Privacy Policy
Contentos is a research pilot operated by CREATEIT STUDIO LTD in Israel for collecting trend evidence and analyzing videos from TikTok accounts that authorize access.
The research dashboard is publicly accessible. Account connections and administration are restricted to authorized pilot participants.
Data collected
If you connect TikTok, Contentos requests basic profile information (including an account identifier, display name and avatar) and read access to your public videos. Collected video data may include identifiers, titles or descriptions, creation times and available engagement counters. Contentos also collects public trend information from Google Trends and other public sources. Where separately approved and authorized, the Organic Discovery API supplies public hashtag trends and their regional engagement metrics. Public-source collection does not grant access to your private Google account.
Why data is used
Data supports content analysis, trend monitoring, historical comparisons and evaluation of the pilot’s forecasts. The authorized-account integration requests no permission to post videos, read private messages or manage advertisements. Trend outputs are experimental and do not guarantee reach or revenue.
Storage and service providers
Collected evidence and observations are stored in the dedicated Supabase backend. TikTok credentials and authorization tokens are stored server-side using Supabase Vault; they are not intended to appear in browser code or public repositories. The website is hosted through Lovable. TikTok receives the authorization requests needed to connect your account. Access to the backend is limited by its configured service permissions.
YouTube and X public data
When enabled, the pilot uses YouTube API Services to retrieve public video identifiers, titles, channel identifiers, publication dates and available view, like and comment counts. Public YouTube responses and snapshots expire after seven days. They are kept separately from retained forecast history and are not used to create derived trend scores. X collection, when separately enabled with a spending limit, retrieves a small sample of public query-matched posts and available engagement counts; these expire after one hour. Expired provider data is excluded from reads and a cleanup job removes it every 15 minutes. Neither integration requests private messages or permission to publish.
See Google's Privacy Policy and X's Privacy Policy. Contact the operator through your pilot access channel to request removal of cached data associated with you. Removal from this pilot does not delete content on YouTube or X.
Instagram / Meta
The optional Instagram integration uses Facebook Login for a professional account linked to an authorized Facebook Page. Only the explicitly selected Instagram account is retained. It reads available media captions, publication timestamps, permalinks and visible like/comment counters. It does not request private messages, advertising management or publishing permissions. Public hashtag and business watchlist collection stays disabled until the relevant access is approved and a bounded watchlist is configured. These samples are not global trend rankings.
Instagram access tokens are stored server-side in Supabase Vault. Selected media evidence expires after seven days, with cleanup every15 minutes. Missing metrics are not treated as zero. Revocation or token expiry can require reauthorization. To disconnect, revoke Contentos in Facebook Business Integrations; to remove the stored connection and cache, contact diamondscom@gmail.com with your Instagram username, never a password or token. The operator can delete this separate cache and connection without changing unrelated forecast history.
Retention and disconnecting
The pilot retains raw observations, forecast records and outcomes to evaluate performance. These retained records have no automatic deletion schedule or self-service deletion interface; the separate YouTube and X caches follow the shorter expiry rules above. Revoking Contentos in TikTok settings stops future authorized access but does not automatically delete previously collected records. Request removal of your account connection and associated data from the operator through the channel that provided access to this private pilot.
Your requests
For questions, access, correction or deletion requests, contact diamondscom@gmail.com. If that channel is unavailable, open a support request in the project issue tracker to arrange a private follow-up. Do not post personal account data, passwords, authorization codes or tokens in public issues.
Updates
Changes to the pilot’s data practices will be reflected on this page with an updated effective date.