Trípode is a free, open sign-up web tool, operated by Marco Orta ("the data controller"), based in Mexico City, Mexico, so that any creator can publish and measure the performance of their own TikTok videos. This policy applies only to Trípode and describes how data is processed under Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP).

1. Data we process

• About your Trípode account: your email address, and the temporary single-use access codes generated to sign you in (they expire after a few minutes and are not passwords).
• About the TikTok account you connect: the account's identifier (open_id), its public display name and avatar, the access and refresh tokens returned by TikTok, and the permissions you granted during authorization (OAuth).
• About each post you make with Trípode: the identifier TikTok assigns to the video, the text you submitted, the settings you chose (privacy, comments, duet, stitch, commercial-content disclosure) and the submission date; and, once published, the public metrics TikTok returns (views, likes, comments, shares).
• The video file you upload: it is stored only for as long as needed to deliver it to TikTok's API, and is deleted as soon as that upload completes.

2. What we use this data for

• Signing you into your Trípode account with the single-use code.
• Publishing to TikTok, or saving as a draft in your TikTok inbox, the content you submit with the settings you choose.
• Keeping your TikTok session connected, refreshing the token when it expires.
• Showing you how your published videos performed and your account's numbers.

We do not use this data for advertising or profiling, and we do not process it for any purpose other than operating the tool you use.

3. Legal basis

Connecting your TikTok account is explicit consent you give directly to TikTok on its own authorization screen; Trípode only receives the tokens and data that permission enables. Your email and code-based sign-in are provided voluntarily when you register.

4. Who we share data with

We do not sell your data, do not use it for advertising profiling, and do not share it with third parties, except with TikTok itself (to which Trípode sends the video and its settings to publish it, at your request) and with the infrastructure providers that make the service possible: file storage (Cloudflare R2) and transactional email for delivering access codes (Resend). These providers process data only as processors, to operate the tool.

5. Retention

We keep your email, your TikTok tokens and your posting history for as long as your Trípode account stays active. Video files are not retained: they are deleted as soon as they are delivered to TikTok. Access codes expire after a few minutes and are discarded even if unused.

If 12 months go by without you using Trípode — no signing in, no opening the dashboard, no posting — we delete your account: your email, your TikTok tokens and your posting history, and we revoke Trípode's permission on your TikTok account. We warn you by email 30 days in advance, and signing in once before that date is enough to keep it. We never delete an account unless that warning has been sent and its notice period has run out. Videos you already published on TikTok are not affected.

If a video never reaches TikTok (for example, because the upload is interrupted), it is deleted within 24 hours at most.

6. Your rights

You can disconnect your TikTok account at any time from within Trípode or from TikTok's own settings (Settings → Security & permissions → Apps and services); doing so removes the stored tokens associated with that account. You can also delete your Trípode account entirely from within the tool, which removes your email, your tokens and the posting history described above.

You can also exercise your rights to Access, Rectification, Cancellation or Objection (ARCO rights) at any time, as well as withdraw your consent, by emailing [email protected]. Under the LFPDPPP, we will respond to your request within 20 business days.

7. Security

TikTok tokens and other data are stored with access controls scoped to operating the tool itself. No system is perfectly secure; if we detect an incident affecting your data, we will notify you as required by applicable law.

8. Changes to this policy

Any change to this policy will be published on this same page, updating the "Last updated" date.

9. Contact

For any question about how Trípode processes your data, email [email protected].