Slick Social

Privacy Policy

Last updated: July 21, 2026

This Privacy Policy explains what information Slick Social ("we," "us") collects from users of the Slick Social social media management platform ("the Service"), how that information is used, and the choices users have regarding their data.

1. Information We Collect

• OAuth tokens — access tokens and refresh tokens issued by third-party platforms (such as Google, Meta, and TikTok) when you authorize Slick Social to act on your behalf.
• Account identifiers — the platform-side IDs of accounts you connect, such as TikTok user IDs, advertiser IDs, Google Ads customer IDs, Search Console properties, Google Business Profile locations, and channel identifiers.
• Video and content metadata — titles, captions, hashtags, scheduling times, target audiences, and the status of publish attempts. We do not retain the source video file after a successful upload to the destination platform.
• Operational metadata — timestamps, error messages, and minimal application logs needed to operate and debug the Service.

2. How We Use This Information

The information described above is used solely to publish content and run campaigns on your behalf, exactly within the scopes you have granted, and to operate the Service. Specifically, OAuth tokens are used to call the relevant platform APIs (for example, the TikTok Content Posting API) to upload, schedule, and report on content you have asked us to publish.

3. Data Sharing

We do not sell, rent, or trade your data to third parties for marketing or advertising. We do not use your content or account data to train machine learning models. The only parties that receive your data are:

• The third-party platforms you have explicitly connected (e.g., TikTok), and only the data those platforms require to fulfill your requests.
• Infrastructure providers strictly used to host the Service, under standard confidentiality obligations.
• Authorities, where compelled by valid legal process.

4. Third-Party APIs

Slick Social integrates with third-party platforms via their public APIs, including but not limited to Google, Meta, and TikTok. Your use of those features is also subject to the privacy policies of the respective platforms. You can revoke Slick Social's access to any connected platform at any time from that platform's app settings (for Google, via myaccount.google.com/permissions), and we will retain only the minimum metadata necessary to operate the Service.

5. TikTok User Data

When you connect a TikTok account with "Connect TikTok", you sign in on TikTok and approve exactly these permissions: user.info.basic, video.upload and video.publish. Slick Social then stores:

• Your TikTok open_id: the identifier TikTok gives our app for your account, so we know which account is connected.
• Your display name and avatar: shown in Slick Social so you can see which TikTok account a business is connected to.
• Access and refresh tokens: used only to publish the videos you choose, send drafts to your TikTok inbox, and check the publishing status of those posts. They are kept on our own servers with access restricted to the service, and are never shared or sold.

We do not read your followers, messages, videos or analytics on TikTok, and we never post anything you did not submit yourself.

How to disconnect. In Slick Social open TikTok Studio and press Disconnect TikTok. We revoke the access token with TikTok and delete the stored open_id, display name, avatar and tokens immediately. You can also remove Slick Social at any time in the TikTok app under Settings and privacy → Security → Manage app permissions. To have all other data deleted, email [email protected].

6. Google User Data

When you connect a Google account, Slick Social requests access to the following Google services, and uses the data obtained from them only as described:

• Google Ads — to read campaign performance and to create, budget, pause, and resume ad campaigns you manage through the Service.
• Google Search Console — to read search performance data (queries, clicks, impressions, positions), manage sitemaps, and request indexing for pages of websites you have verified.
• Google Business Profile — to read and manage the business listings, reviews, and review replies of the profiles you connect.

Google user data is used solely to provide the user-facing features described above. It is displayed to you in your dashboard and stored only to the extent needed to operate the Service (tokens and account identifiers). We do not sell Google user data, do not use it for advertising purposes of our own, do not transfer it to third parties except as necessary to provide the Service or comply with law, and do not use it to train machine learning or AI models.

Slick Social's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Data Storage and Security

OAuth tokens and other credentials are stored on access-controlled servers. We follow industry-standard practices to protect data in transit (TLS) and at rest. No system is perfectly secure, but we work to minimize attack surface and to respond promptly to any incident affecting user data.

8. Data Retention and Your Rights

You may request:

• A copy of the personal data Slick Social holds about you.
• Correction of any inaccurate data.
• Deletion of your account and associated data. We will honor deletion requests within a reasonable timeframe, except where retention is required for legal or audit reasons.

Requests can be sent to the contact address below.

9. Children

The Service is intended for use by businesses and individuals aged 18 or older. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may revise this Privacy Policy from time to time. The "Last updated" date above will always reflect the most recent revision. Material changes will be communicated through the Service.

© 2026 Slick (CR 459750, Kuwait). All rights reserved.