Privacy Policy

Last updated: June 2026

1. Who we are

FipFlow ("we", "us", "our") is a social media scheduling platform. When you use FipFlow, we collect and process certain personal data. This policy explains what data we collect, why, and how we protect it.

2. Data we collect

  • Account data: name, email address, and password (stored as a bcrypt hash).
  • Social account tokens: OAuth access and refresh tokens for your connected social media accounts. These are encrypted at rest using AES-256-GCM.
  • Content data: posts, media files, hashtag groups, and templates you create in Fipflow.
  • Usage data: activity logs, login timestamps, and IP addresses for security purposes.
  • Payment data: billing records processed by Mollie. We do not store full card details.

3. Third-party platform API data (TikTok and others)

When you connect a third-party social media account — such as TikTok, Facebook, LinkedIn, Pinterest, YouTube, Threads, or Instagram — FipFlow accesses data provided through that platform's API following your explicit authorisation. Specifically, when you connect TikTok:

  • We receive your TikTok account identifier and profile information (display name, avatar) necessary to identify your account within FipFlow.
  • We store your TikTok OAuth access and refresh tokens, encrypted at rest using AES-256-GCM, to publish content on your behalf.
  • We access TikTok analytics (views, likes, comments, shares) for posts published through FipFlow, solely to display performance data in your dashboard.
  • We do not sell your TikTok data, share it with any third party other than TikTok itself, or use it for advertising purposes.

You may revoke FipFlow's access to your TikTok account at any time by disconnecting TikTok in FipFlow under Settings → Connected Accounts, or by revoking access directly in your TikTok account settings. Revoking access immediately stops all future publishing and data retrieval.

3. How we use your data

  • To provide and improve the Fipflow service.
  • To publish your scheduled posts to connected social platforms on your behalf.
  • To process payments and manage subscriptions.
  • To send transactional emails (account confirmation, billing receipts).
  • To detect and prevent fraud or abuse.

4. Data retention

We retain your data for as long as your account is active. You can delete your account at any time from Settings → Account → Delete Account. Upon deletion, your personal data is removed within 30 days.

5. Third parties

We share data with social media platforms (Facebook, Instagram, TikTok, LinkedIn, Pinterest, YouTube, Threads, Bluesky, Mastodon) only as required to publish your content. We use Mollie for payment processing. We do not sell your personal data.

6. Your rights (GDPR)

If you are in the EU/EEA, you have the right to access, correct, export, or delete your personal data. To exercise these rights, email us at [email protected].

8. Data deletion requests

You may request deletion of your personal data — including any data obtained through third-party platform APIs such as TikTok — at any time:

  • Delete your FipFlow account from Settings → Account → Delete Account. All personal data is removed within 30 days.
  • Disconnect a specific platform (e.g. TikTok) from Settings → Connected Accounts to remove that platform's access tokens immediately.
  • Email [email protected] with a data deletion request. We will process it within 30 days and confirm by email.

After deletion, we retain only anonymised, aggregate data that cannot be linked to you individually (for example, billing totals required for accounting by law).

9. Contact

Questions about this policy? Email [email protected].