Privacy Policy

media.thepom.app

Last Updated: April 7, 2026

Effective Date: April 7, 2026

1. Introduction

This Privacy Policy describes how Intelligent Iterations ("the Company," "we," "us," or "our") collects, uses, discloses, and protects personal information through media.thepom.app ("the Service"). We are committed to protecting your privacy and handling your data in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA), the General Data Protection Regulation (GDPR) where applicable, the California Consumer Privacy Act (CCPA) where applicable, and other relevant privacy laws.

By using the Service, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

Contact: Email: privacy@intelligentiterations.com Intelligent Iterations Windsor, Ontario, Canada

2. Information We Collect

2.1 Information You Provide Directly

Data Type	What We Collect	Purpose
TikTok Account Information	Username, display name, avatar URL, and account preferences as returned by TikTok's API upon OAuth authorization	To display your account details in the posting interface and facilitate content publishing to your TikTok account
User Content	Photos, videos, captions, titles, descriptions, and hashtags you upload or enter for TikTok posting	To temporarily store and transmit your content to TikTok for publication
OpenAI API Key	Your personal OpenAI API key, if you choose to use the AI content suggestion feature	To make API calls to OpenAI on your behalf for generating content ideas
Website URL	The URL of your website, if you use the content idea generation feature	To scrape publicly accessible content from your website for generating content suggestions
Communication Data	Any information you provide when contacting us for support	To respond to your inquiries and provide customer support

2.2 Information Collected Automatically

Data Type	What We Collect	Purpose
TikTok OAuth Tokens	Access tokens issued by TikTok during the OAuth flow	To authenticate API calls to TikTok on your behalf during your session
Usage Data	Pages visited, features used, timestamps, and actions taken within the Service	To improve the Service, troubleshoot issues, and understand usage patterns
Device and Browser Data	IP address, browser type and version, operating system, and device type	For security purposes, to prevent abuse, and to ensure compatibility
Log Data	Server logs including request timestamps, error logs, and API response codes	For debugging, security monitoring, and service improvement

2.3 Information We Do NOT Collect

We do not collect payment or financial information (the Service does not process payments directly).
We do not access your TikTok private messages, followers list, or analytics data.
We do not collect personal information from the websites you submit for content idea generation.
We do not use cookies for advertising or tracking purposes. Any cookies used are strictly necessary for Service functionality (such as session management).

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide and maintain the Service: Including authenticating your TikTok account, uploading your content to TikTok, and generating content ideas.
To temporarily store your media: Photos are stored on Google Firebase Storage solely to facilitate the TikTok Content Posting API, which requires content to be accessible via a URL.
To generate content suggestions: Using your OpenAI API key and the content from your website to provide AI-powered content ideas.
To communicate with you: Responding to support requests and providing service-related notices.
To improve the Service: Analyzing usage patterns to enhance features, performance, and user experience.
To ensure security: Detecting and preventing fraud, abuse, and unauthorized access.
To comply with legal obligations: Including responding to lawful requests from authorities and enforcing our Terms of Service.

We will not use your personal information for purposes beyond those identified at the time of collection without obtaining your further consent, except as permitted or required by law.

4. Data Storage and Retention

4.1 Where Your Data Is Stored

Data Type	Storage Location	Provider
User Content (photos/videos)	Google Firebase Storage (US servers)	Google LLC
TikTok OAuth tokens	Browser session memory only; not permanently stored	N/A
OpenAI API keys	Session-only; not permanently stored on our servers	N/A
Usage and log data	Google Firebase / server logs	Google LLC

4.2 Retention Periods

Data Type	Retention Period
Uploaded photos/videos	Deleted immediately after successful TikTok upload; deleted within 24 hours if the upload fails
TikTok OAuth tokens	Retained only for the duration of your active browser session; not permanently stored
OpenAI API keys	Retained only for the duration of your active browser session; not permanently stored
Scraped website content	Not stored; processed in real-time during your session and discarded
Usage and log data	Retained for up to 12 months, then deleted or anonymized

4.3 Deletion

All uploaded media is automatically deleted after successful publication to TikTok. TikTok OAuth tokens and OpenAI API keys exist only in your browser session and are discarded when you close the page. If you have any concerns about residual data, you may contact us at privacy@intelligentiterations.com.

5. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We share your information only in the following limited circumstances:

5.1 Third-Party Service Providers

Provider	Data Shared	Purpose	Their Privacy Policy
TikTok (ByteDance)	User Content, posting metadata, account information as authorized via OAuth	To publish your content to your TikTok account via the Content Posting API	TikTok Privacy Policy
OpenAI	Content from your website (as you direct), prompts generated by the Service	To generate content ideas (using your own API key)	OpenAI Privacy Policy
Google Firebase (Google LLC)	Uploaded photos/videos, authentication tokens, usage logs	Cloud storage and infrastructure for the Service	Google Privacy Policy

5.2 Legal Requirements

We may disclose your personal information if required to do so by law, or if we believe in good faith that such disclosure is necessary to:

Comply with a legal obligation, court order, or lawful request from government authorities.
Protect and defend the rights, property, or safety of the Company, our users, or the public.
Detect, prevent, or address fraud, security issues, or technical problems.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Service before your information is transferred and becomes subject to a different privacy policy.

