Privacy Policy

1. General Provisions

1.1 We attach great importance to the protection of personal data. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you register for, access, or use the Platform, as well as the rights you have over your data.

1.2 The Platform connects to third-party social media platforms (each a "Connected Platform", and collectively the "Connected Platforms") through their official OAuth authorization or equivalent mechanisms. Connected Platforms currently include, but are not limited to, Facebook, Instagram, and X (formerly Twitter), and may expand to additional platforms as our service evolves. Data obtained from a Connected Platform is used solely to provide the features you have authorized.

1.3 Before you log in via any Connected Platform's authorization screen and grant permissions, the scope of access is limited to the permissions explicitly displayed to and confirmed by you on that screen. We request only the minimum permissions necessary to provide the service.

2. Information We Collect

2.1 Account registration information

When you register for the Platform: your email address, username, and password (stored only in hashed form), team/organization information, and profile settings.

2.2 Information obtained through Connected Platform authorization

The following data is collected only after you explicitly grant authorization, and is limited to the scope you approve on the platform's consent screen:

• Basic public profile information: name, avatar, and the unique user ID assigned by the Connected Platform;
• The accounts, pages, or channels you authorize us to access (for example, Facebook Pages, Instagram professional accounts, or X profiles), including follower counts and basic account settings where relevant to the service;
• The management and publishing permissions you grant (such as permission to publish, schedule, or manage content on your behalf);
• Content and performance data within the authorized scope, such as posts, media, comments, and engagement/insights metrics;
• Access tokens (and refresh tokens, where applicable) required to maintain the authorized connection and perform account hosting operations on your behalf.

2.3 Content you create or upload

Posts, text, images, videos, and other materials you create, upload, or store through the Platform, including scheduled and draft content.

2.4 Automatically collected data

Login logs, API access records, device and browser information, IP address, and operation logs, collected for service security, troubleshooting, and legal compliance.

3. How We Use Information

We use the data described above solely to deliver, maintain, and improve the account hosting and management service, within the scope of your authorization:

• Binding and managing the social media accounts you connect;
• Publishing, editing, scheduling, or deleting content on authorized accounts strictly according to your instructions;
• Displaying account information, post content, and performance statistics in your dashboard;
• Detecting abnormal access, preventing fraud, and protecting account security;
• Providing customer support and operating the service.

Important commitments:

• We will never sell or rent your personal information or access tokens to any third party;
• We will not use data obtained from Connected Platforms for purposes that are undisclosed to you, for advertising targeting, for data brokering, or for training machine learning or AI models;
• We act on Connected Platform data only on your behalf and per your instructions, within each platform's terms and policies;
• We will not use your social account data for any marketing activities without your permission.

4. Data Storage and Retention

• Authorization data and access tokens are stored for as long as your Platform account remains active and the authorization is not revoked;
• Access tokens are stored only in encrypted form. When you unbind a social account, we immediately invalidate the corresponding token and delete cached data associated with that account;
• After you cancel your Platform account or submit a valid deletion request, we delete or anonymize your personal data within 30 days, except where retention is required by applicable laws;
• System logs required by applicable laws are retained for the minimum statutory period and then deleted.

5. Information Sharing

We will not disclose your personal information to third parties except under the following circumstances:

• You have given explicit consent;
• Sharing with authorized service providers that provide server hosting and technical operations for us, strictly under confidentiality and data processing agreements, and prohibited from using your data for any other purpose;
• Compliance with the developer agreements and policies of the Connected Platforms;
• Response to lawful requests from judicial authorities or regulators, to the extent required by applicable law;
• In connection with a merger, acquisition, or asset transfer, where we will ensure the successor continues to honor this Privacy Policy.

Authorization Management and Revocation

6.1 You may revoke Tianjian's authorization at any time, either of the following ways takes effect immediately:

• Within the Platform: unbind the social account in your dashboard. The corresponding access token is invalidated immediately;
• Within the Connected Platform: remove the application from your account settings on that platform. Typical paths: Facebook → Settings → Apps and Websites; Instagram → via Facebook "Business Integrations"; X (Twitter) → Settings → Security and account access → Apps. For other platforms, see "authorized apps / connected apps" in the platform's account settings.

6.2 Once authorization is revoked, we can no longer access the corresponding account or perform any operation on your behalf. This does not affect content already published on the Connected Platform.

