Privacy Policy

1. Introduction

Vritico ("Vritico," "we," "our," or "us"), available at social.vritico.com, is a social media engagement and automation platform that helps businesses manage comments and messages and automate replies across Facebook and Instagram, and schedule and publish video to TikTok. This Privacy Policy explains what information we collect, how we use it, how we share it, and the choices you have. By using Vritico you agree to the practices described here.

2. Information We Collect

We only collect data needed to provide the service, and only with the permissions you grant when you connect an account.

Account information

• When you sign in with Facebook or Google: your name, email address, and profile picture from that provider.
• When you create an account directly: your email address and a password, which we keep only as a one-way cryptographic hash — never in plain text and never in a form we can read.
• If your organization's administrator adds you as a team member, the name, email address, and role they enter for you, and a record of which administrator added you.
• The list of Facebook Pages, Instagram Business/Creator accounts, and TikTok accounts you choose to connect.

Data from connected Meta accounts

With the permissions you approve, we access and process the following from your connected accounts:

• Messages & conversations on Messenger and Instagram — including message content, message edits, reactions, delivery and read events, message tags, postbacks, opt-ins, and account-linking events — so we can deliver and automate replies.
• Comments on your Facebook Page posts and Instagram posts and live videos, so workflows can reply to or act on them.
• Page & post content (feed) you publish or manage, used to display your posts and match automation triggers.
• Contacts who interact with you ("leads") — the page-scoped ID, display name, and profile picture of people who message or comment on your connected accounts, so you can see and manage those conversations.
• Access tokens issued by Meta for your connected Pages and accounts, which let us perform the actions you configure on your behalf.

Data from connected TikTok accounts

We connect to TikTok using TikTok Login Kit and the Content Posting API, and we request only two permissions: user.info.basic and video.publish. With those, we access and process:

• Basic profile information — your TikTok account identifier (open_id), display name, and profile picture, so we can show you which account is connected. We store only the account identifier and display name.
• Your creator settings — the audience options available to you and whether you have comments, Duet, or Stitch turned off. We read these from TikTok twice: when you open the composer, so we can offer you exactly the choices your account allows, and again immediately before the post publishes, so we respect any change you made in between. We do not store them.
• The publishing options you choose — who can view each video, whether you allowed comments, Duet, and Stitch on it, and whether you disclosed it as promoting your own brand or as a paid partnership. We store these with the scheduled post so that what publishes is exactly what you chose, and nothing else.
• Access and refresh tokens issued by TikTok, used solely to upload and publish the videos you schedule.
• Videos and captions you upload — held in our private object storage and transferred to TikTok when the scheduled post publishes, together with the caption you wrote.

We do not request or receive your TikTok comments, direct messages, follower or following lists, video library, or any video analytics such as views, likes, or shares. We publish only the videos you schedule, and we never read or post on your TikTok account for any other purpose.

Usage data

• Basic logs about how you use Vritico (e.g., workflow runs and their success or failure) used to operate and troubleshoot the service.

Cookies

• A session cookie that keeps you signed in, and a short-lived cookie that carries the anti-forgery state value while you connect a Facebook, Instagram, or TikTok account.
• Both are strictly necessary to operate the service. We set no advertising cookies, no third-party analytics cookies, and no cross-site tracking cookies.

3. How We Use Your Information

• Provide, maintain, secure, and improve the Vritico service.
• Display your connected pages, posts, comments, and conversations inside your dashboard.
• Send replies and run the automation workflows you configure (e.g., replying to comments and sending direct messages).
• Upload and publish the videos you schedule to your connected TikTok account, at the time you chose and with the audience, interaction, and content-disclosure settings you selected for that video.
• Troubleshoot issues, prevent abuse, and keep the platform reliable.

We do not use Meta or TikTok data for advertising, we do not sell it, and we do not use it to build profiles unrelated to the service you requested. We do not use it to train machine-learning models.

4. How We Share Information

We do not sell your personal information or the data of people who interact with you. We share data only:

• With service providers that host and operate Vritico on our behalf (e.g., cloud hosting, database, and infrastructure providers), under contractual confidentiality and security obligations.
• To comply with the law or a valid legal request, or to protect the rights, safety, and security of our users and the public.
• With your direction — for example, when you send a message or reply through the service it is delivered to the recipient via Meta's platforms, and when you schedule a video it is uploaded to TikTok and published to your account.

5. Data Storage & Security

• Data is stored on secured infrastructure and transmitted over encrypted (HTTPS/TLS) connections.
• Access tokens and credentials are protected and access is restricted to the systems and personnel that need them to run the service.
• Videos you upload are stored in a private storage bucket that is not publicly listable or browsable. They are reachable only through short-lived, signed links issued to you or to the publishing job, and those links expire automatically.
• We retain data only as long as your account is active or as needed to provide the service, after which it is deleted (see below).
• We and the service providers who host Vritico may store and process data in a country other than the one you live in. Wherever it is processed, it stays subject to the protections described in this policy and to the confidentiality and security obligations we place on those providers.

6. Data Retention & Deletion

You can delete your data at any time. When you remove Vritico from your Facebook settings, Meta notifies us automatically and we delete the associated data. For TikTok, you can revoke our access at any time from TikTok's own app-permissions screen, which immediately stops us from reading or posting to your account, and email us to have the tokens and account details we hold for it erased. You can request deletion of your Vritico account and all of its data by email at any time. All paths, and what gets deleted, are described on our Data Deletion page. Removing data is permanent and cannot be undone.

Videos you upload are retained while your account is active, so that scheduled posts can publish and you can see what was published. They do not expire on their own; we erase them from our storage when you send us a deletion request as described on the Data Deletion page.

7. Compliance with Meta Platform Policies

Our access to and use of data obtained through Facebook and Instagram complies with the Meta Platform Terms and Developer Policies. We use Meta data only to provide and improve the features you enable, and we honor the data-handling and deletion requirements those policies impose.

8. Compliance with TikTok Platform Policies

Our access to and use of TikTok data complies with the TikTok Developer Terms of Service and the TikTok developer policies that apply to Login Kit and the Content Posting API. TikTok data is used only to deliver the publishing features you enable — we do not sell it, we do not use it for advertising or profiling, and we do not combine it with data from other sources to build profiles of you or your audience. TikTok's own handling of your data is governed by the TikTok Privacy Policy.

9. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at info@vritico.com.

10. Children's Privacy

Vritico is intended for businesses and users aged 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you. Continued use of Vritico after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, contact us at info@vritico.com.