Privacy Policy

Last updated: February 26, 2026

1. Introduction

PostDeskAI ("we", "our", "us") is an AI-powered content generation and social media publishing platform operated by firstSites. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.

By using PostDeskAI, you agree to the collection and use of information as described in this policy.

2. Information We Collect

2.1 Account Information

• Your name and email address when you register
• Your TikTok username, display name, and profile information (obtained via TikTok OAuth 2.0 authorization)
• OAuth access tokens and refresh tokens required to post content on your behalf

2.2 Content You Provide

• Knowledge base files you upload (e.g. text files containing your expertise, menu items, product information, or best practices)
• Images and photos you upload for use in content generation
• Brand guidelines, hashtags, and preferences you configure

2.3 Generated Content

• AI-generated text, images, and videos created by the platform on your behalf
• Metadata associated with published content (timestamps, post IDs)

2.4 Usage Data

• Log data such as IP address, browser type, and pages visited
• Feature usage and interaction data within the platform

3. How We Use Your Information

We use the information we collect to:

• Generate text content using AI (Claude via Azure AI Foundry) based on your uploaded knowledge base
• Generate images using AI (DALL-E via Azure AI Foundry) to accompany your content
• Create short-form videos by combining images, captions, and royalty-free background music
• Publish videos to your TikTok account on your behalf using TikTok's Content Posting API
• Provide AI-powered campaign recommendations for agency clients
• Improve and maintain the platform's functionality
• Communicate with you about your account and service updates

4. Third-Party Services

To provide our service, your data may be processed by the following third-party services:

• TikTok (ByteDance) — We use TikTok's Content Posting API to publish videos to your TikTok account. Your TikTok profile information and access tokens are used solely for this purpose. TikTok's privacy policy: https://www.tiktok.com/legal/privacy-policy
• Microsoft Azure AI Foundry (Claude) — Your knowledge base content is sent to Claude AI to generate text for your videos. No personal account information is sent to this service.
• Microsoft Azure AI Foundry (DALL-E) — Text prompts derived from your content are sent to DALL-E to generate images. No personal account information is sent to this service.
• Pixabay — We source royalty-free background music from Pixabay's library. No user data is shared with Pixabay.

5. Data Storage and Security

• Your data is stored on secured cloud infrastructure
• OAuth access tokens are encrypted at rest and in transit
• We use HTTPS for all data transmission
• Access to user data is restricted to authorized personnel only
• We retain your data only for as long as your account is active or as needed to provide the service

6. Data Sharing

We do not sell, rent, or trade your personal information to third parties.

We share data only with the third-party services listed in Section 4, solely for the purpose of providing the PostDeskAI service. We may also disclose information if required by law or to protect our legal rights.

7. Your Rights

You have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your account and all associated data
• Revoke access — Disconnect your TikTok account at any time through TikTok's settings (Settings → Security → Manage app permissions) or by contacting us
• Data portability — Request an export of your data in a machine-readable format
• Withdraw consent — Withdraw your consent for data processing at any time by discontinuing use of the service

8. Data Retention

• Account data is retained for the duration of your active account
• Upon account deletion, all personal data, knowledge base files, images, and tokens are permanently deleted within 30 days
• Generated content that has been published to TikTok remains on TikTok's platform and is subject to TikTok's own data policies

9. Children's Privacy

PostDeskAI is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete that information.

10. International Data Transfers

Your data may be processed in countries other than your own, including the United States and other regions where our third-party service providers operate. By using PostDeskAI, you consent to such transfers.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have a privacy concern, please contact us at:

Email: contact@firstsites.com.au