Privacy Policy

1. Who we are

This policy explains how WROS ("WROS", "we", "us") handles personal data when you use WROS Studio, our desktop content tool, and its integrations with TikTok and other social platforms. WROS is based in the United Kingdom and is the controller of personal data described here. Contact: info@wros.co.uk.

2. Data we process

Data	Source	Why
TikTok account display name and open ID (user.info.basic)	TikTok, after you sign in with TikTok	To show which account is connected and to make sure videos are sent to the correct account
TikTok access and refresh tokens	TikTok, after you authorise the app	To upload videos you choose to your TikTok inbox (video.upload)
Videos, captions and hashtags you prepare	You	To upload the video you select to your TikTok inbox as a draft
Email correspondence	You, if you contact us	To respond to your request

We do not request access to your followers, private messages, contacts, location, or videos posted by other people. We do not use TikTok data for advertising, profiling or selling to anyone.

3. Where data is stored

WROS Studio runs on the user's own computer. TikTok tokens are stored in the operating system's secure credential store (macOS Keychain) on that computer and are not sent to WROS servers. Videos and captions are stored locally until you delete them. Uploaded videos are transmitted directly from your computer to TikTok over encrypted HTTPS connections.

4. Legal basis

We process this data to provide the service you have asked for (performance of a contract) and, where relevant, our legitimate interest in operating and securing the tool. You can withdraw authorisation at any time.

5. Sharing

Data is shared only with the platform you choose to publish to (for example TikTok, which processes it under its own privacy policy) and with service providers strictly needed to run the tool. We do not sell personal data.

6. Retention and deletion

Tokens are kept until you disconnect the account in WROS Studio, revoke access in TikTok (Settings → Security → Apps and services permissions), or they expire. Disconnecting deletes the stored tokens from the Keychain. Local videos and captions are kept until you delete them. To ask us to delete any data we hold, email info@wros.co.uk.

7. Your rights

Under UK GDPR you can request access to, correction of, deletion of, or a copy of your personal data, and you can object to or restrict processing. Contact info@wros.co.uk. You can also complain to the Information Commissioner's Office (ico.org.uk).

8. Children

WROS Studio is a business tool and is not intended for anyone under 18.

9. Security

We use OAuth 2.0 with PKCE, encrypted connections, and the operating system's secure credential storage. No method is perfectly secure, but we take reasonable steps to protect your data.

10. Changes

We will update this page if our practices change and show the new effective date above.