Privacy Policy

Capitalista Etico is a private publishing app operated by Carlos Ulloque for his own TikTok account. It is not available to other account holders. This policy covers the app and its TikTok connection.

The separate ulloque.com privacy policy covers the personal website. Reading this page does not connect a TikTok account.

When the account holder authorizes the app through TikTok Login Kit, the app receives an account identifier (open_id), basic profile information (display name and avatar), an access token, and a refresh token. These tokens authorize the connection; they are not the TikTok password.

The requested permissions are user.info.basic, video.publish, and video.upload. The app also handles the videos and accompanying publication details selected by the account holder for upload to TikTok.

The app uses this information exclusively to identify the authorized account, maintain its authorized connection, and upload or publish the content selected by its owner. Publishing requests originate from the single server controlled by the account holder. The data is not used for advertising, audience profiling, or unrelated purposes.

Account data and tokens are stored on the private server controlled by the account holder. Tokens and retained profile data are encrypted at rest. The encryption key is stored separately as an encrypted server credential and is made available only to the authorized app process and server administrator.

Tokens are not stored in plaintext .env files or in the publicly served website directory. The token store is designated for exclusion from backups and must remain excluded from server backups and snapshots.

Starting a TikTok connection uses an essential, short-lived cookie to match the authorization response to the browser that started it. It is restricted to this app's routes, sent only over HTTPS, and cannot be read by browser scripts. Authorization sessions expire after ten minutes. The cookie is cleared when the result is viewed. It is not used for analytics or advertising, and contains no TikTok access or refresh tokens.

Tokens and any retained account identifier or basic profile information will be kept only while the connection is active. They will be deleted within seven days after access is revoked, the service is terminated, or a deletion request is received. Any copies of the retained identifier or profile information will be covered by the same deletion deadline.

The app does not sell, share, or transfer account data or tokens to unrelated third parties. It communicates with TikTok only as needed to authorize the connection and upload or publish the account holder's selected content. This necessarily sends authorization credentials and publication data to TikTok.

TikTok is a separate third-party platform. Its processing of account information and published content is governed by its own Privacy Policy.

Access can be revoked in TikTok settings by finding the connected app permissions, selecting Capitalista Etico, and removing its access. See TikTok’s instructions for removing connected apps.

To request deletion, email info@ulloque.com with the subject “Capitalista Etico data deletion.” Do not include passwords or tokens. Revoking access stops the app’s authorization; deletion of its stored data follows the seven-day deadline above. Deleting app data does not remove videos already published on TikTok; those must be managed in TikTok.

Contact Carlos Ulloque at info@ulloque.com for questions about this app or its handling of account data. Changes to this policy will be published on this page with an updated date.

Related document: Capitalista Etico Terms of Service.