European Economic Area, the United Kingdom, or Switzerland, you may also have the right to lodge a complaint with your local data protection authority. We will respond to requests in accordance with applicable law.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information handled by the service. No internet service can be guaranteed to be completely secure, and users should avoid submitting credentials or sensitive personal data in content fields.

11. International processing

Information may be processed in Italy, the European Economic Area, the United States, and other locations where Apex, Vercel, TikTok, or related infrastructure operate. Where required, we rely on appropriate transfer mechanisms, safeguards, or provider commitments designed to protect personal information in accordance with applicable law.

12. Do Not Track

Some browsers offer a Do Not Track signal. Because there is no uniform industry standard for responding to these signals, Apex Content Studio does not currently respond to Do Not Track signals. The service does not use third-party advertising cookies.

13. Children's privacy

Apex Content Studio is intended for authorized users managing Apex content workflows and is not directed to children. We do not knowingly collect personal information from children through this service.

14. Changes to this policy

We may update this Privacy Policy as the service changes or as legal, operational, or platform requirements evolve. The updated date above indicates the latest revision.

15. Contact

For privacy questions or data requests, contact privacy@apexdex.app. For general support, contact support@apexdex.app.