Data Deletion Rights

You have the right to request deletion of all Platform-stored data associated with your account on a Connected Platform, by any of the following methods:

• Method 1 (self-service): log in to the Platform dashboard, unbind the social account, and/or delete your Platform account. Deletion takes effect immediately;
• Method 2 (email): send a deletion request to admin@tianjian.online, including your Platform username and the user ID on the relevant Connected Platform;
• Method 3 (platform-initiated): for platforms that provide a data deletion request mechanism (for example, Meta's "Delete Your Activity/Data Deletion Callback"), deletion requests you submit through the platform side are transmitted to our automated data-deletion endpoint and processed accordingly.

After receiving a valid request, we will complete data erasure within 30 days and send you a confirmation. This page also serves as the public data deletion instructions for third-party platform app review purposes.

Data Security

• Access tokens are encrypted at rest (AES encryption); data transmission uses HTTPS/TLS;
• We implement access control, permission isolation, interface protection, and security auditing to prevent unauthorized access, disclosure, tampering, or loss;
• Platform operations follow the principle of least privilege: personnel may access production data only when necessary for support or troubleshooting.

Please note that no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

International Data Transfer

As we provide an overseas social media operations service, your data (including data obtained from Connected Platforms) may be stored or processed in countries or regions other than your own. Where such transfers occur, we will take commercially reasonable measures required under applicable data protection laws to ensure your data receives adequate protection.

Minors Policy

The Platform is a service intended for commercial users. If you are under 18 years of age, please do not register for, use, or authorize any social media account to the Platform.

Policy Updates

We may update this Privacy Policy from time to time. Revised versions will be published on this page with an updated effective date. For material changes, we will also notify you through reasonable means such as in-app notices or email. Your continued use of the service after the updated policy takes effect constitutes acceptance of the revised policy.

Contact Us

If you have any questions, requests, or complaints regarding this Privacy Policy or the processing of your personal data (including access, correction, deletion, and withdrawal of consent), please contact us at:

• Product Name: Tianjian
• Email: admin@tianjian.online

隐私政策

Tianjian（以下简称"我们"）高度重视用户个人信息的保护。本隐私政策说明，当您注册、访问或使用本平台时，我们如何收集、使用、存储、共享和保护您的个人信息，以及您对个人数据所享有的权利。

本平台提供社交媒体账号托管与管理服务：您通过各平台的官方授权机制，授权我们代为连接、运营和管理您的社交媒体账号。在通过任何平台授权页登录并授予权限前，请仔细阅读本政策。服务使用规则请参见《服务条款》。

1. 总则

1.1 本政策适用于我们向您提供的账号托管与管理服务。我们通过第三方社交媒体平台的官方 OAuth 授权（或同等机制）与平台建立连接。当前接入的平台包括但不限于 Facebook、Instagram、X（Twitter），后续可能随服务发展接入更多平台（下称"接入平台"）。从接入平台获取的数据，仅用于向您提供已授权的功能。

1.2 您在各平台授权页确认的权限范围，即为我们访问数据的边界。我们仅申请提供服务所必需的最小权限。

2. 我们收集的信息

2.1 账号注册信息：您注册本平台时提供的邮箱、用户名、密码（仅以哈希形式存储）、团队/组织信息及个人资料设置。

2.2 通过接入平台授权获取的信息（仅在您明确授权后采集，且限于您在授权页确认的范围）：

• 基础公开信息：姓名、头像、接入平台分配的用户唯一 ID；
• 您授权我们访问的账号、主页或频道（如 Facebook 公共主页、Instagram 专业账号、X 账号），以及与服务相关的粉丝数、基础账号设置等；
• 您授予的管理与发布权限（如代为发布、定时发布、内容管理权限）；
• 授权范围内的内容与表现数据，如帖子、媒体、评论、互动及洞察指标；
• 用于维持授权连接、代您执行托管操作的访问令牌（Access Token）及刷新令牌（如适用）。

2.3 您创建或上传的内容：通过本平台撰写、上传、存储的帖子、文字、图片、视频等素材，包括定时与草稿内容。

2.4 自动采集数据：登录日志、接口访问记录、设备与浏览器信息、IP 地址、操作日志，用于服务安全、故障排查与法律合规。

3. 信息使用目的

我们仅在授权范围内，将上述数据用于交付、维护和改进账号托管与管理服务：

• 绑定并管理您接入的社交媒体账号；
• 严格按照您的指令，在授权账号上发布、编辑、定时或删除内容；
• 在工作台展示账号信息、帖子内容与运营数据统计；
• 识别异常访问、防范欺诈、保障账号安全；
• 提供客户支持与系统运维。

