How we work with the platforms
Copypen publishes to accounts you own. You connect them yourself through each platform’s official sign-in, you choose what goes out and when, and you can disconnect at any time. We ask for the narrowest set of permissions that lets that work.
TikTok
- user.info.basic and user.info.profile — your open ID, display name, username and avatar, shown in Copypen so you can see which account a post is going to.
- video.publish — publishing the video you scheduled directly to your own profile, at the time you chose, and nothing else.
- video.list — requested only if you switch analytics on. It reads view, like, comment and share counts of the videos Copypen published for you.
Facebook, Instagram and Threads
- Publishing to the Pages, Instagram Business accounts and Threads profiles you connected and selected.
- Reading aggregate performance figures — views, reach, likes, comments, shares, saves — for posts Copypen published.
- Reading and replying to comments on those posts, when you turn that feature on.
What we never do
- We never ask for or store your social media password. Every connection uses the platform’s own official sign-in.
- We never read your private messages, your follower lists, your drafts, or content our service did not publish for you.
- We never touch an account you have not explicitly connected and selected.
- We never sell your data, use it for advertising, share it with other users, or send platform data to our AI providers.
- Access tokens are encrypted at rest (AES-256-GCM) and are never shown to you or to anyone else.
- Disconnecting an account deletes its stored tokens and records immediately, from the Connect page inside the app.
We operate inside each platform’s developer terms and content policies, including the TikTok Developer Terms of Service and the Meta Platform Terms. The full detail of what we collect and how long we keep it is in our Privacy Policy.