DOR6 Privacy Policy

This Privacy Policy applies to personal information processed through DOR6.

It does not govern the independent privacy practices of TikTok, Meta, Facebook, Instagram, Google, YouTube, OpenAI, or other third parties. Those platforms and providers process information under their own privacy policies.

For information DOR6 collects for its own account administration, billing, security, product operation, and business purposes, the data controller is:

In some circumstances, DOR6 may process personal information contained in content or connected-platform data on behalf of a user and under that user's instructions.

We use the information described above to:

• Create and maintain accounts;
• Authenticate users;
• Connect authorized social accounts;
• Display connected Pages, Accounts, and Channels;
• Publish or schedule requested content;
• Retrieve authorized analytics;
• Create Portfolio and Topic Dashboards;
• Provide manual content tools;
• Provide AI-assisted content creation;
• Generate scripts, images, videos, voice, subtitles, titles, captions, hashtags, and recommendations;
• Maintain Topic Context and Topic Intelligence;
• Personalize user-requested AI output;
• Provide support;
• Calculate AI usage and Credits;
• Process billing;
• Prevent fraud and abuse;
• Secure DOR6 and connected accounts;
• Troubleshoot;
• Comply with legal obligations; and
• Enforce these Terms.

We do not use connected social-platform data for purposes materially unrelated to the functionality users have requested.

Depending on the feature you use, relevant information may be transmitted to AI or media-processing providers acting on DOR6's behalf, including: OpenAI; image-generation providers; video-generation providers; voice or transcription providers; and other providers configured by DOR6.

Only information reasonably necessary to perform the requested operation should be transmitted.

DOR6 does not sell social-platform user data to AI providers.

DOR6 does not use Google, YouTube, TikTok, or Meta user data to build advertising profiles or for unrelated data-broker purposes.

DOR6 does not use connected social-platform data to train unrelated general-purpose models operated by DOR6 unless: 1. we separately disclose that use; 2. the user affirmatively agrees where required; and 3. the applicable platform policies and law permit it.

OpenAI is used as a Core Intelligence Provider for DOR6.

Information sent may include: Topic information; user instructions; Content Briefs; content requiring analysis; relevant historical performance; selected platform context.

We use AI-provider information only to provide, improve, secure, or support DOR6 features in accordance with applicable provider agreements and this Privacy Policy.

DOR6 may use TikTok developer services including authorized login, account information, content-posting, display, or related functionality depending on the permissions granted to DOR6. DOR6 only accesses TikTok data that the user has authorized and that is necessary for supported DOR6 features.

Such data may be used to:

• identify the connected TikTok account;
• prepare content for publication;
• publish content after required user approval;
• obtain publication status;
• retrieve supported analytics where authorized; and
• display account or content information within DOR6.

DOR6 does not request your TikTok password. Users retain control over what is posted through DOR6.

Where required, DOR6 displays the destination TikTok account, editable metadata, privacy settings, commercial-content disclosures, and a preview before publication.

Users may disconnect TikTok access through DOR6 or applicable TikTok account settings.

DOR6 may use Meta APIs to connect authorized Facebook Pages and Instagram Professional Accounts.

Depending on approved scopes, DOR6 may process:

• Page or Professional Account identifiers;
• names and usernames;
• permissions;
• publications;
• media metadata;
• insights or performance data; and
• access tokens and token status.

We use this data to provide the features the user has requested. We do not request Facebook or Instagram passwords.

Users may disconnect their Meta connection from DOR6.

Where applicable, DOR6 supports Meta user-data deletion requests and maintains a data-deletion process for information received through Meta APIs.

DOR6 uses YouTube API Services.

When connecting, DOR6 may access:

• YouTube Channel identifiers and Channel information;
• authorized video and publication information;
• YouTube Analytics and Reporting information;
• upload and publication status; and
• OAuth authorization information.

DOR6 uses Google user data only to provide or improve user-facing DOR6 features that you have chosen to use.

Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements where applicable.

Google Privacy Policy: https://policies.google.com/privacy

You may review and revoke DOR6's access to your Google Account through Google's security settings: https://security.google.com/settings/security/permissions. You may also disconnect Google/YouTube from DOR6.

When you revoke DOR6's authorization to access YouTube API Services, DOR6 will revoke the relevant token programmatically where required and delete applicable YouTube Authorized Data as soon as reasonably possible and within the time required by YouTube's policies, generally no later than seven calendar days for an express deletion or revocation request, except data that DOR6 is legally required to retain and that does not require retaining YouTube Authorized Data.

DOR6 periodically checks whether continued authorization remains valid and refreshes or deletes stored YouTube API Data as required by YouTube policies.

Deleting YouTube data stored by DOR6 does not itself delete information stored by YouTube. To delete information from YouTube itself, you must use YouTube or another authorized application capable of deleting that data.

DOR6 follows a minimum-permission approach. We seek to request only permissions reasonably necessary for features that are implemented and available to the user.

Where technically supported, additional permissions should be requested when the user activates the feature that needs them rather than requesting unrelated permissions in advance.

Access tokens and refresh tokens are sensitive credentials. DOR6 stores applicable tokens using security measures designed to protect them from unauthorized access.

Tokens are not intentionally exposed to other DOR6 users.

When access is revoked or no longer required, DOR6 may revoke and delete tokens in accordance with applicable platform policies.

We share information with service providers only as reasonably necessary, including:

• hosting and cloud providers;
• database providers;
• storage providers;
• AI providers;
• image, video, and voice generation providers;
• payment processors;
• email and notification providers;
• security and monitoring providers; and
• professional advisers.

