Effective Date: May 9, 2026 · Last Updated: May 15, 2026

1. About DigiDistro

DigiDistro ("we," "our," or "the Service") is a commercial cross-platform video-distribution product operated by Super Funicular LLC ("Super Funicular"). Each creator ("you") connects the social accounts you control and publishes your video content to those destinations from a single workflow. This Privacy Policy describes how DigiDistro handles your authentication credentials, your content, and the operational metadata generated when DigiDistro acts on your behalf.

DigiDistro is currently in closed beta. During closed beta the only onboarded creator is Super Funicular's own founder, validating the end-to-end pipeline against every connected platform's official API. The data-handling described below applies in identical form to additional creators when DigiDistro opens to invite beta and general availability.

2. Information DigiDistro Processes

2.1 Authentication credentials (creator-authorized)

Each creator authorizes DigiDistro to act on their own social accounts via OAuth or platform-equivalent flows. The credentials DigiDistro stores per platform, per creator:

Platform	Credentials stored	Scope
TikTok	access_token, refresh_token, open_id	user.info.basic, video.upload (inbox)
Pinterest	access_token, refresh_token, board_id	pins:write, boards:read, user_accounts:read
LinkedIn	access_token (60-day TTL), urn:li:person:*	w_member_social, openid, profile, email
Meta (FB / IG / Threads)	page access token, IG user_id, Threads user_id	pages_manage_posts, instagram_content_publish, threads_content_publish
X (Twitter)	session cookies (auth_token, ct0, twid)	tweet creation only
Bluesky	app password	com.atproto.repo.createRecord
dev.to	API key	article publish

Credentials are encrypted at rest, isolated per creator, stored only on Super Funicular-controlled server infrastructure (Hetzner Cloud VPS), and are never transmitted to any third party other than the corresponding destination platform's official API.

2.2 Content data

DigiDistro reads videos and metadata from each creator's source channel using the source platform's API or yt-dlp where the creator has authorized that access. Each downloaded video is held transiently on the server (typically less than 24 hours) for the sole purpose of upload to the destinations the creator has connected, and is deleted after distribution completes.

2.3 Distribution metadata

For each post DigiDistro publishes, we record: the destination platform name, the post URL after publication, the timestamp, the source video ID it corresponds to, and pacing/state needed for rate-limit enforcement. This metadata is stored in a per-creator SQLite manifest on Super Funicular's server and is used solely for deduplication, retry logic, and the creator's own audit dashboards.

2.4 What DigiDistro does NOT collect

• No data about other TikTok users, Pinterest users, LinkedIn users, etc. We only ever read and write to accounts the connected creator has authorized.
• No follower lists, no comment scraping, no DMs, no analytics about third parties.
• No payment data is stored by DigiDistro itself; future paid tiers will use a PCI-compliant payment processor that handles card data directly.
• No advertising identifiers, no device fingerprints, no cross-creator profiling.

3. Data Use

The information DigiDistro processes is used exclusively to:

• Authenticate to each creator's connected destination platform via the relevant API.
• Upload the creator's videos to the creator's connected destination accounts.
• Compose captions appropriate to each destination platform's discovery surface.
• Refresh expired tokens via the platform's documented refresh flow.
• Retry failed uploads and respect each platform's rate limits.
• Surface a per-creator audit log of every post.

4. Data Sharing and Third Parties

DigiDistro does not sell, trade, or otherwise share any creator's data with third parties. Data flows only between DigiDistro's server and the official APIs of the destination platforms each creator has connected. Each destination platform's own privacy policy governs data once it leaves DigiDistro:

• TikTok Privacy Policy
• Pinterest Privacy Policy
• LinkedIn Privacy Policy
• Meta (Facebook / Instagram / Threads) Privacy Policy
• X Privacy Policy
• Bluesky Privacy Policy
• dev.to Privacy Policy

5. TikTok-Specific Disclosures

DigiDistro integrates with TikTok via two products from the TikTok for Developers platform on behalf of each creator who connects their TikTok account through OAuth:

• Login Kit with the user.info.basic scope. We retrieve open_id and display_name only, and use them solely to confirm which TikTok account the creator authorized.
• Content Posting API with the video.upload scope (inbox/drafts mode only). Videos are delivered to the creator's TikTok app inbox where the creator manually chooses whether to publish. We do not request the video.publish scope, do not auto-publish, and do not bypass any moderation.

We do not request, store, or use TikTok analytics data, viewer data, comment data, or follower data. We do not access or process content from any TikTok account other than the creator's own.

6. Storage and Security

Authentication tokens are stored in encrypted, per-creator credential files with 0600 permissions on a Hetzner Cloud VPS managed by Super Funicular. The server is hardened with SSH key authentication only, fail2ban, automatic security updates, and Cloudflare in front of public web endpoints. All API calls travel over HTTPS / TLS 1.2+.

7. Retention

Authentication tokens are retained until the creator revokes them via the corresponding platform's settings or until the platform's documented expiration. Distribution metadata (post URLs, timestamps) is retained for the operating life of the creator's account on DigiDistro to prevent re-posting the same video. Downloaded video files are transient (typically deleted within 24 hours of distribution).

8. Creator Rights

Each creator can at any time:

• Revoke any platform's access by removing DigiDistro from that platform's connected-app settings — DigiDistro stops posting on the affected account immediately.
• Request deletion of all credential, content, and metadata records associated with their account by emailing dev@superfunicular.com; we will purge within 30 days of request.
• Request a copy of the audit log we hold on their behalf.

9. Children's Privacy

DigiDistro is not directed to children under 13 (or 16 in the EEA / UK), and does not knowingly collect data about children. Creators who connect accounts represent that they meet each destination platform's minimum-age requirements.

10. Changes to This Policy

We will post any changes to this Privacy Policy at this URL with an updated "Last Updated" date. Material changes will also be reflected in renewed authorization grants on each connected platform.