socialCreate accountNeverapply Social, at social.kasovy.com. Last updated 11 September 2026.
Neverapply Social (“the Service”, “we”, “us”) is a public cloud social-media scheduling platform used by independent creators, agencies and businesses to plan, schedule and publish content to social accounts they own or are authorized to manage. We are the controller of the personal data described here. Contact: imad@kasovy.com.
We do not sell personal data, do not use your content or analytics for advertising, and do not use them to train machine-learning models.
When you connect a TikTok account, the following applies. Connecting is optional and happens only when you choose “Connect TikTok” in your workspace.
Authorization uses TikTok Login Kit (OAuth 2.0). You sign in on TikTok’s own pages and approve the scopes shown there. We receive an access token and a refresh token; we never see your TikTok password.
With the user.info.basic scope we store your open ID, display name and avatar so you can identify the connected account in your workspace and preview posts. With the profile scope, where granted, we may also read your username and profile link for the same purpose.
Where you grant statistics scopes, we read account-level and video-level metrics (for example follower count, views, likes, comments, shares) and display them only inside your workspace. They are not shared with other customers or third parties.
With the video.list scope, where granted, we read the list of your recent public videos (identifiers, titles, cover images, statistics) to show your publishing history and to match posts published through the Service with their live videos.
With video.upload we can upload a video you scheduled to your TikTok inbox as a draft; you then open the TikTok app to review, set privacy and publish it yourself. With video.publish (Direct Post) we publish a post you scheduled directly to your account, using exactly the caption, privacy level and interaction settings (comments, duet, stitch, commercial-content disclosure) you chose in the Service. We never post, edit or delete content you did not schedule.
TikTok tokens are stored encrypted at rest in our database, transmitted only over TLS, and used solely to perform the actions above for your workspace. They are never shown in the interface, logged, or shared.
You can disconnect TikTok in your workspace at any time; we then delete the tokens immediately and call TikTok’s revoke endpoint. You can also remove the app in TikTok under Settings and privacy → Security → Apps and websites; our access stops as soon as TikTok invalidates the token.
Tokens are kept only while the account is connected. Profile data, analytics and video lists are refreshed when you use the workspace and deleted within 30 days of disconnecting the account or deleting your workspace. Publishing records (post identifier, status, time) are kept for up to 90 days for troubleshooting unless you delete the post earlier. Media you upload is deleted when you delete the post or your workspace. Backups are rotated within 35 days.
You can access, correct, export or delete your data at any time from your workspace, or by emailing imad@kasovy.com. Deletion requests are completed within 30 days; see Data Deletion. Nothing in this section changes TikTok’s own privacy policy, which applies to your use of TikTok.
Connecting Facebook Pages, Instagram or Threads uses Meta’s OAuth login and the permissions shown there; other platforms (LinkedIn, X, YouTube, Pinterest, Bluesky, Mastodon and others offered in the workspace) use their official APIs the same way. In each case we store the token, the public profile identifier, name and avatar, the posts you schedule, the status returned, and analytics the platform exposes, and apply the same storage, revocation, retention and deletion rules as in section 4.
| Data | Kept |
|---|---|
| Account data | Until you delete your workspace, then removed within 30 days |
| Platform tokens | Until you disconnect the account or delete the workspace; deleted immediately |
| Profile data, analytics, video lists | Until disconnect or deletion, then removed within 30 days |
| Posts and media | Until you delete them or your workspace |
| Publishing records | Up to 90 days |
| Server logs | Up to 30 days |
Depending on where you live (including under the GDPR and UK GDPR), you may have the right to access, rectify, erase, restrict or object to processing of your personal data, to data portability, and to lodge a complaint with a supervisory authority. Exercise them in your workspace settings or by emailing imad@kasovy.com.
We use only the cookies needed to keep you signed in and to protect forms against misuse. There are no advertising or analytics cookies.
The Service is not directed to people under 18 and we do not knowingly collect their data.
We will post any changes on this page with a new “last updated” date and, for material changes, notify registered users by email.
imad@kasovy.com · See also Terms of Service and Data Deletion.