Privacy Policy
Last updated: March 17, 2026
1. Overview
We Are One ("we," "our," or "us") is an educational media project that produces short-form documentary videos about Islamic history. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.
We are committed to collecting as little personal data as possible. Our service is a content production and publishing tool — not a consumer-facing application that collects user data at scale.
2. Information We Collect
We collect only the minimum data required to publish content through third-party platform APIs:
| Data | Source | Purpose | Retention |
|---|---|---|---|
| TikTok OAuth2 access token | TikTok authorization flow | Authenticate API requests to publish videos | Stored locally, auto-refreshed, deleted on revocation |
| TikTok OAuth2 refresh token | TikTok authorization flow | Renew expired access tokens without re-authorization | Stored locally, valid up to 365 days |
| TikTok creator info (privacy level options) | TikTok API query | Determine allowed privacy levels before publishing | Not stored — queried per publish session |
3. Information We Do Not Collect
We do not collect, process, or store:
- Personal information of viewers or followers
- Analytics, engagement metrics, or behavioral data
- Email addresses, names, or contact information of third parties
- Cookies, tracking pixels, or advertising identifiers
- Financial or payment information
- Location data
4. How We Store Data
OAuth2 tokens are stored in a local file on the operator's device. Tokens are never transmitted to any server other than the official TikTok API endpoints. The token file is excluded from version control systems to prevent accidental exposure.
5. Third-Party Services
We integrate with the following third-party services for content production and distribution:
- TikTok Content Posting API — video publishing. Subject to TikTok's Terms of Service and Privacy Policy
- Google Gemini API — image generation for video frames
- fal.ai — video clip generation and sound effects
- ElevenLabs — voice narration and audio production
Each third-party service processes data according to its own privacy policy. No personal user data is shared with these services — they are used solely for content production.
6. Data Sharing
We do not sell, rent, or share personal data with any third party. OAuth2 tokens are used exclusively for API authentication with TikTok and are never disclosed to any other party.
7. Data Security
We implement reasonable security measures to protect stored tokens, including:
- Local-only storage — tokens never leave the operator's device except when sent to TikTok's API
- Exclusion from version control via .gitignore
- HTTPS-only communication with all third-party APIs
8. Your Rights
You have the right to:
- Revoke access — disconnect our app from your TikTok account at any time through TikTok's settings, which immediately invalidates all stored tokens
- Request deletion — contact us to request deletion of any stored data associated with your account
- Access information — request a copy of any data we hold related to your account
9. Children's Privacy
Our service is not directed at children under the age of 13. We do not knowingly collect personal information from children. Our content is educational in nature and is intended for general audiences.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected in the "Last updated" date at the top of this page. Continued use of the Service after any changes constitutes acceptance of the revised policy.
11. Contact
For privacy-related inquiries, contact us at: privacy@weareone.edu