Privacy Policy

Studio Growth Engine

Effective date: September 3, 2026

This Privacy Policy explains what Studio Growth Engine — a desktop social media content management tool we use to publish video content to TikTok — collects, why, and how it's protected. Studio Growth Engine is operated by the same team that builds Didi, but it is a separate product from the Didi mobile app and its own account/household data — if you're looking for Didi's own privacy policy, see usedidi.com/privacy instead. Studio Growth Engine is an internal publishing tool, not a public-facing service, and is used only by people we've authorized to manage the TikTok presence of our own apps and games.

TikTok account data (via TikTok Login Kit)

Studio Growth Engine connects to TikTok accounts using TikTok's official Login Kit OAuth integration, requesting only the following scopes:

• user.info.basic — the connected account's basic public profile information (display name, avatar, TikTok user ID), used to identify and display which account is connected.
• video.upload — permission to upload a video file to the connected account's private upload inbox on TikTok.
• video.publish — permission to publish an uploaded video to the connected account's feed.

We do not request or access a connected account's direct messages, contacts, followers/following, or any TikTok data beyond what these three scopes provide. We never see or store the TikTok account's password — sign-in happens entirely through TikTok's own OAuth authorization screen, and we only ever receive the access/refresh tokens TikTok issues once you approve the connection.

What we store

For each connected TikTok account, we store the OAuth access and refresh tokens issued by TikTok, the account's basic profile information listed above, and a record of the videos uploaded/published through Studio Growth Engine (e.g. filename, upload time, publish status) so we can track what has already been posted. Tokens are stored encrypted and are only ever transmitted to TikTok's own API over HTTPS/TLS.

How we use this data

This data is used exclusively to operate Studio Growth Engine's core function — connecting to a TikTok account and uploading/publishing video content on its behalf. We do not use it for advertising, and we do not sell or share it with third parties, other than TikTok itself (as required to make the connected API calls) and infrastructure providers strictly necessary to run the application (e.g. secure cloud storage/hosting).

Data retention and disconnecting an account

We retain a connected account's tokens and associated data for as long as the account remains connected to Studio Growth Engine. Disconnecting an account removes its stored tokens from Studio Growth Engine and, where TikTok's API supports it, revokes the associated authorization. An account can also be disconnected directly from the TikTok app or website at any time (Settings → Manage account → Apps and websites), independent of Studio Growth Engine.

Data security

All data is transmitted over HTTPS/TLS. TikTok OAuth tokens are stored encrypted at rest and are accessible only to the authorized operators of Studio Growth Engine — never published, logged in plaintext, or exposed publicly.

Changes to this policy

We may update this Privacy Policy from time to time. The "Effective date" above reflects the most recent revision.

Contact

For privacy-related questions or requests, including disconnecting an account or requesting deletion of its stored data: legal@usedidi.com