This Policy explains how we process information when external users visit the public self-service tool at tk.pengbo.cc, authorize TikTok, and direct a publishing request.
This Policy takes effect on September 3, 2026. It applies only to the public Pengbo account, TikTok connection, and publishing tool at tk.pengbo.cc, which is open to eligible external users in supported regions without a Pengbo employment or client relationship. It does not apply to other websites, products, or third-party platforms.
Where European data-protection law applies, we process information as necessary to provide the service you request, based on your consent where required, to comply with legal obligations, and for our legitimate interests in securing, maintaining, and improving the service, provided those interests do not override your rights.
Login permission is used only to identify the TikTok account you authorized. Publishing permission is used only to submit content you selected to that account. We do not read or display historical videos, follower statistics, or unrelated account data, and we do not publish automatically on your behalf.
We do not sell personal information. To provide the requested feature, relevant information is sent to TikTok as needed. We may also disclose the minimum information needed to hosting, security, and infrastructure providers, or to an authorized authority when required by law.
Your selected video is transferred and processed during the publishing request only to complete that TikTok publication. We do not use uploads for training or advertising profiles and do not merge them with other websites, products, or business systems. Temporary files are removed after publishing completes or the request ends, subject to the shortest period needed for operation and security.
The browser uses secure identifiers scoped to the tk.pengbo.cc host for your Pengbo account and the TikTok connection. TikTok tokens are stored server-side and are not written into browser pages. Pengbo account sessions expire by default within 30 days; TikTok connection sessions expire by default within 24 hours and are cleared when you disconnect. Logs retained for security, dispute handling, or legal obligations are deleted or anonymized when the purpose is complete.
The tool uses necessary account and TikTok connection session cookies. These cookies are server-readable only, transmitted securely, restricted to the same site, and not shared across domains. Disabling the necessary cookies may prevent sign-in, account connection, and publishing from working.
The tool is deployed in the Philippines, outside mainland China. TikTok or infrastructure providers may process information in other countries and regions. The tool is available only to users outside mainland China where local law and TikTok terms allow TikTok use. Do not access, connect, or use the tool from mainland China. This site does not provide, promote, or assist with bypassing network, regional, or platform restrictions.
We use encrypted transport, one-way password hashing, server-side token storage, least privilege, access control, separate logs, sign-in rate limiting, and necessary security monitoring to protect information. No internet transmission or storage system can be guaranteed absolutely secure; we will handle and notify affected users of security incidents as required by law.
You may disconnect TikTok and may request access, correction, deletion, restriction, portability, or objection concerning relevant personal information we hold, and may withdraw prior consent where legally available. We process requests after verifying the requester and account relationship. Some information may be retained for a limited period for security, dispute resolution, or legal obligations. If European data-protection law applies, you may also lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local supervisory authority.
The tool is not intended for users below the minimum age required by local law or TikTok terms. If we discover information that does not meet the age requirement, we will take reasonable steps to delete it and terminate the related session.
We may update this Policy when the service, law, or TikTok policies change. Updated versions will be posted on this page with a new effective date.
Data controller and operator: PENGBO CONSULTING S.L., a company registered in Spain (NIF B44864817). Registered address: Calle Toledo 109, 3º C, 28005 Madrid, Spain. For privacy, data-deletion, or TikTok authorization requests, contact [email protected].