DIVELUX Post — Privacy Policy
Last updated: October 24, 2026
This policy explains what information DIVELUX Post collects, how we use it and how you can delete it. DIVELUX Post is a web app at post.diveluxsaunahat.com that lets TikTok creators upload their own video and either post it to their own TikTok account or send it to their own TikTok inbox to finish editing and posting in the TikTok app. It is operated by DIVELUX INC, Irvine, California, USA ("DIVELUX", "we", "us"). Contact: diveluxstore@gmail.com.
This policy covers only DIVELUX Post. The DIVELUX online store (diveluxsaunahat.com) has its own privacy policy.
1. Information we receive from TikTok
When you choose "Continue with TikTok", you sign in on TikTok's own page. We never see your TikTok password. With your permission, TikTok gives us:
| Data | TikTok permission | Why we need it | Stored? |
|---|---|---|---|
| Your TikTok account ID for this app (open_id) | user.info.basic | To keep your connection and data separate from other users | Yes, while you are connected |
| Display name and avatar | user.info.basic | To show which TikTok account you are signed in with | No — fetched when the page is shown |
| Access token and refresh token | — | To post the videos you choose on your behalf | Yes, encrypted, while you are connected |
| Creator info: nickname, username, avatar, the privacy options and comment/duet/stitch settings of your account, maximum video length | video.publish | To show who you are posting as and only the options your account allows | No — requested fresh before each post. We keep your username only next to a post record, to link to the posted video |
| Permission to post a video directly to your profile | video.publish | To publish the video you uploaded when you choose "Post directly to TikTok" and press Post | — |
| Permission to send a video to your TikTok inbox | video.upload | To send the video you uploaded to your TikTok inbox when you choose "Send to TikTok inbox"; you then finish editing and post it yourself in the TikTok app | — |
| Publishing status and the ID of the posted video | video.publish, video.upload | To show you whether your post succeeded or your video reached your TikTok inbox | Yes, in your post history (see section 4) |
DIVELUX Post asks TikTok only for these three permissions: user.info.basic, video.upload and video.publish.
We do not request or read your followers, likes, existing videos, messages, contacts, phone number or email address.
2. Information you give us
- Video files you upload. A file is kept only until it is sent to TikTok. It is deleted right after a successful upload to TikTok. A file that is never posted is deleted automatically within 24 hours, or immediately when you press "Remove" or disconnect.
- Caption and post settings (who can view, comment/duet/stitch, content disclosure, AI-generated label) when you post directly. They are sent to TikTok together with your video. We keep only the selected privacy setting in your post history; we do not keep your caption. When you send a video to your TikTok inbox, only the video file is sent; you add the caption and settings in the TikTok app, and we never see them.
- Emails you send to diveluxstore@gmail.com, which we use only to answer you.
3. Technical information
- Cookies. We use one essential cookie that keeps you signed in and protects forms against forgery. It expires after 30 days or when you sign out. We do not use analytics, advertising or tracking cookies, and there are no third-party scripts on DIVELUX Post.
- Server logs. Our web server records IP address, time, requested page and browser type to keep the service secure and working. These logs are deleted after 14 days. Our application log records events such as "upload completed" with a shortened one-way code instead of your TikTok ID, and never records tokens or captions.
4. How long we keep data
| Data | Kept |
|---|---|
| Uploaded video file | Until sent to TikTok; unposted files no longer than 24 hours |
| Access and refresh tokens, TikTok account ID | Until you disconnect, until you remove access in TikTok, or until the token expires (at most 365 days without use) |
| Post history (date, posting mode — direct or inbox, privacy setting, status, TikTok username, video ID) | 30 days |
| Server logs | 14 days |
When you disconnect, everything in the first three rows is deleted immediately.
5. How we use and share information
We use the information only to provide DIVELUX Post: sign you in, show your account, upload and publish the video you choose, and show its status.
- We share your video, caption and settings only with TikTok, and only when you press Post or Send to TikTok inbox.
- Our servers are run by a hosting provider in the United States that stores the data for us and may not use it for anything else.
- We do not sell or rent your information, do not use it for advertising or profiling, and do not use your videos or TikTok data to train AI models.
- We may disclose information if the law requires it.
6. Disconnect and delete your data
- In DIVELUX Post: open Account → Disconnect and delete my data. We revoke our access token with TikTok and permanently delete your tokens, uploaded files and post history.
- In TikTok: Settings and privacy → Security and permissions → Apps and services permissions → remove DIVELUX Post. After that our token stops working; we delete your stored data the next time we detect it, and no later than the token's expiry.
- By email: write to diveluxstore@gmail.com from any address and tell us your TikTok username; we will delete your data within 30 days.
Videos you have already posted are on TikTok and are controlled by you in the TikTok app; deleting your DIVELUX Post data does not delete them.
7. Security
All traffic uses HTTPS. Tokens are encrypted at rest with a key stored separately with restricted file permissions, and access to the server is limited to DIVELUX staff who maintain it. No method of storage or transmission is completely secure, but we keep the amount of data we store small to reduce risk.
8. Children
DIVELUX Post is not intended for children under 13, and you must meet TikTok's own minimum age to use TikTok. We do not knowingly collect information from children under 13. If you believe a child has used the service, contact us and we will delete the data.
9. Your rights
Depending on where you live (for example, California under the CCPA/CPRA, or the EU/UK under the GDPR), you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it and to not be discriminated against for using these rights. We do not sell or share personal information for cross-context behavioral advertising. To use any of these rights, email diveluxstore@gmail.com. We will answer within 30 days.
10. Changes
If we change this policy, we will update the date at the top of this page. If a change materially affects how we use data you already gave us, we will ask for your consent before applying it to that data.
11. Contact
DIVELUX INC, Irvine, California, USA — diveluxstore@gmail.com