On this page13
Last updated: 15 September 2026
This Privacy Policy explains what information TFI Tools collects, why we collect it, how we store it, and the choices you have. It covers our website at tfi.tools and the publishing tools we operate for our own brands and for clients who ask us to manage their content.
Why You Need a Privacy Policy
A privacy policy is not paperwork for its own sake. It is the document that lets a platform, a regulator, or a customer see exactly how you treat personal data. Three forces make it mandatory in practice:
App store rules.
The Apple App Store and Google Play both require a public, working privacy policy URL before an app can be published. OAuth providers such as Google apply the same rule before they will verify an application that requests access to user data.
Global law.
Regulations including the GDPR in Europe and the CCPA in California require transparent disclosure whenever you hold data about people in those regions — regardless of where your company is based.
User trust.
Clear, specific rules show people that their personal data stays safe. Vague boilerplate does the opposite: it signals that nobody has thought the question through.
App store rules.
The Apple App Store and Google Play both require a public, working privacy policy URL before an app can be published. OAuth providers such as Google apply the same rule before they will verify an application that requests access to user data.
Global law.
Regulations including the GDPR in Europe and the CCPA in California require transparent disclosure whenever you hold data about people in those regions — regardless of where your company is based.
User trust.
Clear, specific rules show people that their personal data stays safe. Vague boilerplate does the opposite: it signals that nobody has thought the question through.
Information We Collect
We collect only what a specific feature needs in order to work.
Contact details
your name and email address, when you contact us or request a quotation.
Account data
a username, display name and role for people we grant access to our internal publishing tools.
Technical data
IP address, browser type and pages viewed, recorded in standard server logs.
Content you publish
articles, images and videos submitted through our tools for publication to your own websites and social channels.
Connected account tokens
when you authorise a social or video platform, we store the access and refresh tokens that platform issues to us. We never see, receive, or store your password for any third-party service.
Contact details
your name and email address, when you contact us or request a quotation.
Account data
a username, display name and role for people we grant access to our internal publishing tools.
Technical data
IP address, browser type and pages viewed, recorded in standard server logs.
Content you publish
articles, images and videos submitted through our tools for publication to your own websites and social channels.
Connected account tokens
when you authorise a social or video platform, we store the access and refresh tokens that platform issues to us. We never see, receive, or store your password for any third-party service.
How We Collect It
Directly from you
contact forms, account sign-up, and content you upload.
Automatically
server logs and basic analytics generated as you browse the site.
From platforms you connect
when you complete an authorisation flow (for example with Google), that platform returns a token and basic account details to us.
Directly from you
contact forms, account sign-up, and content you upload.
Automatically
server logs and basic analytics generated as you browse the site.
From platforms you connect
when you complete an authorisation flow (for example with Google), that platform returns a token and basic account details to us.
How We Use Your Data
To deliver the core feature you asked for — publishing a post, uploading a video, or scheduling content.
To answer enquiries and provide support.
To keep our services secure, diagnose faults, and prevent abuse.
To meet legal and accounting obligations.
To deliver the core feature you asked for — publishing a post, uploading a video, or scheduling content.
To answer enquiries and provide support.
To keep our services secure, diagnose faults, and prevent abuse.
To meet legal and accounting obligations.
We do not sell personal data. We do not use your data for advertising profiles, and we do not use content you publish through our tools to train machine-learning models.
Google User Data
Where you connect a Google account so that we can publish to your YouTube channel, the following applies specifically.
Scopes we request.
youtube.upload, so we can upload a video file to the channel you select; andyoutube.readonly, so we can confirm which channel the authorisation belongs to and check whether an upload finished processing. We request no other Google scopes.What we store.
The access token, the refresh token, and the public identity of the channel you chose — its ID, title, handle and thumbnail. We store the refresh token so that scheduled uploads can run without asking you to sign in again.
What we never receive.
Your Google password, your Gmail, your Drive files, your contacts, or any Google data outside the two scopes above.
How it is used.
Solely to upload and manage videos on the channel you connected, at your instruction. Tokens are never shared with any third party and never leave our server.
How to revoke.
Disconnect the channel inside our tool, or remove our access at any time at myaccount.google.com/permissions. Revoking immediately ends our ability to reach your channel, and we delete the stored tokens.
Scopes we request.
youtube.upload, so we can upload a video file to the channel you select; andyoutube.readonly, so we can confirm which channel the authorisation belongs to and check whether an upload finished processing. We request no other Google scopes.What we store.
The access token, the refresh token, and the public identity of the channel you chose — its ID, title, handle and thumbnail. We store the refresh token so that scheduled uploads can run without asking you to sign in again.
What we never receive.
Your Google password, your Gmail, your Drive files, your contacts, or any Google data outside the two scopes above.
How it is used.
Solely to upload and manage videos on the channel you connected, at your instruction. Tokens are never shared with any third party and never leave our server.
How to revoke.
Disconnect the channel inside our tool, or remove our access at any time at myaccount.google.com/permissions. Revoking immediately ends our ability to reach your channel, and we delete the stored tokens.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Third Parties We Share With
We share data only with the service providers needed to run the service, and only to the extent required:
Hosting providers
operate the servers that store the data.
Publishing platforms you connect
YouTube, Instagram, Facebook, Threads, Telegram and LinkedIn receive the content you choose to publish to them.
Analytics and search tools
such as Google Search Console, used to measure how published pages perform.
Hosting providers
operate the servers that store the data.
Publishing platforms you connect
YouTube, Instagram, Facebook, Threads, Telegram and LinkedIn receive the content you choose to publish to them.
Analytics and search tools
such as Google Search Console, used to measure how published pages perform.
We do not sell or rent personal data to anyone, and we do not share it for third-party marketing.
How Long We Keep Data
Enquiry messages: up to 24 months.
Account records: for as long as the account is active.
Connected-platform tokens: until you disconnect the account or revoke access, at which point they are deleted.
Server logs: typically 30 days.
Enquiry messages: up to 24 months.
Account records: for as long as the account is active.
Connected-platform tokens: until you disconnect the account or revoke access, at which point they are deleted.
Server logs: typically 30 days.
How We Protect Data
All traffic to our sites and tools is encrypted with HTTPS. Access tokens are stored server-side and are never exposed to a browser. Administrative access is restricted to named accounts, and sensitive settings are limited to administrators.
Your Rights
Wherever you live, you may ask us to:
Access the personal data we hold about you.
Correct anything inaccurate.
Delete your data, where no legal obligation requires us to keep it.
Export your data in a portable format.
Object to, or restrict, a particular use.
Withdraw consent at any time — including by disconnecting a linked account.
Access the personal data we hold about you.
Correct anything inaccurate.
Delete your data, where no legal obligation requires us to keep it.
Export your data in a portable format.
Object to, or restrict, a particular use.
Withdraw consent at any time — including by disconnecting a linked account.
Email us and we will respond within 30 days. If you are in the EEA or UK you may also complain to your local data protection authority.
Cookies
We use cookies that are strictly necessary to keep you signed in and to remember interface preferences. You can clear or block cookies in your browser, though signing in will no longer work if you block them entirely.
Children
Our services are intended for business use and are not directed at children under 16. We do not knowingly collect their data. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes to This Policy
If we change how we handle personal data, we will update this page and revise the date at the top. Material changes affecting connected accounts will be notified directly.
Contact Us
Questions about this policy, or a request about your data:
TFI Tools
Email: mj@tfi.ae
Web: http://tfi.tools
- Updated
- September 15, 2026
- Reading time
- 5 min read
Discuss this with our team
Tell us what you need and our team replies by email.
Send an enquiry