Privacy Policy
Last updated: September 30, 2026
This Privacy Policy explains how MECMISR Hitmaker collects, uses, stores, shares and protects information when you use the website, authenticated Studio and connected services, including TikTok Login Kit and the TikTok Content Posting API.
1. Information we collect
We may collect information you provide directly, including account registration details, project information and support requests. When you connect TikTok, we may receive the basic profile information you authorize TikTok to provide through user.info.basic, such as open_id, display name and avatar information. We also process technical information needed to operate and secure the service, including IP address, browser/device information, request timestamps, security logs, session data and authentication state.
2. How we use information
We use information to provide and maintain Hitmaker, authenticate users, display connected-account status, process creator-requested actions, secure the service, troubleshoot issues, prevent abuse, respond to support requests and comply with applicable legal obligations.
3. TikTok connection
TikTok authorization is performed through TikTok's official Login Kit. MECMISR Hitmaker does not ask for or collect your TikTok password. The current integration requests user.info.basic and video.upload only for the described product workflow.
4. TikTok content transfer and publishing
Hitmaker uses video.upload only when an authorized creator explicitly requests that a selected video be transferred to the creator's connected TikTok account as a draft. The current workflow does not use Direct Post. The creator continues reviewing, editing and publishing inside TikTok.
5. Cookies and authentication data
We may use strictly necessary cookies or similar session mechanisms for authentication, security, OAuth state validation and service operation.
6. How we share information
We do not sell personal information. Information may be shared with service providers only as necessary to operate the service, with connected platforms when you request an integration action, when required by law, or when necessary to protect users, MECMISR or the service from fraud, abuse or security threats.
7. Data storage and retention
Authorization tokens and service data are stored on systems controlled by MECMISR or its infrastructure providers and retained only as long as reasonably necessary to provide the requested service, maintain security and operational records, satisfy legal requirements or resolve disputes.
8. Your choices, revocation and deletion requests
You may disconnect or revoke TikTok authorization through TikTok where available. You may contact MECMISR to request access to, correction of or deletion of personal information associated with Hitmaker, subject to applicable law and legitimate retention requirements. Requests can be sent to info@mecmisr.com.
9. Security
We use reasonable administrative and technical safeguards designed to protect information. Authorization credentials are handled server-side and are not intentionally exposed to other users. No method of transmission or storage can be guaranteed to be completely secure.
10. Children
Hitmaker is not directed to children under the minimum age required to use the connected services in their jurisdiction, and we do not knowingly seek to collect personal information from children in violation of applicable law.
11. International processing
Depending on the location of users and service providers, information may be processed in countries other than the country in which it was originally collected.
12. Changes to this policy
We may update this policy when the service, legal requirements or connected platform requirements change. The last-updated date identifies the current published version.
13. Contact
MECMISR Hitmaker is operated by MECMISR. Privacy questions and data requests may be sent to info@mecmisr.com. Official corporate website: https://mecmisr.com/.