SunlitPath UGC Factory Privacy Policy

Effective Date: August 22, 2026 · Last Updated: August 22, 2026

This Privacy Policy explains how SunlitPath (“we”, “us”, or “our”) handles information in SunlitPath UGC Factory (“UGC Factory”), a desktop and internal content creation and publishing tool.

Quick Summary

  • UGC Factory may connect to TikTok, YouTube, Instagram, and other third-party platforms when you choose to do so.
  • We use connected-account information and integration credentials to provide authentication, publishing, analytics, and related UGC Factory functionality.
  • Publishing requires your explicit human approval; UGC Factory does not autonomously publish content without that approval.

1. Scope

This policy applies to UGC Factory and its related workflows. It does not replace the privacy policy for a separate SunlitPath app or website. UGC Factory is intended for authorized users working with SunlitPath content and connected publishing accounts.

2. Information We Handle

Account and profile information

When you connect a platform, UGC Factory may receive account identifiers and basic profile or account information made available by that platform. This may be received through OAuth authentication or another supported sign-in flow.

Integration credentials

OAuth access tokens and refresh tokens may be stored locally or server-side as required for the relevant integration. Tokens and other secrets are not intentionally exposed publicly.

Content and publishing information

UGC Factory may handle videos, captions, metadata, publishing settings, approval choices, and information needed to show publishing or analytics status.

3. Connected Platforms

UGC Factory may connect to third-party platforms including TikTok, YouTube, and Instagram. Available permissions depend on the integration and the permissions you authorize.

TikTok

Where enabled, UGC Factory may use TikTok Login Kit for OAuth authentication and account identification. The TikTok integration may use the user.info.basic scope to identify the authorized account and the video.publishscope through TikTok’s Content Posting API for authorized publishing. TikTok permissions are requested and used only as needed for the connected workflow.

4. How We Use Information

  • Authenticate you and identify the connected account you selected.
  • Store and use integration credentials as needed to maintain an authorized connection.
  • Prepare and send approved videos, captions, metadata, and publishing settings to connected platform APIs.
  • Provide publishing status, analytics, troubleshooting, and related UGC Factory functionality.
  • Maintain security, prevent misuse, and respond to support requests.

We use UGC Factory data only for these purposes and related operation of the tool, not for unrelated advertising.

5. Publishing and Content

UGC Factory is a human-approved publishing workflow. It may send content to a connected platform API only after the user explicitly approves the publishing action. The tool does not autonomously publish without that approval. Once sent, content is handled by the relevant platform under its own policies and controls.

6. Retention and Deletion

We retain UGC Factory information only for as long as it is needed to provide the connected integration and related functionality, maintain records needed for security or support, or meet legal obligations. You may ask us to disconnect an integration or delete UGC Factory data by contacting us. We will review and action the request as appropriate, subject to legal, security, backup, and operational requirements. Deleting data from UGC Factory does not necessarily delete content already sent to a third-party platform; use that platform’s controls for its copies.

7. Security

We use reasonable measures appropriate to the tool and its deployment to protect information and integration secrets. No storage or transmission system can be guaranteed completely secure. You should protect your device, account credentials, and access to any UGC Factory environment.

8. Third-Party Policies

TikTok, YouTube, Instagram, and other connected platforms may collect and process information independently. Their privacy policies, developer requirements, terms, permissions, retention practices, and account controls apply in addition to this policy. We do not control changes to those third-party services.

9. Changes to This Policy

We may update this policy when UGC Factory or its integrations change. We will post the updated version on this page and update the date above.

10. Contact

Questions or deletion requests may be sent to SunlitPath at hello@sunlit-path.com. SunlitPath is based in Tokyo, Japan.

© 2026 SunlitPath. All rights reserved.