ITWorks Privacy Policy

Effective date: June 26, 2026 · Last updated: July 2, 2026

This Privacy Policy describes how the JARVIS TikTok integration ("the App"), operated by ITWorks Technology ("ITWorks", "we", "us", "our"), accesses and handles data obtained through the TikTok API. The App is an internal marketing-operations tool that publishes ITWorks' own short-form videos to one TikTok account that we own and control. We do not operate a multi-tenant service for third-party creators and we do not collect data about other TikTok users or viewers.

1. Who we are

ITWorks Technology is an IT retail and services business based in Lebanon, operating itworkslb.net. JARVIS is our internal marketing-operations dashboard. The App is the TikTok component of JARVIS, used by our authorized operator to review and publish ITWorks-branded videos to the official ITWorks TikTok account.

2. Scope of this policy

This policy covers data the App obtains through the TikTok Login Kit and Content Posting API. It applies to the single TikTok account connected by ITWorks (the account owner). It does not apply to people who view or interact with our content on TikTok — their data is governed by TikTok's own Privacy Policy.

3. TikTok data we access, and why

When the ITWorks operator connects our TikTok account, we request only the scopes needed to display the account and publish our own content:

TikTok scope	Data accessed	Why we use it
`user.info.basic`	Account open ID, display name, avatar image URL	To show the connected account (name + avatar) in a confirmation screen before publishing, so the operator posts to the right profile.
`user.info.stats`	Our own follower count, likes, and aggregate stats	To display our account's own performance metrics inside the private JARVIS dashboard.
`video.publish` / `video.upload`	The video file and caption we upload, and the resulting publish status	To post ITWorks-created videos to our own TikTok profile, or send them to our TikTok inbox as drafts.

We access only data belonging to the connected ITWorks account. We do not access, scrape, or store data about any other TikTok account, follower, commenter, or viewer.

4. Authentication tokens

To call the TikTok API on our own behalf, we store the OAuth credentials TikTok issues to us: an access token, a refresh token, the account's open ID, the granted scopes, and their expiry times. These are stored in our private server database with restricted access and are never exposed to any third party. They are used solely to authenticate API calls for our own account.

5. How we use the data

Display the connected account (name + avatar) in a pre-publish confirmation step.
Publish ITWorks-created videos, with the privacy level the operator selects, to our own TikTok profile.
Show our own account's metrics within the private JARVIS dashboard.

We do not use TikTok data for advertising profiling of others, for building or enriching profiles of TikTok users, for sale, or for any purpose unrelated to managing our own account.

6. How we share data

We do not sell, rent, or trade TikTok data. We do not share TikTok user data or our API tokens with any third party. The App's reviewing and publishing logic runs on our own servers. The video content we publish is created by ITWorks; any AI tools we use to create that content never receive TikTok account data or tokens. We may disclose information only where required by applicable law.

7. Data retention and deletion

We retain the connected account's tokens and basic profile data only while the account remains connected to the App.
The operator can revoke our access at any time directly within the TikTok app (Settings and privacy → Security & permissions → Manage app permissions), or by disconnecting the account inside JARVIS. On revocation or disconnect, we delete the stored tokens and associated profile data from our systems.
Account metrics fetched from TikTok are retained for a maximum of 30 days, after which they are deleted or overwritten by a fresh pull.
To request deletion of any data the App holds, contact us using the details in Section 11; we will action verified requests within 30 days.

8. Data security

We protect data with HTTPS/TLS in transit, restricted server access, authentication on all administrative endpoints, and storage of credentials in a private database not exposed to the public internet. No method of transmission or storage is completely secure, but we take reasonable measures appropriate to the sensitivity of the data.

9. Children's privacy

The App is an internal business tool and is not directed to children. We do not knowingly collect personal information from anyone under 16.

10. Compliance and changes

We handle TikTok data in accordance with the TikTok Developer Terms of Service, the TikTok Developer Data Sharing Agreement, and applicable data-protection laws. We may update this policy from time to time; the effective date above reflects the latest version, and material changes will be posted on this page.

11. Contact

For privacy questions, data-access, or deletion requests:
ITWorks Technology, Beirut, Lebanon
Email: [email protected]
WhatsApp: +961 70 353 295
Website: itworkslb.net