Who we are and scope
This Privacy Policy explains how World Claw Center, when providing technology services for Visage de Vogue, CNPJ 54.591.759/0001-15, may collect, use, store, share, and protect personal data associated with the Visage de Vogue website and authorized TikTok integrations.
Data that may be collected
We collect only information reasonably necessary to provide a feature, maintain security, and comply with legal or platform requirements. Depending on the feature you choose, this may include:
- identifiers associated with an authorized account;
- permissions and scopes granted by the user;
- content or publishing instructions submitted by the user;
- support communications; and
- limited technical records such as timestamps, browser information, security events, and error logs.
Authorized TikTok account data
When a user connects TikTok, we access only data covered by scopes the user explicitly authorizes and that TikTok has approved for the application. Depending on those permissions, basic account data may include a TikTok account identifier, display name, avatar, and other information needed for the requested feature.
We do not access TikTok information outside the granted scopes and do not use scraping or unofficial collection methods.
OAuth authentication
TikTok authentication uses TikTok's official OAuth flow. The user is directed to TikTok to sign in, review requested permissions, and approve or deny access. World Claw Center and Visage de Vogue do not receive or store the user's TikTok password.
Access and refresh tokens
After authorization, TikTok may provide an access token and a refresh token. These tokens allow the Service to make authorized API requests and maintain the connection for the permitted period. Tokens are treated as confidential credentials, handled server-side, restricted to authorized systems, and are not intentionally exposed in public pages, URLs, or client-side logs.
How data is used
Authorized information may be used only to:
- authenticate and connect the account selected by the user;
- provide a feature or action expressly requested by the user;
- display information needed to review a proposed action;
- publish content only after authorized user approval;
- maintain security, prevent misuse, and troubleshoot errors; and
- comply with applicable law and TikTok requirements.
Storage and security measures
We apply reasonable technical and organizational safeguards appropriate to the data, including encrypted transmission, restricted access, credential separation, server-side token handling, and access controls.
No system is entirely risk-free. We review safeguards and act to contain and address security incidents in accordance with applicable obligations.
Retention and deletion
Personal data and authorization credentials are retained only for as long as needed to provide the Service, maintain security, resolve disputes, and meet legal or TikTok requirements. Data that is no longer required is deleted or anonymized, subject to mandatory retention periods.
A verified user may request deletion of data associated with an authorization. We will process the request without undue delay unless retention is required by law.
User rights
Subject to applicable law, users may request confirmation of processing, access, correction, deletion or anonymization, information about sharing, portability where applicable, withdrawal of consent, and review of decisions made solely by automated means. Where Brazilian law applies, these requests are handled in accordance with the Lei Geral de Proteção de Dados (LGPD).
Disconnecting TikTok and revoking authorization
Users may disconnect their TikTok account through the Service when that option is available, or revoke authorization through TikTok's app permission settings. Revocation stops future access through the revoked token.
Revocation does not necessarily delete information already retained for a lawful reason. Users may contact us separately to submit a deletion request.
Changes to this Policy
We may update this Policy to reflect changes in the Service, security practices, applicable law, or TikTok requirements. The current version and its last-updated date will remain available on this page.
Contact and privacy requests
To ask a question or exercise a privacy right, email contato@visagedevogue.com.br. We may request limited information to verify identity and protect the account before completing a request.
