Privacy Policy
Last updated: April 9, 2026
1. Introduction
Bendy BethC (“we,” “our,” “us,” or “the Brand”) is a chronic illness advocacy and education brand operated as an independent creator business. This Privacy Policy explains how the Bendy BethC Content Agent (“the App”) — the Brand’s content management and analytics dashboard, hosted at agent.bendybethc.com — collects, uses, stores, and protects information when it accesses data from the TikTok and Meta APIs on behalf of the Brand’s own social media accounts.
If you are a visitor to this website, a follower of @bendybethc, or a platform reviewer verifying compliance, this document is the full, plain-language description of what the App does with data.
2. TikTok Platform Data
The App uses the TikTok for Developers API to read information about the Brand’s own TikTok account (@bendybethc). The App is not available for general public sign-up — only the Brand itself authorizes it.
2.1 Scopes requested
user.info.basic— the authorizing account’s open ID, union ID, display name, avatar URL, and follower countvideo.list— the authorizing account’s own videos: IDs, captions, cover image URLs, post time, privacy status, duration, view count, like count, comment count, and share count
2.2 How we use TikTok data
- Creator content analytics — understanding which educational posts are reaching the chronic illness community
- Displaying the Brand’s own posts publicly on the /tiktok showcase page on this website
- Planning upcoming content based on what has already resonated with the Brand’s audience
- Aggregated, non-identifying performance reporting for the creator account owner
2.3 What we do NOT do with TikTok data
- We do not sell, rent, or trade TikTok data to any third party.
- We do not use TikTok data to build advertising or tracking profiles of any end users.
- We do not access data from any TikTok account the Brand does not own or operate.
- We do not share TikTok data with AI training providers or model developers.
- We do not retain TikTok data beyond what is needed for the purposes above.
2.4 Storage, retention, and deletion
TikTok access tokens are stored encrypted at rest in the App’s secrets store. Video metadata retrieved from the video.list endpoint is cached locally only as long as needed for the analytics and display purposes above — the cache is refreshed on each API call and older copies are overwritten.
If the Brand revokes the App’s TikTok permissions (from TikTok account settings under Settings and privacy → Security and permissions → Manage app permissions), all cached TikTok data is deleted within 30 days.
Our use of TikTok data complies with the TikTok for Developers Terms of Service.
3. Meta Platform Data (Instagram and Facebook)
The App also uses the Meta Graph API to manage the Brand’s own Instagram and Facebook Page accounts. The same rules apply: we only access data for accounts the Brand owns, we use it for creator analytics and on-site display, we do not sell or share it, and we delete cached data when access is revoked.
4. Information Collected From Website Visitors
When you visit agent.bendybethc.com, our hosting provider (Vercel) may automatically log:
- IP address (often anonymized)
- Browser type, version, and device info
- The page you requested and the referring URL
- Timestamp of the request
This logging is used for operational monitoring, debugging, and security. We do not use it for advertising or cross-site tracking.
5. Cookies
The App uses a single authentication cookie (bb_session) to keep the authorized creator account owner signed in to the dashboard. It is an HttpOnly, Secure, SameSite cookie that does not contain any personal information and is not shared with any third party.
We do not use advertising or cross-site tracking cookies.
6. Third-Party Services
The App integrates with the following third-party providers:
- Vercel — web hosting, CDN, serverless runtime
- TikTok for Developers API — reading the Brand’s own TikTok account data
- Meta Graph API — reading the Brand’s own Instagram and Facebook account data
- OpenAI / Anthropic — AI-assisted draft generation (prompts submitted by Authorized creator account owner only)
Each provider has access only to the information needed to do its job and is bound by its own terms. We do not share TikTok API data with these providers.
7. Data Security
We use reasonable technical and organizational measures to protect the data the App handles, including:
- Encrypted environment variables for API keys and access tokens
- HTTPS/TLS for all connections to the App
- A password-protected dashboard — only the authorized creator account owner can reach authenticated pages
- HMAC-signed session tokens with expiration
No system is 100% secure, but we aim to minimize the amount of data stored, limit who can access it, and delete it promptly when it is no longer needed.
8. Your Rights
Depending on where you live, you may have the right to:
- Access the data the App holds about you
- Correct inaccurate data
- Request deletion of your data
- Object to, or restrict, how the App processes your data
- Withdraw consent for optional processing at any time
See the Data Deletion page for the exact procedure.
9. Children’s Privacy
The App is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, please contact us and we will delete it.
10. International Users
Bendy BethC operates from the United States. If you access the App or visit the website from outside the U.S., be aware that your information may be transferred to, stored in, and processed in the U.S.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected in the “Last updated” date at the top of this page. For significant changes affecting TikTok or Meta data handling, we will additionally note the change in our Developer Platform app notes.
12. Contact Us
For questions about this Privacy Policy, TikTok or Meta data concerns, or any other privacy-related request:
- Email: bendybethc@gmail.com
- Website: agent.bendybethc.com
- Data deletion requests: /data-deletion