Privacy Policy
Bloccraft Co., Ltd. ("we", "us", "our") operates the BlockCraft web application available at https://block-crafts.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have, including information obtained through TikTok for Developers products (Login Kit and Content Posting API).
1. Information We Collect
CategoryDetailsSourceTikTok account informationOpen ID, display name, avatar image (scope: user.info.basic)TikTok, with your authorizationTikTok access credentialsOAuth access token and refresh tokenTikTok, with your authorizationPosting settings and statusCreator info returned by TikTok (e.g., available privacy levels, max video duration), post ID, publishing statusTikTok Content Posting API (scope: video.publish)Content you provideVideo files, captions, hashtags, and the privacy / interaction settings you selectYouTechnical dataIP address, browser type, access logs, cookies necessary for login sessionsAutomatically
We do not collect your TikTok password, and we do not access your followers list, direct messages, or videos you have not chosen to publish through the Service.
2. How We Use Information
To authenticate you and display your TikTok account (name and avatar) in the Service.
To upload and publish videos to your TikTok account only when you explicitly instruct us to, using the caption and settings you choose.
To show you the status of your posts.
To maintain security, prevent abuse, and troubleshoot the Service.
To comply with legal obligations.
We do not sell your personal information, use TikTok data for advertising, or use it to build user profiles unrelated to the Service.
3. Sharing of Information
We share information only in the following cases:
TikTok: video files, captions and settings are transmitted to TikTok to publish your content, under TikTok's own Terms of Service and Privacy Policy.
Service providers: cloud hosting (e.g., Amazon Web Services) that stores and processes data on our behalf under confidentiality obligations. Data may be processed on servers located outside Japan (e.g., Singapore or the United States); in such cases we take measures required under the Act on the Protection of Personal Information of Japan ("APPI").
Legal requirements: where required by law or to protect rights, safety, or property.
4. Data Retention
Access and refresh tokens are stored encrypted and deleted when you disconnect your account or delete your BlockCraft account.
Uploaded video files are deleted from our servers within 7 days after successful publication or cancellation.
Account information and post history are retained while your account is active and deleted within 30 days after account deletion.
Access logs are retained for up to 90 days for security purposes.
5. Your Choices and Rights
Disconnect TikTok: you can disconnect at any time from the Service settings, or revoke access in the TikTok app (Settings and privacy > Security > Manage app permissions).
Delete your data: you can request deletion of all your data by contacting us at the address below. We will respond within 30 days.
Access, correction, suspension of use: you may request disclosure, correction, or cessation of use of your personal information as provided under the APPI.
6. Security
We use TLS encryption in transit, encryption of tokens at rest, access controls limited to authorized personnel, and regular review of our systems. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.
7. Cookies
We use only cookies necessary to keep you signed in and to protect against cross-site request forgery. We do not use third-party advertising cookies.
8. Children
The Service is not directed to individuals under 18. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Policy from time to time. Material changes will be announced on this page with an updated effective date.