We may also transmit content and metadata to a social-media platform when you instruct DOR6 to publish, schedule, retrieve analytics, or otherwise interact with that platform.

We may also disclose information:

• when required by law;
• to protect rights or security;
• to investigate fraud or abuse; or
• in connection with a merger, financing, acquisition, reorganization, or sale, subject to applicable privacy requirements.

DOR6 does not sell connected social-media account data to data brokers or advertisers.

At launch, DOR6 does not sell personal information or share personal information for cross-context behavioral advertising as those concepts are defined under applicable California privacy law.

If our practices materially change, we will update this Policy and provide any legally required notice and opt-out mechanisms before using personal information for the new purpose.

Access is restricted. Personnel may access connected platform data where reasonably necessary for:

• support requested or authorized by the user;
• security investigation;
• fraud or abuse investigation;
• technical debugging where necessary and permitted;
• legal compliance; or
• aggregated internal operations where permitted.

Access is subject to internal authorization and security controls.

We retain information only for as long as reasonably necessary for the purpose for which it was collected, to provide the Service, maintain security, resolve disputes, comply with law, or maintain required financial and audit records.

• Account Information — retained while the account is active and for a reasonable period afterward for legal, security, accounting, fraud-prevention, and dispute purposes.
• User Content — retained while needed or until deletion, subject to backups and legal requirements.
• Generated Content and Version History — available until deleted by the user or per the applicable product retention setting.
• OAuth Credentials — retained only while necessary for the connection.
• Social Platform API Data — retained and refreshed according to the applicable platform's policies.
• YouTube Data — deleted or refreshed according to applicable YouTube Developer Policies. DOR6 periodically verifies ongoing authorization where required.
• Financial and Credit Ledger Records — may be retained for accounting, fraud prevention, audit, tax, and legal requirements even after account deletion.

Users may request deletion by:

1. using available Account or Settings controls;
2. disconnecting a connected Social Account;
3. deleting a Topic where supported;
4. deleting the DOR6 account; or
5. contacting privacy@dor6.com.

Where required, we may verify identity before processing a deletion request.

Deletion from DOR6 does not necessarily delete data from an external social-media platform. If you want content removed from TikTok, Facebook, Instagram, YouTube, or another platform, you may also need to delete it directly from that platform.

Where Meta sends DOR6 an authorized data-deletion request relating to a user, DOR6 will process the request according to applicable Meta requirements and our retention obligations. DOR6 should maintain a public Data Deletion Instructions page and any callback endpoint required by Meta.

We maintain technical and organizational safeguards including:

• encrypted transport;
• encrypted or securely managed OAuth tokens;
• secret-management practices;
• restricted administrative access;
• role-based controls;
• logging and audit trails;
• network and application security controls;
• backup and recovery procedures;
• rate limits; and
• monitoring.

No system can guarantee absolute security. If a security incident occurs, DOR6 will respond and provide legally required notifications where applicable.

DOR6 and its service providers may process information in Israel, the United States, Europe, or other countries. Where applicable law requires safeguards for international transfers, DOR6 will use appropriate mechanisms, contractual protections, or recognized legal bases.

Where applicable, we process personal information on the following legal bases:

• performance of a contract;
• user consent;
• legitimate interests, where not overridden by user rights; and
• compliance with legal obligations.

Consent may be withdrawn where processing is based on consent. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

Depending on your location, you may have rights to:

• access;
• receive information about processing;
• correct inaccurate information;
• request deletion;
• restrict certain processing;
• object to certain processing;
• obtain a portable copy where applicable;
• withdraw consent; and
• appeal or complain to an appropriate privacy authority.

Requests may be sent to privacy@dor6.com. We may need to verify identity before fulfilling certain requests.

California residents may have the following rights:

• Right to Know;
• Right to Access;
• Right to Delete;
• Right to Correct;
• Right to Opt Out of certain sale or sharing;
• Right to Limit certain use of sensitive personal information where applicable; and
• Right to Non-Discrimination for exercising privacy rights.

DOR6 does not discriminate against users for exercising applicable privacy rights.

DOR6 processes personal information in accordance with applicable Israeli privacy and data-protection requirements, including the Israeli Protection of Privacy Law and applicable data-security regulations. Where applicable, individuals may exercise rights provided under Israeli law regarding personal information maintained about them. Requests may be submitted to privacy@dor6.com.

Cookies and similar technologies are used for: authentication; security; session management; user preferences; product functionality; performance; and analytics.

Where legally required, non-essential cookies will be used only after obtaining required consent. If DOR6 later uses advertising or cross-site tracking technologies, this Policy and applicable consent mechanisms must be updated before that use begins.

DOR6 is intended for users aged 18 and older. DOR6 is not directed to children. We do not knowingly collect personal information from children through the Service. If you believe a minor has improperly provided personal information to DOR6, contact privacy@dor6.com.

DOR6 uses automated systems to generate content, recommendations, analytics, classifications, and operational decisions. DOR6 is not designed to make decisions producing significant legal effects concerning users solely through automated processing.

DOR6 is an independent product and is not owned, sponsored, endorsed, or operated by TikTok, ByteDance, Meta, Facebook, Instagram, Google, or YouTube. Each platform is independently responsible for its own privacy practices.

We may update this Privacy Policy when DOR6 features, laws, AI providers, integrations, or data practices change. If a change materially alters how we use information already collected, we will provide additional notice or request renewed consent where required.

In particular, if the way DOR6 accesses or uses Google user data materially changes, DOR6 will update this Privacy Policy and obtain any consent required before using Google user data for the new purpose.

If you have a privacy concern, contact us first at: privacy@dor6.com. Depending on your location, you may also have the right to complain to your local privacy or data-protection authority.