Privacy Policy

Effective date: August 22, 2026

This policy explains how Rights Auditor handles information when you use this website, its private dashboard, and the Public Social Link Collector extension.

Information we process

We process account authentication data; files and rights declarations you submit; audit reports; source URLs; and operational security logs. If you connect TikTok, we process your TikTok open ID, display name, avatar URL, granted scopes, OAuth tokens, and public video metadata returned for your account.

Chrome extension

Local mode keeps settings and collected public links in Chrome and exports files to your Downloads folder. Managed mode is disabled by default and requires your explicit consent plus a revocable agent token. When enabled, Rights Auditor sends your topics, selected platforms, and collection limits to the extension. The extension sends run status, errors, and public post links found on supported pages back to Rights Auditor. It does not send passwords or browser history unrelated to a requested collection.

How we use information

We use this information to authenticate you, perform requested media checks, preserve rights evidence, run requested public-link collections, show your authorized TikTok catalog, maintain security, and troubleshoot the service. Data is not sold or used for advertising.

Storage and security

OAuth access tokens, refresh tokens, and the TikTok client secret are encrypted at rest. Extension agent tokens are stored as one-way hashes on the server and can be revoked from the dashboard; the browser stores its token locally. The dashboard is protected by authentication, HTTPS, CSRF checks, and short-lived sessions. No internet service can promise absolute security.

Sharing and service providers

Data is shared only as needed with infrastructure providers and APIs or websites you deliberately use, including TikTok, Pexels, Pixabay, RedNote/Xiaohongshu, and Kwai. Their own privacy policies apply. We do not sell personal data.

Retention and deletion

Records remain until they are no longer needed for the workflow or you request deletion. Disconnecting TikTok deletes the stored connection and attempts token revocation. Disabling managed mode stops extension sync; revoking its agent prevents further access. Contact us to request access, correction, or deletion.

Contact

Email support@puthearath.online for privacy questions or deletion requests.