AutoAIFlow Privacy Policy
Effective date: July 1, 2026
1. Controller and Contact
This AutoAIFlow Privacy Policy explains how AutoAIFlow processes personal data through the official website at https://studio.autoaiflow.de, the creator workflow, and the TikTok integration. AutoAIFlow is responsible for the processing described in this policy. Privacy and deletion requests may be sent to info@autoaiflow.de. Additional operator information is available in our https://studio.autoaiflow.de/imprint.
2. What This Policy Covers
AutoAIFlow is a web-based KI automation workspace for preparing, reviewing, and transferring original short-form video drafts. This policy covers website visitors, authorized creators, solopreneurs, connected TikTok accounts, support requests, and technical data needed to operate the service.
3. What We Collect
When a TikTok account is connected to AutoAIFlow, the service receives the account display name, avatar, account identifiers, granted scopes, access token, and refresh token from TikTok. Draft scripts, captions, workflow settings, uploaded creator-owned product media, photos, short videos, recorded reference voice samples, voice-over scripts, generated voice-over previews, generated media previews, and generated video files may be processed to create a reviewable output. Some draft data may be stored in the user's browser.
4. Uploaded Media and Generated Content
Users remain responsible for and retain control over the product media and voice material they upload or record, including photos, short videos, product demos, shop footage, reference voice samples, and voice-over scripts. AutoAIFlow processes uploaded media and recorded voice material only to generate, preview, download, or transfer user-approved content. Users can choose to download the generated video for manual posting or send an approved video to TikTok draft after review.
5. Website and Service Usage Data
We may process technical information such as browser type, request time, visited pages, error logs, and security events to operate the website, diagnose problems, prevent misuse, and improve reliability. We do not sell personal data.
6. Purposes and Legal Bases
Data is used to authenticate the creator, display the connected account, prepare drafts, generate short-form video previews, create user-approved voice-over previews, provide video downloads, transfer user-approved videos to TikTok draft, maintain security, operate the official website, and respond to support or deletion requests. Processing is based on user consent, performance of the requested service, compliance with legal obligations, and legitimate interests in operating and securing the service.
7. TikTok and Service Providers
TikTok receives data only when a user authorizes the connection or chooses to send an approved video to TikTok draft. Hosting, infrastructure, and email providers may process technical data on our behalf. Processing by TikTok is governed by TikTok's own privacy terms and may involve international data transfers.
8. Data Security
API secrets are stored only in server-side environment variables. OAuth tokens are tied to the user's secure browser session and are not exposed in browser code. Video transfers use encrypted HTTPS connections.
9. Data Retention and Deletion
OAuth connection data is retained only while needed to provide the connection, until the user disconnects, revokes access, or requests deletion. Browser drafts, local recordings, and local voice-over previews remain on the user's device until browser storage is cleared or the user deletes them. Temporary uploaded media, recorded voice samples, generated voice-over files, and generated video bytes are retained only as long as needed to create the requested preview, download, or TikTok draft transfer, unless the user explicitly saves them. Users may request deletion of uploaded media, voice material, generated files, and connection data at info@autoaiflow.de.
10. User Rights
Depending on applicable law, users may request access, correction, deletion, restriction, portability, or object to processing. Consent may be withdrawn at any time. Users may also lodge a complaint with their competent data protection supervisory authority.
11. Disconnecting TikTok
Users may disconnect inside AutoAIFlow or revoke the app in TikTok account settings. For privacy questions or deletion requests, contact info@autoaiflow.de.
12. Changes to This Policy
We may update this Privacy Policy when the service, legal requirements, or TikTok integration changes. The current version is always available at https://studio.autoaiflow.de/privacy-policy.