Legal

Privacy Policy

Last updated: 19 March 2026  |  Heppe-Smith Publishing Content Manager

1. Who We Are

This Privacy Policy applies to the Heppe-Smith Publishing Content Manager (the "Application"), operated by Heppe-Smith Publishing. Our principal contact address is: info@heppesmithpublishing.com

The Application is an internal publishing tool used to manage and distribute content to social media platforms on behalf of Heppe-Smith Publishing and its authors.

2. What Data the Application Processes

In the course of its operation, the Application processes the following data:

• OAuth access tokens — issued by TikTok, Facebook, and Instagram to authorise content publication to publisher-owned accounts. These tokens are stored securely on publisher-controlled systems and are not shared with third parties.
• Content metadata — captions, hashtags, scheduling information, and media file references for content created by Heppe-Smith Publishing. This is proprietary publishing data and contains no personal information belonging to third parties.
• API response data — status responses and identifiers returned by social media platform APIs following content publication. This data is used solely to confirm successful publication and is not retained beyond operational necessity.

3. What Data We Do Not Collect

The Application does not collect, store, or process:

• Personal data of TikTok, Facebook, or Instagram users
• Follower or audience data from any social media platform
• Data from accounts other than those owned by Heppe-Smith Publishing
• Cookies or tracking data from visitors to this website
• Any data from minors

4. Legal Basis for Processing

The Application processes data under the legal basis of legitimate interests — specifically, the legitimate business interest of Heppe-Smith Publishing in managing and distributing content to its own social media accounts. No consent from third parties is required as no third-party personal data is processed.

5. Data Storage and Security

All data processed by the Application is stored on publisher-controlled systems. Access tokens and API credentials are stored in encrypted configuration files accessible only to authorised Heppe-Smith Publishing personnel. We apply appropriate technical and organisational measures to protect this data against unauthorised access or disclosure.

6. Third-Party Platforms

The Application interfaces with the following platforms via their official APIs:

• TikTok — via the TikTok Content Posting API
• Meta (Facebook and Instagram) — via the Meta Graph API

Use of these platforms is governed by their respective privacy policies and developer terms. Heppe-Smith Publishing complies with all applicable platform policies regarding data handling and content publication.

7. Data Retention

OAuth tokens are retained for the duration of their validity period and refreshed as necessary to maintain publishing operations. API response logs are retained for a maximum of 90 days for operational monitoring purposes, after which they are deleted.

8. Your Rights

As this Application does not process personal data belonging to third parties or members of the public, standard data subject rights (access, rectification, erasure, etc.) do not apply to its operation. If you have a query about data held by Heppe-Smith Publishing in another context, please contact us at the address below.

9. Changes to This Policy

Heppe-Smith Publishing may update this Privacy Policy from time to time. The date of the most recent revision is shown at the top of this page. Continued operation of the Application following any changes constitutes acceptance of the revised policy.

10. Contact

For questions or concerns regarding this Privacy Policy, please contact:

Heppe-Smith Publishing
Email: info@heppesmithpublishing.com
Website: heppesmithpublishing.com