Asociația Misiunea Bucovina emblemMB Post Center

MB Post Center

Privacy Policy

This policy explains what information MB Post Center processes, why it is needed, how it is protected, and how users can control or request deletion of their data.

1. Scope and operator

MB Post Center is a web-based social media publishing service operated by Asociația Misiunea Bucovina MB (“we”, “us”, or “the Association”). This Privacy Policy applies to approved creators and communication teams who use MB Post Center to connect authorized social media accounts and prepare, review, schedule, or publish content.

2. Information we process

Account and access information

We process the information necessary to provide protected, account-based access to MB Post Center, maintain security, and associate authorized social media connections with the correct MB Post Center account.

TikTok information

When a creator authorizes TikTok through TikTok’s official OAuth flow, MB Post Center uses the user.info.basic permission to retrieve only the authorized account’s:

  • Open ID;
  • display name;
  • avatar.

These details allow the creator to identify and verify the destination TikTok account before publishing. MB Post Center may also query creator information made available by TikTok to display current privacy and interaction options required for a publication.

OAuth tokens

Access and refresh tokens supplied through official OAuth authorization flows are stored in encrypted form. Tokens are used only to perform actions requested and confirmed by an authorized creator. Tokens are never displayed publicly.

Publication information and temporary media

We process captions, publication settings, scheduling information, selected destinations, status information, and videos or photos chosen by the creator. Uploaded media files are stored temporarily only for validation, processing, scheduling when requested, and transfer to the selected platforms.

3. TikTok permissions and purposes

  • user.info.basic: retrieves Open ID, display name, and avatar so the creator can verify the connected TikTok account.
  • video.publish: sends creator-selected content to the connected TikTok account through the official Direct Post flow, only after the creator reviews the settings and presses Publish.

MB Post Center does not use the video.upload permission to send drafts to the TikTok inbox.

4. How information is used

Information is processed only as needed to:

  • authenticate and protect MB Post Center access;
  • connect and identify authorized social media accounts;
  • display platform-specific publishing options;
  • prepare, review, schedule, and publish creator-selected content;
  • show publication status and diagnose delivery errors;
  • protect the service, connected accounts, and users from misuse;
  • respond to support, privacy, and deletion requests.

MB Post Center does not sell personal information and does not publish content without the creator’s explicit confirmation.

5. Passwords and authorization

TikTok passwords are never requested, collected, or stored by MB Post Center. TikTok authorization takes place on TikTok-controlled pages through the official OAuth process. Each creator may connect only accounts they are authorized to manage.

6. Storage, security, and deletion

We use access controls, encrypted OAuth token storage, server-side authorization checks, and other reasonable technical and organizational safeguards. No internet service can guarantee absolute security, but access is limited to what is required to operate and support the service.

Temporary media files are automatically deleted after publication, failed processing, cancellation, or expiry. Operational and security records may be retained for a limited period when needed to investigate failures, prevent abuse, meet legal obligations, or establish and defend legal claims.

7. External platforms and service providers

When a creator requests publication, information and selected media are transferred to the chosen social media platform under that platform’s terms and privacy practices. MB Post Center also relies on infrastructure and service providers necessary for hosting, security, email delivery, and technical operation. They may process information only to provide those services and subject to applicable safeguards.

8. User controls and revocation

Users can disconnect their TikTok account from MB Post Center and can revoke the application’s access from their TikTok account settings at any time. Revocation prevents future use of the revoked authorization but does not remove content already published to TikTok.

9. Data access and deletion requests

To request access, correction, or deletion of MB Post Center data, email contact@misiuneabucovina.org with the subject MB Post Center Data Deletion Request. Include enough information to identify the MB Post Center account and connected platform account. For security, we may ask for reasonable verification before acting on a request.

After verification, we will delete or anonymize information that is no longer required for service operation, security, legal compliance, or the establishment and defense of legal claims. We aim to respond within 30 days, subject to applicable law.

10. Updates and contact

We may update this policy to reflect service, legal, or security changes. The effective date at the top identifies the latest version. Questions about this policy may be sent to contact@misiuneabucovina.org.

Privacy contact: Asociația Misiunea Bucovina MB — contact@misiuneabucovina.org