Privacy Policy

Last updated 27 October 2026

YongFlow (www.yongflow.com) lets your AI assistant post and answer comments on the Facebook Pages and YouTube channels you connect. This page explains what we store, what we use it for, and how you delete it. Contact: gokusen.nz@gmail.com

What we store

• Your YongFlow account: name, email and password (stored as a hash).
• Facebook Pages: Page ID and name, the Page access token (encrypted), comments on the Page (commenter ID, name and text) with our replies, the Page's Messenger chats (customer name, messages, attachments, notes and labels), and posts sent through YongFlow.
• YouTube channels: channel ID and title, the refresh token from Google (encrypted), videos sent through YongFlow (video ID, description, publish time and status), and daily YouTube quota counts. A video's title, visibility and made-for-kids answer are sent to YouTube and not kept. If you set YouTube comment reply rules, we read the channel's comments and store the commenter ID, name and text.
• Uploaded files: images and videos your assistant uploads for posting, kept in Cloudflare R2 and deleted automatically after 30 days.
• API keys: stored as a hash, with the key's first characters so you can tell your keys apart.
• Webhooks: the URL you set for YongFlow to send events to, and a log of the events sent (copies of comments and chat messages).
• Cookies: a sign-in cookie, and short-lived cookies while you connect a Page, channel or TikTok account. No advertising or tracking cookies.

How we use it

Only to do what you or your AI assistant ask: publish, schedule, reschedule and cancel posts, reply to comments by the rules you set, show your data in the dashboard, and return it to the assistants that hold your API keys. We do not sell your data, use it for advertising, or use it to train AI models.

Who receives it

• Facebook and YouTube: the content you ask us to post or reply with is sent to that platform as your Page or channel.
• Your assistants and endpoints: programs holding your API keys can read your account's data, and we send events to the URL you set.
• Infrastructure providers: Cloudflare (website, files and request logs) and DigitalOcean (database) process data to run YongFlow.
• Anyone the law requires us to disclose it to.

YouTube and Google user data

• YongFlow uses YouTube API Services. By using YongFlow's YouTube features you agree to be bound by the YouTube Terms of Service. Google handles your data under the Google Privacy Policy.
• YongFlow's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Pressing "ลบออก" (Remove) on the channel in the YongFlow dashboard deletes our copy of its token and its data. To revoke YongFlow's access in your Google Account, use your Google Account permissions page.

Retention and deletion

• Removing a Page or channel in the dashboard deletes its data at once: its token, rules, comment log, posts and chats. A Page or channel with a scheduled post can be removed once that post is canceled or has gone out.
• The log of events sent to a webhook is kept until you delete that webhook or your account.
• If you revoke access in your Google Account, YongFlow can no longer use the channel; its remaining data is deleted when you remove the channel or email us.
• Uploaded files are deleted automatically after 30 days.
• To delete your account and all its data, email gokusen.nz@gmail.com. We delete it within 30 days.

Security

All traffic uses HTTPS. Page and channel tokens are encrypted before they are stored; passwords and API keys are stored as hashes.

TikTok data we receive and store

This section describes YongFlow's TikTok Inbox feature, which is pending TikTok approval. Until then it works on www.yongflow.com and studio.yongflow.com only for TikTok accounts authorized in the app's Sandbox. It is not yet available to the public.

When you connect TikTok, we receive your open ID, display name, and avatar URL. We store the open ID, display name, granted scopes, connection status and times, and access and refresh tokens encrypted before storage. We do not persist the avatar URL in this integration's database.

For video preparation and transfer, we store media and upload identifiers, byte size, file reference and version, send time, who sent it (you in the dashboard, or an assistant and the API key it used), status, the task identifier returned by TikTok, and any error code. We do not request access to TikTok direct messages, a video library, or follower statistics.

TikTok use and recipients

We use TikTok data to maintain the connection, identify your destination account, send a video that you confirm in the dashboard or that your assistant sends with a full-access API key, and check transfer status. Media is stored in Cloudflare R2. When a video is sent, TikTok retrieves it through a signed URL with an expiration time. Open the Inbox notification in the TikTok app to edit and decide whether to publish.

TikTok receives the videos you or your assistant send. Cloudflare and DigitalOcean process data to provide our website, file storage, and database. An assistant holding your full-access API key can upload media and send a video to the Inbox of a TikTok account you connected without waiting for your confirmation in the dashboard. The video stays a draft until you post it in the TikTok app. We do not provide TikTok tokens to your assistants, sell TikTok data, or use it for advertising or AI model training.

TikTok retention, withdrawal, and deletion

We retain the connection and upload history until you remove the TikTok connection or delete your YongFlow account. Media is subject to automatic deletion after 30 days.

Selecting Remove on a TikTok account requests revocation from TikTok. Once revocation is confirmed, or the prior authorization is confirmed invalid, YongFlow deletes the connection, stored tokens, and its upload history. If revocation cannot be confirmed, YongFlow reports the failure and retains the connection so you can retry.

Removing the connection does not immediately remove media from your library or delete files or posts already transferred to TikTok. Use TikTok's controls for data held by TikTok. Email gokusen.nz@gmail.com to request deletion of your YongFlow account and all its data. We delete it within 30 days.

Changes

If we change this policy, we update this page and the date above.