重要声明：

• 我们绝不会向任何第三方出售、出租您的个人信息或访问令牌；
• 我们不会将接入平台数据用于未向您披露的用途、广告定向投放、数据经纪，或训练机器学习/AI 模型；
• 我们仅根据您的指示、代表您并在各平台条款与政策允许的范围内处理接入平台数据；
• 未经您许可，我们不会利用您的社交账号数据开展任何营销活动。

4. 信息存储与保存期限

• 授权信息与访问令牌在您的平台账户存续且授权未撤销期间保存；
• 访问令牌均以加密形式存储。当您解绑社交账号时，我们将立即失效对应令牌，并删除与该账号相关的缓存数据；
• 当您注销平台账户或提交有效删除请求后，我们将在 30 日内删除或匿名化您的个人数据，法律法规另有要求的除外；
• 法律法规要求留存的系统日志，按法定最短期限保存后删除。

5. 信息共享

除下列情形外，我们不会向第三方披露您的个人信息：

• 已取得您的明确同意；
• 向我们委托的服务商（提供服务器托管、技术运维）共享，且仅依据保密与数据处理协议、限于提供服务所必需，服务商被禁止将数据用于任何其他目的；
• 为遵守接入平台的开发者协议及相关政策；
• 应司法机关、监管机构的合法要求，在适用法律要求的范围内提供；
• 涉及合并、收购或资产转移时，我们将确保继受方继续履行本隐私政策。

6. 账号授权管理与撤回

6.1 您可以随时撤回对本平台的授权，以下任一方式均立即生效：

• 平台内撤回：登录本平台后台解绑社交账号，对应访问令牌立即失效；
• 平台侧撤回：在各平台账号设置中移除本应用。常见路径：Facebook → 设置 → 应用和网站；Instagram → 经由 Facebook"商务集成"；X（Twitter）→ 设置 → 安全和账号访问 → 应用；其他平台请参考其账号设置中的"已授权应用/已连接应用"。

6.2 授权撤回后，我们将无法继续访问对应账号或代您执行任何操作；此前已在接入平台发布的内容不受影响。

7. 用户数据删除权利

您有权申请删除本平台存储的、与您在接入平台账号相关联的所有数据，可通过以下任一方式：

• 方式一（自助）：登录平台后台，解绑社交账号和/或注销平台账户，删除立即生效；
• 方式二（邮件）：发送删除申请至 admin@tianjian.online，注明您的平台用户名及对应平台的用户 ID；
• 方式三（平台侧发起）：对于提供数据删除请求机制的平台（例如 Meta 的数据删除回调机制），您在平台侧提交的删除请求将传送至我们的自动化数据删除接口并被相应处理。

收到有效请求后，我们将在 30 日内完成数据清除并向您反馈确认。本页面同时作为第三方平台应用审核所要求公开的数据删除说明页面。

8. 数据安全保障

• 访问令牌加密存储（AES 加密），数据传输采用 HTTPS/TLS 加密；
• 我们部署访问控制、权限隔离、接口防护与安全审计机制，防范未经授权的访问、泄露、篡改或丢失；
• 运营遵循最小权限原则：人员仅在支持或排障必需时方可访问生产数据。

请注意，互联网传输或电子存储无法做到绝对安全，我们无法保证百分之百的安全。

9. 跨境数据传输

由于我们提供海外社交媒体运营服务，您的数据（包括从接入平台获取的数据）可能存储或处理于您所在国家/地区之外。发生此类跨境传输时，我们将依据适用的数据保护法律采取合理必要措施，确保您的数据获得充分保护。

10. 未成年人条款

本平台是面向商业用户的服务。如未满 18 周岁，请勿注册、使用本平台，或向本平台授权任何社交媒体账号。

11. 政策更新

我们可能不定期更新本隐私政策。修订版本将在本页面发布并更新生效日期；重大变更我们还将通过站内通知或邮件等合理方式告知您。您在新版政策生效后继续使用服务，即视为接受修订后的政策。

12. 联系我们

如您对本隐私政策或个人信息处理有任何疑问、请求或投诉（包括查询、更正、删除、撤回同意等），请通过以下方式联系我们：

• 产品名称：Tianjian
• 邮箱：admin@tianjian.online