Privacy Policy
Last updated: October 5, 2026 • Applicable to services hosted at us-media.stresteam.fun.
Your privacy and the security of your managed social accounts are our highest priority. This Privacy Policy explains what data Rivrs Uploader collects, how it is stored, the cryptographic encryption applied, and the full control you maintain over your data.
01.Data We Collect
Rivrs Uploader strictly collects only data necessary to provide multi-channel social publishing capabilities:
Discord User ID, username, avatar URL, and email to verify server permissions and provision partitioned workspace studios.
Official OAuth Access Tokens for Instagram Graph API and TikTok Content Posting API granted when you connect creator accounts.
Image files, video reels, captions, and audio soundtracks stored for your studio workspace and distributed via Cloudflare R2 CDN.
Publish timestamps, sync history, and external API response codes for system diagnostics and workspace audit integrity.
02.How Data is Used
Collected data is used solely to:
- Authenticate users based on official Discord role privileges.
- Connect your Instagram Business / Creator and TikTok Creator accounts.
- Upload, format, and dispatch posts, carousels, and video Reels upon your command.
- Display unified metrics and publishing status history across channels.
We never sell, rent, monetize, or transfer social account credentials or media to third parties or advertising brokers.
03.Security & Data Encryption
We implement industry-standard cryptographic safeguards:
- Encryption at Rest: All OAuth Access Tokens and secrets are encrypted with AES-256-GCM. Decryption keys are stored in isolated environment variables and never exposed to the client browser.
- Encrypted Transmission (TLS/SSL): All communication across browsers, VPS endpoints, and Cloudflare employs modern TLS 1.3 HTTPS encryption.
- Cloudflare R2 Object Storage: Media files are stored on high-availability S3-compatible Cloudflare R2 infrastructure protected by custom edge domain policies.
04.Third-Party API Integrations & Platform Compliance
Rivrs Uploader operates strictly via official partner developer APIs:
instagram_basic, instagram_content_publish, and pages_show_list. All Meta data usage complies with Meta Platform Terms.video.publish and video.upload. All TikTok data handling complies with TikTok Developer Terms and Privacy Policy.05.User Rights & Data Deletion
You maintain complete autonomy over your credentials and published media:
To revoke access or request immediate deletion of all data associated with your social accounts:
- Navigate to Rivrs Uploader > Accounts, and click Disconnect on the target account. Tokens will be permanently erased from our database instantly.
- Alternatively, revoke permissions directly within your Instagram app via Settings > Security > Apps and Websites. Our system handles Meta automated deletion callbacks at
/api/auth/instagram/data-deletion. - For complete deletion of all R2 media assets and drafts, send a request to legal@nexostudio.fun.
06.Data Protection Contact
For inquiries regarding this privacy policy or to exercise your data rights, contact: