Casa Ual — Privacy Policy

Last updated: May 11, 2026

Casa Ual (the "App", "we", "us") is a web application available at casaual.com.br. This Privacy Policy explains how Casa Ual collects, uses, and protects your information when you use the App, which integrates with TikTok via the official TikTok for Developers APIs.

1. Information We Collect

Casa Ual collects only the information strictly necessary for the App to function:

• TikTok OAuth tokens: access token, refresh token, open_id, and authorized scopes received directly from TikTok after you authorize the integration via Login Kit. Scopes requested: user.info.basic, video.upload, video.publish.
• TikTok profile data: avatar, display name, and internal identifier (open_id), as returned by the TikTok user.info.basic API. Data is shown only to you within Casa Ual.
• Uploaded videos: video files (.mp4, .mov) you select locally for scheduling. Files are stored temporarily on our server only for the time needed to forward them to TikTok.
• Technical logs: access timestamps, source IP address, and API responses, retained for up to 30 days for diagnostics and security.

2. How We Use Your Information

Casa Ual uses your information exclusively to:

• Authenticate you and maintain your session in the App;
• Upload and schedule videos to your own TikTok account, with your explicit authorization;
• Display the history of operations performed within Casa Ual;
• Ensure service security and stability.

Casa Ual does not perform profiling, targeted advertising, or sell or share your data with third parties for commercial purposes.

3. Data Sharing

Casa Ual shares data only with TikTok, via official APIs, and exclusively to execute operations you have authorized (upload and publish videos). No data is shared with any other third party, except as required by court order or competent authority.

4. Storage and Security

Data is stored on our own VPS server with restricted SSH-key access and firewall protection. Communications use TLS 1.2+ (HTTPS via Let's Encrypt). OAuth tokens are never exposed in URLs or public logs.

5. Your Rights (LGPD)

In compliance with the Brazilian General Data Protection Law (LGPD, Law 13.709/2018), you have the right to:

• Request access to your stored data;
• Request correction of incomplete or outdated data;
• Request deletion of your data at any time;
• Revoke consent (by disconnecting Casa Ual on TikTok or by contacting us);
• Request data portability.

6. Revoking Access

You may revoke Casa Ual's access to your TikTok account at any time via the "Connected apps" settings in your TikTok account. After revocation, all stored tokens become invalid and are removed from our system in the next scheduled cleanup.

7. Cookies

Casa Ual uses only strictly necessary session cookies (to keep you authenticated during use). We do not use third-party cookies, advertising trackers, or behavioral analytics tools.

8. Children

Casa Ual is not intended for users under 13 years of age. We do not knowingly collect data from minors. If we discover inadvertent collection, the data will be removed immediately.

9. Changes to this Policy

This Policy may be updated to reflect legal, technical, or scope changes. Material changes will be communicated on casaual.com.br.

10. Contact and DPO

To exercise your rights or for privacy questions, contact us at the address available at casaual.com.br. Email: contato@casaual.com.br. We respond within 15 business days.