Tenderfy Social

Privacy Policy

Last updated: 15 October 2026

1. Who we are

Tenderfy Social (https://tenderfy.social) is operated by TENDERFY S.R.L., Suceava, str. Calea Obcinilor 1,2,3, Romania, CUI 42011927, Trade Register no. J33/1959/2019. We are the data controller for the data described here. Contact: [email protected], +40 774 546 403.

2. Data you give us

• Account data: your e-mail address, password (stored hashed), company name and the settings of your workspace.
• Content: the texts, images and videos you upload and schedule.

3. Data we receive from TikTok and other platforms

When you connect a social media account (TikTok, Instagram, Facebook, YouTube or others) we receive and store only what is needed to publish and to show results:

• Access tokens (access and refresh tokens) that let the service post on your behalf;
• Basic profile information of the connected account: account ID, display name, username, avatar and profile link (TikTok scopes user.info.basic and user.info.profile);
• Account statistics: follower, following, like and video counts (user.info.stats);
• The list of videos published on the account and their public metrics (video.list);
• Your posts: the videos, covers and captions you publish (video.upload, video.publish).

We do not access direct messages, we do not collect data about other users of those platforms, and we do not use the data for advertising or profiling.

4. Why we use it

• to provide the service: publish your content to the accounts you choose and show you which account a post goes to;
• to show your accounts' and posts' statistics;
• to keep the service secure and prevent abuse.

The legal basis is the contract with you (art. 6(1)(b) GDPR) and our legitimate interest in keeping the service secure (art. 6(1)(f)).

5. Where the data is stored and who can see it

The data is stored on servers controlled by TENDERFY S.R.L. in Romania. Each workspace sees only its own accounts and content. Traffic passes through Cloudflare (network and security provider). We do not sell your data and do not share it with third parties, except the social media platforms you publish to.

6. How long we keep it

Account data and content are kept while your account exists. Tokens and profile data of a social media account are deleted when you disconnect it. When you delete your account, we delete its data within 30 days. Published content stays on each platform under that platform's rules.

7. How to revoke access

Disconnect an account from Tenderfy Social at any time. TikTok access can also be revoked from the TikTok app: Settings and privacy → Security → Manage app permissions.

8. Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction, portability and objection. Write to [email protected]; we answer within 30 days. You may also complain to the Romanian data protection authority, ANSPDCP (www.dataprotection.ro).

9. Changes

We may update this policy; the date at the top shows the latest version.