RikkeiEdu Social Studio Privacy Policy

RikkeiEdu Social Studio (the “Service”, “we”, “us”, “our”) is a social media management and publishing platform operated by RikkeiEdu (the “Company”), based in Hanoi, Vietnam. This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you use the Service, including features that connect to and publish on third-party platforms such as TikTok and Facebook.

By creating an account or using the Service, you acknowledge that you have read and understood this Privacy Policy. The data controller responsible for your personal data is RikkeiEdu; you can contact us at luannv@rikkeiacademy.com.

This Policy applies to all users of the Service — businesses, creators and their team members — and to personal data processed through the Service. It does not apply to third-party websites or platforms that we do not control.

We collect the following categories of information:

• Account information: your name, email address, hashed password, department and role, created when an account is set up.
• TikTok data: when you connect a TikTok account via OAuth, we receive and store the access token, refresh token, open id, and basic profile information (nickname and avatar) obtained through the user.info.basic scope. This is used only to identify the connected account and to publish content you create.
• Facebook data: when you connect a Facebook Page, we store the Page access token, Page id and Page name to publish content and read Page metrics on your behalf.
• Content data: the posts, captions, images, videos (or their URLs), schedules and statuses you create in the Service.
• Performance metrics: likes, reactions, comments, shares, clicks, views and reach returned by the platforms for your published posts.
• Technical and usage data: log records, IP address, browser/device information and timestamps, used for security, troubleshooting and operating the Service.

• Directly from you, when you register, create content or configure the Service.
• Automatically, as you use the Service (technical/usage data).
• From third-party platforms, through their official APIs, only after you authorize a connection.

We use personal information for the following purposes and legal bases:

• To provide the Service — publish content you create to your own social accounts, schedule posts, and display performance metrics (legal basis: performance of a contract).
• To operate, secure, maintain and improve the Service (legal basis: our legitimate interests).
• To send you service-related communications (legal basis: legitimate interests / contract).
• Where required, based on your consent — for example, connecting a social media account (legal basis: consent, which you may withdraw at any time).

• We do not sell, rent or trade your personal data.
• We do not use your data for advertising, ad targeting or building profiles about you.
• We do not publish or access anything on your social accounts other than the actions you explicitly request.

• Social platforms: we transmit content and requests to TikTok and Facebook solely to perform the actions you request (publishing a post, reading metrics).
• Service providers / subprocessors: our hosting and database infrastructure; and Google Gemini for optional AI text/image generation, to which only the idea text you type is sent (never your social tokens).
• Legal reasons: where required by law, regulation, legal process, or to protect the rights, property or safety of the Company, our users or the public.

Your use of TikTok and Facebook through the Service is also governed by those platforms’ own terms and privacy policies. We access these platforms only through their official APIs and only within the scopes you have granted. See the TikTok Privacy Policy and the Meta Privacy Policy (links below).

• Account information is retained while your account is active.
• Social access and refresh tokens are retained only while the connection is active, and are deleted immediately when you disconnect the account or delete your account.
• Uploaded media used to transfer content to a platform is automatically deleted after a short retention period (7 days by default).
• Performance metrics may be retained to display historical trends for your published posts.
• When data is no longer needed, we delete or anonymize it, subject to any legal obligations to retain it.

We apply reasonable technical and organizational measures to protect personal data, including: encryption in transit via HTTPS/TLS, hashed passwords, role-based access control, server-side-only handling of social access tokens, and restricted database access. No method of transmission or storage is completely secure, but we continually work to protect your information.

Depending on your location, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise any of these rights, contact us at luannv@rikkeiacademy.com. We will respond within a reasonable time and in accordance with applicable law, including the GDPR and CCPA where they apply.

• You can disconnect any connected social account at any time inside the app; this immediately deletes the stored access and refresh tokens for that account.
• To delete your account and all associated personal data — including all data obtained from TikTok — email luannv@rikkeiacademy.com. We action verified deletion requests within 30 days.
• You may also revoke the Service’s access at any time from your TikTok or Facebook account settings.

We are based in Vietnam. Where your personal data is transferred or processed internationally, we take steps to ensure appropriate safeguards are in place consistent with applicable law.

We use only strictly necessary cookies — such as a session cookie to keep you signed in. We do not use advertising, analytics or third-party tracking cookies.

The Service is intended for business users aged 16 and over and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new “Last updated” date. Where changes are material, we will provide additional notice as appropriate.

• TikTok Privacy Policy
• Meta (Facebook) Privacy Policy

RikkeiEdu — Hanoi, Vietnam. For any question about this Privacy Policy or to exercise your data rights, contact luannv@rikkeiacademy.com.