6. Cross-Border Data Transfers

The Company is based in Windsor, Ontario, Canada. Your personal information may be transferred to and processed in countries other than Canada, including the United States (where Google Firebase and TikTok servers are located). These countries may have data protection laws that differ from those in your jurisdiction.

In accordance with PIPEDA, we ensure that any third-party service providers processing your personal information outside of Canada provide a comparable level of protection through contractual obligations and appropriate security safeguards.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on standard contractual clauses and other approved transfer mechanisms to ensure your data is adequately protected when transferred outside of these regions.

7. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption: Data transmitted between your browser and our servers is encrypted using TLS/SSL.
Access controls: Access to personal information is restricted to authorized personnel on a need-to-know basis.
Token security: TikTok OAuth tokens exist only in your browser session and are never permanently stored on our servers.
API key handling: Your OpenAI API key is transmitted securely and is not permanently stored on our servers.
Regular review: We periodically review and update our security practices.

Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your personal information.

8. Your Privacy Rights

8.1 Rights Under PIPEDA (Canada)

As a Canadian user, you have the right to:

Access: Request access to the personal information we hold about you.
Correction: Request correction of inaccurate or incomplete personal information.
Withdraw consent: Withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions. Withdrawal of consent may affect our ability to provide certain features of the Service.
Complaint: File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

8.2 Rights Under GDPR (EEA, UK, Switzerland)

If you are located in the EEA, UK, or Switzerland, you additionally have the right to:

Erasure: Request deletion of your personal data ("right to be forgotten").
Restriction: Request restriction of processing of your personal data.
Portability: Request a copy of your personal data in a structured, commonly used, and machine-readable format.
Object: Object to the processing of your personal data.
Automated decisions: Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects.
Lodge a complaint: File a complaint with your local data protection supervisory authority.

8.3 Rights Under CCPA/CPRA (California)

If you are a California resident, you have the right to:

Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
Delete: Request deletion of your personal information.
Non-discrimination: Not receive discriminatory treatment for exercising your privacy rights.
Opt-out of sale: We do not sell your personal information. If this changes, we will provide an opt-out mechanism.

8.4 Exercising Your Rights

To exercise any of your privacy rights, please contact us at privacy@intelligentiterations.com. We will respond to verified requests within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing your request.

9. TikTok-Specific Disclosures

9.1 TikTok Developer Services

The Service integrates with TikTok's Content Posting API and Login Kit. When you connect your TikTok account:

We access your basic profile information (username, display name, avatar) and creator information (privacy level options, posting limits, interaction settings) as provided by TikTok's API.
We use the video.publish scope to post content to your TikTok account on your behalf.
We use the user.info.basic scope to retrieve your account information for display in the posting interface.

9.2 Data We Receive from TikTok

We receive and temporarily process the following data from TikTok's API:

Creator avatar URL
Creator username and nickname
Available privacy level options
Content posting limits and restrictions
Comment, Duet, and Stitch availability settings
Post status updates (publish ID, processing status)

This data is used solely to operate the Service and is not shared with any other third party.

9.3 Data We Send to TikTok

When you publish content through the Service, we transmit to TikTok:

Your photo or video content
Title and description text
Your selected privacy level, interaction settings, and commercial content disclosures

This is transmitted using your authorized access token and in accordance with TikTok's Content Posting API requirements.

10. Cookies and Similar Technologies

The Service uses only strictly necessary cookies for:

Session management: To maintain your authenticated session.
Security: To prevent cross-site request forgery and other security threats.

We do not use advertising cookies, analytics cookies, or third-party tracking cookies. We do not participate in cross-site tracking or behavioral advertising.

11. Children's Privacy

The Service is not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete that information as soon as possible. If you believe a child under 18 has provided us with personal information, please contact us at privacy@intelligentiterations.com.

12. Third-Party Links

The Service may contain links to third-party websites or services (including TikTok and OpenAI). We are not responsible for the privacy practices or content of these third-party services. We encourage you to review the privacy policies of any third-party services you interact with.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated Privacy Policy on the Service and updating the "Last Updated" date. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

14. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the Province of Ontario and the federal laws of Canada applicable therein.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Intelligent Iterations Email: privacy@intelligentiterations.com General Support: support@intelligentiterations.com Windsor, Ontario, Canada

For complaints regarding our handling of your personal information, you may also contact:

Office of the Privacy Commissioner of Canada 30 Victoria Street Gatineau, Quebec K1A 1H3 Toll-free: 1-800-282-1376 Website: www.priv.gc.ca