Privacy Policy

Effective date: 5 November 2026

This policy explains how Orthexa ("we") handles information when you use Kako tijelo radi at https://tiktok.orthexa.com (the "Service").

1. Information we receive from TikTok

When you log in with TikTok and approve access, TikTok gives us:

• Basic profile (scope user.info.basic): your open ID, display name and avatar, used only to show who is logged in.
• Creator info (scope video.publish): your nickname, username, avatar, available privacy options, interaction settings and maximum video length, used only to build the posting form exactly as TikTok requires.
• Access and refresh tokens that let the Service post to your account when you click Post.

2. Videos and captions

When you post, your video passes through our server directly to TikTok as it uploads. We do not store, keep copies of, analyze or reuse your videos or captions.

3. How we store data

Your TikTok tokens are kept server-side in an encrypted-at-rest key-value store (Cloudflare Workers KV), linked to a random session ID held in a secure, HttpOnly cookie. Tokens are never sent to your browser. Session data expires automatically (at most 30 days) and is deleted immediately when you log out, at which point we also ask TikTok to revoke the token.

4. What we don't do

We do not sell or share your data, use it for advertising, or build profiles. We don't use analytics or tracking cookies. The only cookie is the session cookie needed to keep you logged in.

5. Service providers

The Service runs on Cloudflare, Inc., which processes requests and stores session data on our behalf. Your videos and post details go to TikTok, whose handling of them is governed by TikTok's Privacy Policy.

6. Your choices and rights

You can log out at any time to delete your session, and remove the app's access in TikTok under Settings and privacy → Security → Manage app permissions. Depending on where you live (for example under the GDPR), you may have rights to access, correct or delete your data, or object to processing; email us to exercise them. You can also complain to your local data protection authority.

7. Children

The Service is not intended for anyone under 18 or below the minimum age required to use TikTok in their country.

8. Changes

We may update this policy; the effective date above shows the latest version.

9. Contact

Orthexa · info@orthexa.com