Halo Admit Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Halo Admit ("we", "us", or "our") collects, uses, stores, and deletes information when you connect a TikTok, Instagram, or YouTube account to our application and use it to publish or schedule your own video content. This policy describes the data handling of this specific application. It is not a general company policy.

1. What the app is

Halo Admit is a tool that lets an account owner connect their own TikTok account and then schedule and publish their own video content to that account. You remain the owner and author of everything you publish. The app acts only on your instruction, and only on the account you personally connect and authorize.

2. Data we access through TikTok

When you choose to connect your TikTok account, you are redirected to TikTok to review and approve the access you grant. With your authorization, we access the following through TikTok's official OAuth flow and APIs:

• Basic profile information: your TikTok open ID (open_id), your display name or nickname, and your avatar image URL. We use this to confirm which account is connected and to show it back to you before you publish.
• Content posting permission: the ability to upload and publish video content to your TikTok account, or to send a video to your TikTok inbox as a draft, on your behalf and at your request.
• Creator posting settings: the privacy options, interaction settings (comment, Duet, Stitch), and posting limits that TikTok reports for your account, so the app only offers choices your account actually allows.
• OAuth tokens: the access token and refresh token that TikTok issues so the app can carry out the actions you authorize. The refresh token is used only to renew an expired access token so you do not have to reconnect for every action.

We do not request or access your private messages, your followers, your analytics beyond the creator posting settings above, or any data belonging to other TikTok users.

3. How we use your data

We use the data described above solely to operate the features you asked for:

• To display the connected account so you know where you are posting.
• To publish or schedule the video content that you yourself create, configure, and approve before it is sent.
• To read your account's allowed privacy and interaction options so the app presents valid choices.
• To keep your session valid by refreshing an expired access token.

We do not use your TikTok data for advertising, profiling, training machine learning models, resale, or any purpose beyond the publishing features you directly use. We do not post anything without an explicit action from you.

4. Storage and security

Access and refresh tokens are held in encrypted, access-controlled server-side storage and are used only to carry out actions you initiate. Tokens are never exposed to your browser in a readable form and are never sold, rented, or shared with any third party. We restrict internal access to the minimum needed to operate the service, and we transmit all data to and from TikTok over encrypted connections (HTTPS).

5. Data retention and deletion

We retain your tokens and connected-account information only for as long as your account remains connected and the service needs them to function.

• Disconnecting: you can disconnect your TikTok account from the app at any time. Disconnecting deletes the stored access and refresh tokens for that account from our systems.
• Full data deletion: to request deletion of all data we hold that is associated with you, email us at privacy@haloadmit.com. We will process the request and confirm once your data has been deleted.
• Revoking on TikTok: you may also revoke this app's access directly from your TikTok account settings at any time, which immediately invalidates the tokens we hold.

6. Sharing with third parties

We do not sell, rent, or trade your TikTok data. We do not share it with third parties for their own purposes. The only external party your data is exchanged with is TikTok itself, through its official APIs, to carry out the actions you request.

7. TikTok compliance

We access TikTok data only through TikTok's official APIs and only with the scopes you approve. We comply with the TikTok Developer Terms of Service and the TikTok Community Guidelines. Our use of information received from TikTok, and any actions taken on your behalf, adhere to TikTok's developer and platform policies. Your use of TikTok remains governed by TikTok's own terms and privacy policy.

8. YouTube API Services

When you connect a YouTube channel, Halo Admit uses YouTube API Services to publish the video content you create to a YouTube channel you own and control. By using this feature you also agree to be bound by the YouTube Terms of Service, and any Google user data we access is handled in accordance with the Google Privacy Policy.

Through Google's official OAuth flow, and only with the scopes you approve, we access:

• Your channel identity (read-only youtube.readonly scope): your channel ID, title, and thumbnail, used only to confirm which of your channels a connection belongs to and to display it back to you, and to read the processing status of your own uploads.
• Video upload (youtube.upload scope): the ability to upload the video content you create to your connected channel, on your behalf and at your request.
• OAuth tokens: the access and refresh tokens Google issues, stored encrypted server-side, used only to carry out the uploads you authorize.

We do not access, store, or share any other YouTube or Google data, and we do not use YouTube data for advertising, profiling, resale, or training machine-learning models. We upload only content you create, configure, and approve.

Revoking access: you can revoke Halo Admit's access to your Google account at any time through the Google security settings page at https://myaccount.google.com/permissions, which immediately invalidates the tokens we hold. You may also disconnect the channel in the app, and you can request full deletion of associated data as described in section 5 above.

9. Instagram

When you connect an Instagram professional account, we use Instagram's official Graph API (Instagram Login) only to confirm the connected account and to publish the video content you create to that account. We access only your basic professional-account profile and content-publishing permission, and no data belonging to other users. The storage, retention, deletion, and no-resale commitments in sections 3–6 apply equally to Instagram data.

10. Children

The app is intended for account owners who are old enough to hold a TikTok account under TikTok's rules and applicable law. It is not directed to children below that age, and we do not knowingly collect their data.

11. Changes to this policy

We may update this Privacy Policy as the app evolves or as TikTok's requirements change. When we do, we will revise the "Last updated" date above. Material changes will be reflected on this page.

12. Contact

If you have questions about this policy or about how your data is handled, contact us at privacy@haloadmit.com.