Privacy Policy
1. Identity
This service is operated under the trade name Relayd ("Relayd," "we," "our," "us"). Relayd provides a content-scheduling tool for creators and small teams who post to third-party social platforms. For privacy questions, contact privacy@relayd.org. For general support, contact support@relayd.org.
2. What We Collect
When you connect a TikTok account to Relayd, we receive the following information from TikTok via OAuth:
- Your TikTok open_id (a stable, opaque user identifier issued by TikTok)
- Your TikTok display name
- Your TikTok avatar URL
- OAuth scopes granted by you:
user.info.basicandvideo.upload - OAuth refresh and access tokens, stored encrypted at rest
When you schedule a post, we receive the video metadata you submit (caption, privacy setting, scheduled time, optional thumbnail offset). The video file itself is uploaded directly to TikTok via their Content Posting API; we do not retain the video bytes beyond the brief upload window required to deliver them to TikTok.
3. How We Use It
We use the data above for a single purpose: to perform publishing and scheduling actions you have explicitly authorized. Specifically, we use your open_id to identify which connected account a scheduled post belongs to, your display name and avatar to render the connected-accounts UI inside Relayd, and your refresh token to obtain a fresh access token at the moment a scheduled post fires. We do not analyze, mine, profile, or train models on your TikTok content, captions, or audience data. We do not sell, rent, license, or share your data with advertising networks, data brokers, or analytics resellers. We do not use your TikTok data to build or improve any product or feature outside of Relayd's own scheduling functionality.
4. Third Parties
Relayd relies on a small number of infrastructure providers to operate:
- Cloudflare — provides edge hosting, DNS, and DDoS protection for relayd.org. Cloudflare may process IP address and request metadata for security and routing.
- Postiz — open-source scheduling backend self-hosted by Relayd; handles scheduled job queueing.
We do not resell or commercially analyze user content. We do not place your data with marketing, advertising, or data-broker third parties.
5. Retention
Refresh tokens and connected-account metadata are retained for as long as the connection is active. If you revoke Relayd's access from within TikTok (or delete your Relayd connection), the associated refresh token becomes inert and is deleted from our systems within 30 days. Video content is not retained beyond the upload window required to deliver it to TikTok; once TikTok confirms receipt, the staging copy is purged from Relayd's storage. Application logs (including request metadata, error traces, and scheduling timestamps) are retained for up to 90 days for operational, debugging, and security purposes, after which they are automatically deleted. Backup snapshots of our database are retained for up to 30 days on a rolling basis and then overwritten.
5a. Security
We protect the data described above with industry-standard safeguards: TLS in transit, encryption at rest for OAuth tokens, restricted production access, and audit logging on sensitive operations. No system is perfectly secure; if we ever detect a breach that compromises your data, we will notify affected users in accordance with applicable law.
6. Your Rights
You have the right to access, correct, export, or delete the data we hold about you. To exercise these rights, email privacy@relayd.org or visit our Data Deletion page. We respond to verified requests within 30 days.
7. GDPR and CCPA
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have additional rights under the GDPR including the right to lodge a complaint with your supervisory authority. Our lawful basis for processing is your consent (granted when you authorize Relayd via TikTok OAuth) and our legitimate interest in providing the service you have requested.
If you are a California resident, the CCPA gives you the right to know what personal information we collect, the right to delete it, and the right not to be discriminated against for exercising these rights. Relayd does not sell personal information.
8. Age
Relayd is not intended for users under the age of 13. If you are between 13 and the age of majority in your jurisdiction, you may use Relayd only with the consent of a parent or legal guardian. We do not knowingly collect data from children under 13.
9. TikTok-Specific Disclosure
10. Changes
We may update this Privacy Policy from time to time. Material changes will be announced on this page and on the Relayd website. The "Effective date" at the top of this document indicates the most recent revision.
11. Effective Date
This Privacy Policy is effective as of 2026-04-25.