BBT
Privacy Policy
This Privacy Policy explains what information BBT processes, why it is needed, how long it is retained, and how creators can control or delete it. BBT does not sell personal information.
1. Service operator and contact
BBT is a creator publishing service operated under the Tonariba name from Japan. In this policy, “BBT,” “we,” and “us” refer to the service operator identified below.
- Service
- BBT
- Operator name
- Tonariba
- Country
- Japan
- Website
- https://bbt.tonariba.com/
- Privacy contact
- hidenari12317@gmail.com
2. Scope
This policy applies to information processed through the BBT website and its TikTok Login Kit and Content Posting API integration. TikTok independently processes information under TikTok's own privacy policy and terms.
3. Information we process
Information received from TikTok
- Basic creator profile information authorized through
user.info.basic, including display name, avatar, and TikTok account identifiers. - OAuth access and refresh tokens, authorized scopes, and token expiration times.
- Creator posting information returned by TikTok, including posting availability, available privacy options, interaction permissions, and maximum video duration.
- Publishing identifiers, processing status, and API error information returned after a creator initiates a post.
Information provided by creators
- Video files selected for posting, captions, privacy choices, interaction settings, commercial content disclosures, and AI-generated content disclosures.
- Messages sent to the support contact.
Technical information
- Essential encrypted session cookies, request timestamps, IP addresses, browser and device information, and diagnostic security logs that may be processed by our hosting provider.
4. How and why information is used
We process information only as needed to provide the creator-requested service, obtain authorization, display the connected account, retrieve current creator safeguards, validate publishing settings, transfer a creator-selected video to TikTok, show publishing status, prevent fraud or misuse, protect the service, and respond to support or legal requests.
Depending on applicable law, the legal basis may be the creator's consent, performance of the service requested by the creator, compliance with legal obligations, or our legitimate interest in securing and operating BBT. A creator may withdraw TikTok authorization at any time using the Disconnect control.
5. TikTok authorization and creator control
BBT requests only user.info.basic, video.upload, and video.publish. Authorization is initiated only when a creator selects “Connect.” video.upload sends a creator-selected draft to TikTok for editing and posting in the TikTok app. video.publish sends content only after the creator previews the video, selects available TikTok settings, makes required disclosures, and expressly confirms TikTok's applicable posting terms.
6. Storage and retention
- OAuth tokens and basic profile data are stored in an encrypted, secure, HTTP-only session cookie for no longer than 30 days, or until the creator disconnects, the token expires, or authorization is revoked.
- Selected video files are transmitted to TikTok for the requested post and are not intentionally retained in BBT application storage after the request completes.
- Captions and publishing settings are processed for the active request and are not intentionally retained in BBT application storage after the session ends.
- Security and request logs may be retained by Cloudflare for the period configured or required for platform security and diagnostics.
- Support correspondence is retained only as long as reasonably necessary to resolve the request and meet legal obligations.
7. Sharing and service providers
BBT does not sell or rent personal information. Information may be disclosed only:
- to TikTok, when the creator authorizes account access or asks BBT to publish content;
- to Cloudflare, which hosts and secures the website and processes network requests;
- to professional advisers or authorities when reasonably necessary to comply with law, enforce rights, or protect users and the service; or
- in connection with a legitimate transfer of the service, subject to appropriate safeguards and notice where required.
8. International processing
TikTok and Cloudflare may process information in countries other than the creator's country. Where required, we rely on contractual, consent-based, adequacy, or other lawful safeguards provided by applicable law and the relevant service provider.
9. Cookies
BBT uses only cookies necessary to secure the OAuth flow and maintain the creator's encrypted TikTok session. These cookies are not used for behavioral advertising. Blocking essential cookies will prevent TikTok connection and publishing.
10. Security
We use HTTPS, server-side handling of TikTok credentials, encrypted session data, HTTP-only and secure cookie controls, CSRF state validation, least-privilege scopes, input validation, and restricted retention. No internet service can guarantee absolute security; suspected security issues should be reported promptly to the contact above.
11. Creator rights, access, and deletion
Subject to applicable law, creators may request access, correction, deletion, restriction, portability, or objection regarding their personal information. Creators may also withdraw consent.
- Use “Disconnect” in BBT to revoke the active TikTok token and delete the BBT session cookie.
- Remove BBT from TikTok's connected-app permissions to revoke access directly through TikTok.
- Email hidenari12317@gmail.com for an access or deletion request. We may need to verify the requester before acting.
12. Children
BBT is not directed to children and is not intended for anyone who is not legally eligible to authorize a TikTok account or enter into these Terms. We do not knowingly collect personal information from children. Contact us if you believe a child has provided information.
13. Required disclosures and legal requests
We may preserve or disclose information when reasonably necessary to comply with applicable law, a valid legal process, or obligations relating to security, fraud prevention, and protection of rights. We will limit disclosures to what is legally required.
14. Changes to this policy
We may update this policy to reflect legal, technical, or service changes. The effective date above will be revised, and material changes will be communicated through the website or another appropriate method before they take effect when required.
15. Questions and complaints
Send privacy questions or complaints to hidenari12317@gmail.com. Creators may also have the right to contact their local data protection authority.