Social Media Authorization and Integration Consent

SOCIAL MEDIA INTEGRATION AND AUTHORIZATION CONSENT FORM

This text has been prepared to provide information about API access, data processing processes, and security standards provided through social media accounts (Instagram, TikTok, etc.) connected to the system by users within the scope of the PostAIPilot (Post AI Pilot) service offered by Furkan Pehlivanoğlu Sole Proprietorship.

1. What Permissions and Data Are Being Collected?

When you connect a social media account to PostAIPilot, the following data is accessed within the scope of the authorization you provide through the official authorization screen of the relevant platform (Meta, ByteDance, etc.):

A. Instagram Business & Creator (Meta):

• Profile Information: Username, account ID, profile picture, and biography.
• Content Management: Publishing posts (Reels, Stories), adding descriptions, and managing media.
• Statistics: Key performance data such as impressions, engagement, and follower demographics.

B. TikTok (Login Kit & Content Posting):

• Profile Information: TikTok username, OpenID, avatar, and account type.
• Video Management: Uploading videos, publishing content, and monitoring video status.
• Access Permissions: Authorizations granted under "video.publish" and "user.info.stats".

Important Note: PostAIPilot never requests, sees, or stores your passwords for any social media platform. Connections are entirely established via the official OAuth 2.0 protocol and access tokens.

2. Content Planning and Sharing Process

You have complete control over what is shared through your linked accounts:

• Approval Mechanism: The system will not automatically generate and share content unless you add it to the scheduler or click the "Share" button.
• API Transfer: When it's time to share, images, videos, and text files are transferred to the secure endpoints of the respective platforms (Instagram Graph API or TikTok Content Posting API).
• Draft Mode: If you prefer, instead of automatic sharing, you can create content as drafts only and download it manually.

3. Data Transfer and Third Parties

PostAIPilot transfers your data to the relevant platform providers so that your content can be published:

• Meta Platforms Inc. (for Instagram and Facebook operations)
• TikTok Technology Limited / ByteDance (for TikTok operations)

These platforms process the data transferred to them within the framework of their own Privacy Policies and Terms of Use. PostAIPilot cannot be held responsible for the internal workings or data processing policies of these platforms.

4. Security of Access Tokens

Access keys (tokens) generated when you linked your account:

• It is stored in highly secure and encrypted databases.
• It is used only by server services required for data sharing and statistics retrieval processes.
• It will never be sold to third parties, shared with advertising networks, or used in marketing activities.

5. Disconnecting and Deauthorizing

You are always in control. You can terminate authorization immediately in the following ways:

• PostAIPilot Panel: Go to Settings > Connected Accounts and click the "Disconnect" button. This will permanently delete the token from our system.
• Platform Settings: By removing the PostAIPilot app's access permission through Instagram (Apps and Websites) or TikTok (Security and Sessions) settings.

6. Your Rights Under the Personal Data Protection Law (KVKK)

In accordance with the Law No. 6698 on the Protection of Personal Data;

• To find out if your data is being processed,
• Checking whether it is being used for its intended purpose,
• You have the right to request the deletion of your data when the reasons requiring its processing no longer exist.

For all your questions, comments, and claims, you can contact us via info@postaipilot.com .