progpost.This is a translation for convenience. The French version prevails.
1. Controller and scope
ProgPost is published by Champsdual, Hougaillard, 47170 Réaup-Lisse, France, the data controller. For any personal data question: champsdual@gmail.com.
This policy covers the progpost.com website and the ProgPost online service.
2. Data processed and why
| Data | Use | Legal basis |
|---|---|---|
| TikTok identifier (open_id), display name, granted permissions, access and refresh tokens | Logging you in and calling the TikTok API on your behalf. | Performance of the contract. |
| Imported videos and technical details (duration, format, resolution), internal names, captions, hashtags, dates and posting settings | Preparing, scheduling and publishing the posts you request, and tracking their status. | Performance of the contract. |
| Record of your approvals: approved content and settings, date, accepted terms version | Proving your consent before each post and responding to TikTok's checks. | Legitimate interest. |
| Hash of your API key, creation and usage dates | Letting your tools prepare drafts. | Performance of the contract. |
| Technical logs, including IP address and timestamp | Operating and securing the service, limiting abuse. | Legitimate interest. |
ProgPost does not sell your data, does not use it for advertising and includes no audience measurement tool. ProgPost sends nothing to any AI service: only the tools you personally give an API key to can access your drafts.
3. Recipients and transfers
TikTok: at your request, the video, its caption and its settings are sent to TikTok, a separate controller applying its own policy. This processing may take place outside the European Economic Area, under TikTok's rules.
Hosting: [hosting provider's name, address and country]. Backups: [provider and country].
These providers act on Champsdual's instructions. No other recipient receives your data, except where required by law.
4. Retention periods
- Published videos: erased 24 hours after TikTok confirms publication.
- Drafts and failed posts: erased with their video after 30 days without changes. A warning is displayed beforehand.
- TikTok tokens: erased as soon as you remove the authorization from ProgPost or TikTok.
- Unused account without active authorization: deleted after 90 days.
- Account, posts and approval records: kept until you delete your account, then erased.
- Backups: erased data leaves the backups within 30 days.
- Technical logs: [period to complete].
A video already published on TikTok is managed in TikTok: deleting it from ProgPost does not remove it from your TikTok account.
5. Security and cookies
Traffic is encrypted over HTTPS. TikTok tokens are encrypted on the server, and API keys and sessions are stored only as hashes. Your data is kept separate from other users' data.
ProgPost uses two strictly necessary cookies: a session cookie valid for 30 days, and a temporary 10-minute cookie securing the TikTok login. No advertising or audience measurement cookie is set.
6. Your rights
You may request access, rectification, erasure, restriction or portability of your data, and object to certain processing. From "Mon compte" (My account), you can directly export your data and delete your account. For anything else, write to champsdual@gmail.com.
You can also remove ProgPost's authorization in TikTok. If you believe your rights are not respected, you may complain to the CNIL, the French data protection authority.
7. Contact and changes to this policy
For any question: champsdual@gmail.com or Champsdual, Hougaillard, 47170 Réaup-Lisse, France. This policy will be updated if the service or the processing changes.