Privacy policy.

01Scope and operator

This policy explains data handling by Cli.py, the desktop command-line utility operated by QuantumCore Systems. It covers Cli.py rather than TikTok’s own services. Cli.py is independent and is not affiliated with TikTok.

02Data on your device

Cli.py stores OAuth tokens in the user’s local config file to support authorized TikTok API requests. Local configuration may include account identifiers and authorization-related settings needed for that workflow. The selected video remains a local file until you explicitly confirm upload. Your caption, selected posting settings, returned TikTok username and visibility options, and processing-status information are handled locally as part of the workflow.

QuantumCore Systems does not run a server that stores your OAuth tokens or video files. Your original video is not deleted merely because you publish it.

03OAuth and authorization

You authorize your own TikTok account using Login Kit. TikTok processes the sign-in and authorization and returns OAuth credentials for the authorized API access. Cli.py uses those credentials to request account and posting information, upload confirmed content, and check processing status; it does not access an account without authorization.

Treat access and refresh tokens as sensitive credentials. They are stored locally with owner-only file permissions where supported, but are not encrypted by Cli.py. Remove local credentials and revoke the app’s authorization through TikTok’s account controls when you no longer want access. Deleting the local config alone does not necessarily revoke credentials at TikTok.

04What is sent to TikTok

Before posting, Cli.py retrieves the TikTok username and available visibility settings so you can review the destination and options. These authorized account-information requests can occur before upload confirmation; no video is uploaded at that stage.

Only after your explicit confirmation does Cli.py send the selected video, caption, and chosen posting settings to TikTok through the Content Posting API Direct Post flow. Requests include OAuth authorization and technical information needed to make and track the request. TikTok receives network information such as your IP address. Status checks send the authorization and posting identifiers needed to retrieve processing status. Direct Post targets the authorized profile feed, not Stories.

05Retention and deletion

Local tokens and configuration remain on your device until removed or replaced. Files or workflow information you retain locally, including terminal history, logs you choose to save, and backups, follow your device’s retention settings; Cli.py does not provide an operator-managed deletion schedule.

To remove local data, stop Cli.py, locate the config file using your release’s documentation, and delete its tokens or the file. Remove any saved logs, history, and backup copies that contain sensitive data. Delete your local videos separately if desired. Revoking authorization is a separate action in TikTok’s account controls. Removing local files does not remove content already sent to TikTok; manage published posts and TikTok-held data through TikTok.

06Security limits

Owner-only permissions are applied where supported, but their effectiveness depends on your operating system, filesystem, device configuration, and backups. They are not encryption and cannot protect against every threat, including a compromised device or another process with sufficient access.

Use a trusted device, restrict access to config files and backups, and do not share tokens or include them in support messages. No software or transmission method can guarantee absolute security. If credentials are exposed, revoke authorization through TikTok and remove the affected local credentials.

07Analytics, trackers, and support

Cli.py has no operator analytics or advertising trackers. QuantumCore Systems does not collect your videos or tokens through an operator storage server.

If you contact support by email, QuantumCore Systems receives your email address and the information you choose to send, and uses it to respond to your request. Email handling also depends on the mail providers involved. Do not send tokens, passwords, or private videos. For requests about support correspondence, contact the privacy address below.

08TikTok’s separate processing

TikTok independently processes your authorization, account information, uploaded content, captions, selected settings, and related request data under its own privacy policy, terms, and controls. TikTok determines its own retention, moderation, visibility, and deletion practices. QuantumCore Systems does not control TikTok’s processing. Review TikTok’s current privacy policy and account controls for information and requests concerning data TikTok holds.

09Changes and privacy contact

Updates will be posted here with a revised effective date. For privacy questions, local-data guidance, or requests about information you supplied to support, contact QuantumCore Systems at hello@quantumcore.systems. Effective October 24, 2026.