Privacy Policy

This Privacy Policy explains how Steppin Stone Tax & Accounting Services (“Steppin Stone,” “we,” “us”) handles information in connection with Steppin Stone Social (the “App”), our in-house tool for scheduling and publishing content to our own connected social media accounts, including TikTok.

1. Who this applies to

The App is operated by and for Steppin Stone and its authorized staff to manage the organization’s own social media accounts. We are the operator and the party responsible for data processed by the App.

2. Information we collect

When an authorized user connects a social account (e.g., TikTok) via OAuth, we collect and store only what is needed to publish on that account’s behalf:

• Authentication tokens — OAuth access and refresh tokens issued by the platform. Stored encrypted at rest.
• Basic account profile — the connected account’s open ID / user ID, username, display name, and avatar (used to show which account you’re posting as and to meet platform UX requirements).
• Content you choose to publish — the videos, captions, and post settings (privacy level, comment/duet/stitch options, disclosures) that a user composes in the App.
• Operational logs — timestamps and status of publish/schedule actions, for reliability and troubleshooting.

We do not collect your platform password (authentication is OAuth only), and we do not read your private messages, browsing activity, or unrelated account data.

3. How we use information

• To authenticate to the platform and publish or schedule content that a user explicitly composes and approves in the App.
• To display the correct account identity and the posting options the platform returns for that account (e.g., TikTok’s Query Creator Info: username, avatar, allowed privacy levels, and interaction settings).
• To operate, secure, and troubleshoot the App.

We do not sell your data, do not use it for advertising, profiling, or training models, and do not share it except as needed to provide the service (Section 4).

4. Sharing

Information is shared only with the social platform you connect (e.g., TikTok) via its official API, strictly to perform the actions you request. We use their APIs in accordance with their developer terms and policies. We do not share your data with advertisers or unrelated third parties.

5. Storage & security

Data is stored on infrastructure we control. OAuth tokens are encrypted at rest and access is limited to the App’s posting functions. We apply reasonable technical and organizational measures to protect the information.

6. Retention & deletion

We retain tokens and connected-account data only while the account remains connected. When an account is disconnected — or on request — we delete the associated tokens and profile data. To request deletion, contact us (Section 8) or disconnect the account in the App.

7. Your choices

You can disconnect any connected account at any time, which revokes the App’s access and triggers deletion of its stored tokens. You may also revoke access from within your platform account’s app settings.

8. Contact

Questions or data requests: contact@steppinstonetax.com.

9. Changes

We may update this policy; the “Last updated” date reflects the latest version.