Privacy Policy
Last updated: August 4, 2026
This Privacy Policy explains how Infinique collects, uses, shares, and protects personal information when you use our service at infinique.org. It applies to everyone who visits the website or holds an account.
1. Who we are
Infinique is a software company registered in the United States (infinique.org). For the purposes of the EU and UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and other applicable data protection laws, Infinique is the data controllerfor the personal information described here. References to "we," "us," and "our" mean Infinique.
Questions, requests, or complaints: hello@infinique.org. See our contact page for other ways to reach us.
2. Information we collect
2.1 Information you give us
- Account information — your email address and a hashed password when you register.
- Content you upload — images you choose to publish through the service.
- Captions and post settings — the caption text you write or approve, the privacy level you select, comment settings, and any commercial content disclosure.
- Correspondence — messages you send us by email.
2.2 Information we receive from TikTok
When you connect a TikTok account through TikTok's OAuth 2.0 flow, we receive:
- Profile data — your TikTok open ID, display name, and avatar image URL.
- Access and refresh tokens — credentials that let us publish on your behalf when you ask us to. We never receive or store your TikTok password.
- Creator settings — your available privacy options and interaction settings, queried each time you open the posting screen. These are used to build the posting form and are not stored in our database.
2.3 Information generated by using the service
- Post records — the TikTok publish ID, publishing status, resulting post ID, timestamps, and any failure reason returned by TikTok.
- AI caption variations — suggestions produced at your request.
- Server logs — standard technical records such as IP address, browser type, and timestamps, retained for security and debugging.
We do not collect biometric data, precise geolocation, or special categories of personal data, and we do not build advertising profiles.
3. How we use your information, and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and authenticate your account | Performance of a contract |
| Publish content to TikTok when you confirm a post | Performance of a contract |
| Generate AI caption suggestions at your request | Performance of a contract |
| Maintain your TikTok connection by refreshing tokens | Performance of a contract |
| Show your post history and status | Performance of a contract |
| Keep the service secure and prevent abuse | Legitimate interests |
| Respond to support and legal requests | Legitimate interests / legal obligation |
We do not sell or rent personal data, and we do not share it with third parties for advertising or cross-context behavioural marketing. Under the CCPA/CPRA, we have not sold or shared personal information in the preceding twelve months.
4. TikTok integration
Infinique uses TikTok's official Login Kit and Content Posting API. By connecting your account you authorise us to:
- read your basic profile information (open ID, display name, avatar);
- query your creator settings (privacy options, interaction preferences);
- publish photo content to your TikTok account, only on your explicit per-post confirmation; and
- upload content to your TikTok inbox as a draft when you choose Send as Draft.
You can revoke this access at any time by disconnecting the account inside Infinique, which revokes the token with TikTok directly, or from the TikTok app under Settings and privacy → Security & permissions → Manage app permissions.
Your use of TikTok remains governed by TikTok's Privacy Policy.
5. Service providers we share data with
We share personal data only with the processors needed to run the service:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, authentication, file storage | Account data, tokens, post records, uploaded images |
| Vercel | Application hosting | Request logs, IP addresses |
| Google (Gemini API) | AI caption rewriting | Only the caption text you submit — no account data, tokens, or images |
| TikTok | Publishing your content | Captions, images, and post settings you confirm |
We may also disclose information where required by law, to enforce our Terms of Service, or to protect the rights and safety of our users. If Infinique is involved in a merger or acquisition, we will give notice before personal data is transferred.
6. International transfers
We are based in the United States and our providers may process data in the US and other countries. Where personal data is transferred out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
7. Security
Data is held in encrypted databases hosted by Supabase. OAuth tokens are encrypted at rest, all traffic uses TLS, and access to production systems is restricted to those who need it. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant supervisory authority as required by law.
8. Retention and deletion
We keep personal data only as long as needed:
- Account data and TikTok tokens — until you delete your account or disconnect the TikTok account.
- Post records and uploaded images — until you delete them or close your account.
- Server logs — up to 90 days.
On account deletion, personal data, tokens, post records, and uploaded media are permanently removed within 30 days, except where we must retain something to meet a legal obligation. Content already published to TikTok is unaffected and remains under your control on TikTok.
To delete your account, email hello@infinique.org.
9. Your rights
Depending on where you live, you may have the right to:
- Access — obtain a copy of the personal data we hold about you;
- Rectification — correct inaccurate or incomplete data;
- Erasure — ask us to delete your personal data;
- Portability — receive your data in a machine-readable format;
- Restriction and objection — limit or object to processing based on legitimate interests;
- Withdraw consent — where processing relies on consent, withdraw it at any time;
- Non-discrimination — exercise these rights without receiving worse service.
Email hello@infinique.org to exercise any of these. We respond within 30 days and may need to verify your identity first. There is no charge unless a request is manifestly unfounded or excessive.
If you are in the EEA or UK and believe we have handled your data improperly, you may complain to your local supervisory authority. We would appreciate the chance to address it first.
10. Cookies
We use strictly necessary cookies only, to keep you signed in and maintain your session. We do not use advertising, tracking, or third-party analytics cookies, so no cookie consent banner is required. Blocking essential cookies will prevent you from signing in.
11. Children's privacy
Infinique is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Automated decision-making
We do not carry out automated decision-making that produces legal or similarly significant effects. AI caption suggestions are exactly that — suggestions you can edit, replace, or ignore.
13. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top always reflects the current version, and material changes will be communicated by email or in-app notice before they take effect. Continuing to use the service after that constitutes acceptance.
14. Contact
Infinique
Data controller for infinique.org
Company website: infinique.org
Email: hello@infinique.org