Privacy Policy

1. Overview

Agentop ("we", "our", or "the Service") is a local-first, autonomous social media management application. This Privacy Policy explains what data we collect, how it is used, where it is stored, and your rights regarding that data.

Agentop operates entirely on your own infrastructure (local machine or private server). We do not operate any cloud backend, analytics service, or data collection infrastructure. All data described in this policy is stored locally on your device.

2. Data We Collect

2.1 Data You Provide

To connect social media accounts, you provide:

• Platform API credentials (access tokens, client keys, page IDs)
• Configuration preferences (upload schedules, alert thresholds)

2.2 Data Retrieved from TikTok

With your authorization (OAuth scopes video.publish and video.list), Agentop retrieves:

• Video metrics: view count, like count, comment count, share count, duration
• Publish status: upload and processing status of videos posted through the Service
• Open ID: your TikTok account identifier (used to associate tokens; never displayed publicly)

Agentop does not access TikTok user profile data, follower lists, messages, comments, or any data beyond the scopes listed above.

2.3 Data Retrieved from Facebook and Instagram

With your authorization, Agentop retrieves:

• Page insights: impressions, engaged users, fan adds, page views (Facebook)
• Profile insights: impressions, reach, profile views, accounts engaged (Instagram)
• Post insights: likes, comments, shares, saves, video views for posted content
• Content publishing quota: remaining Instagram post quota (read-only)

Agentop does not access personal user profiles, private messages, friends lists, or advertising data.

3. How We Use Your Data

Data collected by Agentop is used exclusively to:

• Post content to your connected social media accounts on your behalf
• Display analytics and performance metrics in the dashboard
• Generate scheduled performance reports
• Fire alerts when performance thresholds are crossed
• Detect and warn about expiring access tokens

We do not use your data for advertising, profiling, machine learning model training, or any purpose beyond the stated Service functionality.

4. Data Storage and Security

All data is stored locally on your device. The only outbound network connections are to:

• open.tiktokapis.com — TikTok API
• graph.facebook.com — Meta Graph API
• localhost:11434 — Local Ollama LLM (no external connection)

No data is transmitted to any Agentop servers because no such servers exist.

5. Data Sharing

We do not share your data with any third parties.

Data is sent to TikTok and Meta APIs solely to fulfill actions you request. This transmission is governed by those platforms' respective privacy policies:

• TikTok: tiktok.com/legal/privacy-policy
• Meta: facebook.com/privacy/policy

6. TikTok-Specific Data Handling

Agentop accesses TikTok's API under the following commitments required by TikTok's Developer Terms of Service:

• We only request minimum scopes: video.publish and video.list
• TikTok API data is stored locally and not redistributed
• Deleting tiktok_tokens.json and analytics_cache.json removes all TikTok-sourced data
• AI-generated content is always flagged with is_aigc: true per TikTok policy
• We do not use TikTok data to build advertising profiles or train machine learning models

7. Meta-Specific Data Handling

Agentop accesses Meta's Graph API under Meta's Platform Terms:

• Minimum permissions only: pages_manage_posts, pages_read_engagement, instagram_content_publish, instagram_manage_insights
• Meta Platform Data is not transferred to data brokers or used for ad targeting
• Users can revoke app permissions at any time via Facebook Settings → Apps and Websites

8. Your Rights

• Access: View all locally stored data in backend/memory/social_media/
• Delete: Remove all stored data by deleting that directory
• Revoke: Revoke platform permissions at any time through TikTok or Facebook settings
• Portability: All data is in standard JSON format and fully accessible to you

9. Cookies and Tracking

Agentop does not use cookies, web beacons, tracking pixels, or any analytics technologies.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 13. We do not knowingly collect personal data from children.

11. Contact

For privacy-related questions or data deletion requests, contact: privacy@lexmakesit.com