Security & data handling
Simby Studio is designed so that TikTok credentials and video files do not need to sit on a Simby Studio media server.
Authentication
Sign-in happens on TikTok’s own Login Kit screen. Simby Studio never collects the user’s TikTok password. The OAuth redirect returns to https://simbystudio.com/oauth/callback/, which hands the result back to the desktop companion on the user’s machine.
Where tokens live
Access and refresh tokens are stored on the user’s device in a permission-restricted secrets file. They are not uploaded to a Simby Studio backend, because the product does not operate a content server. The video file is read locally and sent to TikTok’s API for the publish the user requested.
Minimum scopes
| Scope | Limit |
|---|---|
user.info.basic | Destination account identity and posting limits only. Not messages, not followers, not other people’s videos. |
video.upload | The file the user selected in that session. |
video.publish | Only after express consent in the publisher. |
Transport
This website is served over HTTPS. Calls to TikTok and Google APIs use HTTPS. There are no advertising cookies and no third-party analytics pixels on these pages.
Revoke and delete
- TikTok: Settings and privacy → Security and permissions → Apps and services → remove Simby Studio.
- YouTube / Google: myaccount.google.com/permissions.
- Deletion mail: support@simbystudio.com with subject Data deletion request and the connected username. We complete requests within 30 days.
The full legal text is the Privacy Policy.