Privacy Policy

Who is responsible

The data controller is Matteo Rigoni, operating the FRONTIERA 2X project.

Privacy enquiries and requests can be sent to support@frontiera2x.it.

Scope of this policy

This policy covers the public FRONTIERA 2X website and the planned connection between the project's operator tools and TikTok Login Kit / Content Posting API.

The TikTok integration is still in development. No public automatic publishing service is currently active.

Information we may process

When someone visits the website, hosting and security systems may process basic technical information such as IP address, request time, requested URL, browser or device information, security signals and diagnostic logs.

If the FRONTIERA operator connects the project's TikTok account, the integration may process only the information needed for that connection and authorized posting: TikTok account identifiers (including open ID), basic account information made available under approved scopes, the scopes granted, access and refresh tokens, token expiry information, content selected for posting, captions or post settings, publish identifiers, status responses and technical error logs.

We do not ask for or receive the TikTok account password. We do not intentionally request unrelated TikTok profile data.

Why we use information

Information is used to operate and secure the website, connect the authorized FRONTIERA TikTok account, maintain that authorized connection, prepare or transmit content selected by the operator, check posting status, troubleshoot failures and comply with applicable obligations.

The operator must control the integration settings and explicitly authorize publication. The integration is not described as a publicly available automatic posting service.

Legal grounds

Where applicable, processing is based on consent or authorization given through TikTok, steps requested by the account operator, and legitimate interests in operating, securing and diagnosing the website and integration. Processing may also occur when required by law.

Tokens and security

TikTok access tokens and refresh tokens are intended to be stored on the server side and are not exposed in public website pages. Reasonable technical and organizational safeguards are used to restrict access, protect credentials in transit and at rest where supported, reduce unauthorized use and investigate security incidents.

No system can be guaranteed completely secure. If you believe FRONTIERA credentials or data may be at risk, contact us promptly.

Sharing and service providers

We do not sell personal data. Information may be processed by TikTok to provide its login and posting services and by technical infrastructure providers used to host, secure or operate the FRONTIERA website and server-side integration, currently including OpenAI / ChatGPT Sites, Cloudflare infrastructure and the separately hosted technical bridge on Vercel where relevant.

Providers process information under their own terms or applicable data-processing arrangements. We may also disclose information where required by law or necessary to protect rights, security and the integrity of the service.

Retention

Personal data is retained only for as long as reasonably necessary for the purposes described above. TikTok tokens are kept only while the authorized connection is needed or until they expire, are revoked or are deleted. Operational and security logs are kept for a limited period appropriate to troubleshooting, abuse prevention and legal requirements.

Content and posting records are removed or minimized when they are no longer needed for the authorized workflow, subject to backup cycles and applicable obligations.

Disconnecting TikTok

The FRONTIERA operator can revoke the app's access through TikTok account settings or request disconnection at support@frontiera2x.it. After revocation or a valid deletion request, stored tokens will no longer be used and will be deleted within a reasonable operational period unless retention is legally required.

Your choices and rights

Depending on applicable law, a person may have rights to request access, correction, deletion, restriction or portability of personal data, to object to certain processing, to withdraw consent, and to complain to a competent data-protection authority.

Requests can be sent to support@frontiera2x.it. We may need to verify the requester's identity before acting.

Changes to this policy

We may update this policy when the website, TikTok integration, providers or legal requirements change. The current version and effective date will remain available at this URL. Material changes will be communicated through an appropriate FRONTIERA channel where reasonably necessary.