1. Who we are

Online Turkish Lessons is operated by Antiosoft Sosyal (“we”, “us”). Contact: sosyal@antiosoft.com.

2. What the Service does

The Service produces Turkish lesson videos and publishes them to social media accounts that the account owner has connected: YouTube (Google), Instagram and Facebook (Meta), and TikTok. An account is connected only when its owner signs in on the platform's own login page and grants permission. We never see or store passwords.

3. Data we process

PlatformDataWhy
TikTok (Login Kit, Content Posting API)Access token and refresh token, your TikTok open ID, the granted scopes (user.info.basic, video.upload, video.publish). At posting time we read your creator info: nickname, username, avatar URL, the privacy options available to you, your comment/duet/stitch settings and your maximum video length.To show you which account you are posting to, to offer only the options TikTok allows, and to upload and publish the video you chose with the settings you chose.
YouTube (Google)OAuth refresh token for the scopes youtube.upload and youtube.readonly; channel ID and title.To upload lesson videos to the connected channel and confirm their status.
Instagram / Facebook (Meta)Facebook Page access token, Page ID, Instagram professional account ID and username; permissions pages_show_list, pages_read_engagement, pages_manage_posts, instagram_basic, instagram_content_publish, business_management.To publish Reels to the connected Page and Instagram account and read their publishing status and links.
Publishing recordsFor each post: video file fingerprint (SHA-256), platform, time, status, the platform's post ID and link.To prevent duplicate posts, respect daily limits and show you what was published.

We do not collect your followers, messages, contacts, viewing history or analytics data, and we do not read or post anything on any account other than the one you connected.

4. Where data is stored and how it is protected

Tokens and publishing records are stored only on the computer or server that runs the Service, in files readable only by the Service (file permission 600) and in protected environment variables. Tokens are sent only to the platform that issued them, over HTTPS, in request headers. They are never written to logs, never shared, and never placed in URLs. The posting page runs locally (localhost) and is not reachable from the internet.

5. Sharing

We do not sell, rent or share personal data with third parties, and we do not use it for advertising. Data is sent only to the platform you are publishing to (TikTok, Google/YouTube or Meta), as required to perform the action you requested. Our infrastructure providers (server hosting) may store the files described above on our behalf.

6. Retention

Tokens are kept until you disconnect the account or ask us to delete them; expired tokens are replaced automatically. Publishing records are kept while the related posts exist, so we can prevent duplicate posts. When you disconnect an account, we delete its tokens within 30 days.

7. Your choices and rights

Depending on where you live (for example under the GDPR or Turkey's KVKK), you may also have the right to object, to restrict processing and to complain to a data protection authority.

8. Children

The Service is not directed to children under 13 (or the minimum age in your country) and is not used to connect their accounts.

9. Platform policies

Use of each platform is also subject to that platform's terms: TikTok Terms of Service, YouTube Terms of Service, Google Privacy Policy, Meta Privacy Policy. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

10. Changes

We will post any change to this policy on this page and update the effective date.