Privacy Policy
Who we are
A13 Cars AI Shorts Manager (“the App”) is a private tool operated by A13 CARZ Limited, Unit 37 Vicarage Field Shopping Centre, Ripple Road, Barking, England, IG11 8DH (“we”, “us”). A13 CARZ Limited is the data controller for information processed by the App. Contact: masum.a13cars@gmail.com.
What the App does
The App republishes videos that A13 CARZ Limited posts on its own TikTok account to its own YouTube channel as YouTube Shorts. It detects new TikTok posts, retrieves the video through TikTok’s official APIs, writes a YouTube title and description, uploads the Short, and shows performance statistics. It is used only by authorised staff of A13 CARZ Limited; it is not offered to the public.
Information we process
- Dashboard sign-in (Google): the email address, name and profile picture of the Google account used to sign in, to confirm the person is an authorised administrator.
- YouTube (Google): the connected channel’s ID and name, an access token and refresh token, and statistics for the channel and the Shorts uploaded by the App (subscriber, view, like and comment counts). The App uploads videos and sets their title, description, tags and privacy setting.
- TikTok: the connected account’s identifier, username, display name and profile picture; an access token and refresh token; metadata of the account’s public videos (ID, caption, title, cover image, duration, dimensions, creation time, link, and view/like/comment/share counts); and, through TikTok’s Data Portability API, the “Posts” data of the account, including download links for the account’s own posted videos. We only request the “posts and profile” category, never direct messages or activity history.
- Dropbox (optional): if connected, the names, sizes, dates and contents of video files in the App’s own Dropbox app folder, used only to find the original version of a TikTok video.
- Video content: copies of the account’s own videos and still frames taken from them, held temporarily while a Short is prepared.
- Technical records: a log of what the App did (for example “video detected”, “published”) and error messages.
How we use it
- To detect new TikTok posts and publish them to the connected YouTube channel.
- To generate YouTube titles, descriptions, hashtags and keywords.
- To show the business owner publishing history, errors and genuine performance statistics.
- To notify the business owner of publications and problems by email.
We do not sell data, use it for advertising, or use it to build profiles of individuals. The legal basis is our legitimate interest in managing our own business’s social media accounts.
Google and YouTube data
The App uses YouTube API Services. By using the App you are also bound by the YouTube Terms of Service, and Google’s handling of data is described in the Google Privacy Policy.
The App’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the features described above, is not transferred to others except as needed to provide those features or to comply with law, is not used for advertising, and is not read by humans except with consent, for security, or as required by law.
You can revoke the App’s access to your Google account at any time at myaccount.google.com/permissions, or with the “Disconnect” button in the App.
TikTok data
TikTok data is obtained only through TikTok’s official Login Kit, Display API and Data Portability API, with the account owner’s authorisation. The App does not scrape TikTok or use cookies or passwords. You can revoke access in the TikTok app under Settings and privacy → Security → Manage app permissions, or with “Disconnect” in the App.
Service providers
- Render (hosting and database, EU region) — stores the App and its data.
- Anthropic — receives the TikTok caption and a few still frames of each video to write the YouTube title and description.
- Resend — sends notification emails to the business owner.
- Google/YouTube, TikTok and Dropbox — the platforms the App connects to.
Some providers may process data outside the UK; where they do, transfers are covered by appropriate safeguards such as the UK International Data Transfer Addendum or Standard Contractual Clauses.
Security
Access tokens are encrypted at rest (AES-256-GCM). The dashboard is restricted to approved Google accounts and all traffic uses HTTPS.
How long we keep it
- Video files and frames: deleted after the Short is published, skipped or fails (normally within a day).
- Access tokens: until the account is disconnected, then deleted.
- Activity logs: 120 days. Notifications: 180 days.
- Publishing history and statistics: while the App is in use; deleted on request.
Your rights and deleting data
Under UK data protection law you can ask to access, correct or delete your personal data, or object to its use. To request deletion of all data held by the App, email masum.a13cars@gmail.com; we will delete it within 30 days. Disconnecting an account in the App immediately deletes its stored tokens. You can also complain to the Information Commissioner’s Office (ico.org.uk).
Changes
We will update this page if the App’s use of data changes, and change the date at the top.