Privacy Policy
How Reconditum collects, uses, protects, and deletes information across our websites, startup applications, and authorized TikTok & social API integrations.
1. Data Controller & Commitment to Privacy
Reconditum ("Reconditum", "we", "us", or "our") respects your privacy and processes personal data transparently in accordance with the European Union General Data Protection Regulation (GDPR), Turkish Personal Data Protection Law (KVKK), and applicable international privacy standards.
Official Data Controller Contact: Reconditum — Email: info@reconditum.com.
2. Information We Collect
We practice strict data minimization and collect only the information necessary to operate our Services:
- Contact & Inquiry Data: Name, email address, optional organization name, topic, and message content when you contact us via our website or email;
- Technical & Security Logs: Minimal server request metadata (IP address, browser type, timestamp) required to ensure security, prevent abuse, and maintain Cloud Run reliability;
- Local Interface Preferences: Language selection stored locally in your browser (reconditum.locale.v1) without third-party advertising cookies;
- Authorized Third-Party Account Data: Strictly limited profile and publishing metadata when you explicitly connect a social account such as TikTok via OAuth 2.0.
3. TikTok API & Social Integration Data Disclosure
When a user or Reconditum creator explicitly connects a TikTok account via TikTok for Developers (OAuth 2.0), we access only the specific scopes approved on TikTok's authorization screen—such as basic profile identifiers (display name, avatar, open_id via user.info.basic) and, where authorized, video draft/upload or content display permissions.
How we handle TikTok data:
- TikTok OAuth access tokens and refresh tokens are used exclusively to execute actions explicitly requested by the authorized account holder;
- We NEVER sell, rent, license, or trade TikTok user data or tokens to third parties, data brokers, or advertising networks;
- We NEVER access private TikTok messages, passwords, or non-consented account information;
- Media files and captions processed for publishing are transmitted securely over HTTPS/TLS directly to TikTok's official API endpoints.
4. Purposes & Legal Basis of Processing
We process personal data solely for the following legitimate purposes:
- Providing, operating, and maintaining our web/mobile applications and user-authorized social publishing workflows (Contractual necessity & explicit consent);
- Responding to startup, partnership, and European grant inquiries sent to info@reconditum.com (Legitimate interest & pre-contractual steps);
- Protecting platform security, debugging technical issues, and complying with legal obligations.
5. Data Storage, Security & Infrastructure
Reconditum hosts its web infrastructure on secure cloud environments (including Google Cloud Run in European regions) protected by TLS encryption in transit, strict access controls, and isolated container runtimes.
We do not share personal data with external parties except trusted cloud infrastructure providers acting as data processors under strict confidentiality obligations, or when required by law.
6. Data Retention, Token Revocation & User Data Deletion
We retain personal data only as long as necessary to fulfill the purposes described in this policy. You have full control to disconnect integrations and delete your data at any time:
- Instant TikTok Revocation: Open TikTok → Settings and privacy → Security and permissions → Apps and services permissions → select Reconditum → tap Remove access. Upon revocation, our access stops immediately;
- Permanent Data Deletion Request: Email info@reconditum.com with the subject line "Data Deletion Request" from your associated email or handle. We permanently delete all associated personal records and cached OAuth tokens within 30 days (and typically within 72 hours) and confirm completion via email.
7. Your Privacy Rights & Contact
Depending on your location (including the EEA, UK, and Türkiye), you have the right to access, rectify, erase, restrict, or port your personal data, and to withdraw consent at any time without affecting prior lawful processing.
To submit any privacy inquiry or request, contact us at: info@reconditum.com.