Privacy Policy

Aliocast ("we") runs two small services:

• Aliocast messaging answers people who comment on or message the Instagram accounts we run, for example by sending a link they asked for.
• Aliocast Publisher (publish.aliocast.com) lets a creator sign in with TikTok and post their own videos to their own TikTok account.

What we receive

Instagram. When you comment on one of our posts or message one of our accounts, Instagram sends us your Instagram-scoped user ID, your username, the text of your comment or message, and whether you follow the account.

TikTok. When you sign in to Aliocast Publisher with TikTok and allow access, TikTok gives us:

• your TikTok open ID (an app-specific user ID), display name, username and profile picture;
• access tokens that let the app post videos to your account when you ask it to (scopes user.info.basic and video.publish);
• your posting settings that TikTok reports (which audiences you can choose, whether comments, Duet and Stitch are available, and the longest video you can post).

When you post, the video file, caption and settings you choose pass through our server to TikTok. We do not keep a copy of your video. We keep the TikTok publish ID for up to one day so we can show you the posting status.

How we use it

Only to provide the service you asked for: replying to you on Instagram, or posting the video you chose to your TikTok account and showing you its status. We never post anything without you pressing Post. We do not sell your data, share it with third parties (other than sending your post to TikTok), use it for advertising, or build profiles.

Storage and security

Data is stored with Cloudflare (our hosting provider). TikTok and Instagram tokens are encrypted at rest (AES-256-GCM). Browser sessions use a secure, HTTP-only cookie; we store only a hash of it.

Retention

• Instagram reply log (user ID, username, keyword, time): up to 90 days.
• TikTok sign-in session: 30 days, or until you sign out.
• TikTok tokens: until you disconnect, or until TikTok's refresh token expires (TikTok sets this, usually 180 days) without use.
• TikTok publish IDs: up to 1 day.

Your choices

• In Aliocast Publisher, press Disconnect. We revoke our TikTok access and delete everything we hold about you right away. You can also remove the app in TikTok under Settings and privacy, Security, Manage app permissions.
• You can ask us to delete your data at any time; see Data deletion.

Children

Our services are not meant for anyone under 18.

Changes

If we change this policy we update the date below. Material changes are shown in the app before they apply.

Last updated 2026-11-13 · Contact: support@aliocast.com