Privacy, without mystery.

Information you provide

When you join the newsletter, request member access, purchase a membership, contact HXP, or create a community profile, you may provide information such as your email address, name, profile details, and the content you choose to share.

HXP Studio and TikTok authorization

HXP Studio is a web publishing application for independent creators, open to anyone with an eligible TikTok account. When a creator connects TikTok, TikTok provides HXP Studio with an account identifier, display name, access token, refresh token, token expiration information, and the permissions granted during authorization. HXP Studio uses this information only to verify that creator’s connected TikTok account and operate creator-approved publishing features. Public creators have separate encrypted sessions and cannot access HXP’s internal publisher, saved connections, or media library.

Before a TikTok export is submitted, the creator selects an original MP4 from their device, export action, and, for Direct Post, the caption, audience, and available interaction settings. HXP Studio may send that selected media and metadata to TikTok only after the user reviews the choices and gives explicit consent. A draft upload goes to the creator's TikTok inbox for final editing and does not create a public post. HXP Studio does not sell TikTok account information. Public Direct Post requires TikTok audit approval; until then, TikTok restricts Direct Post tests to private accounts and Only me visibility.

Services that process information

Kit processes newsletter subscriptions. Stripe processes membership payments; HXP does not receive your full payment-card number. Vercel hosts the website and provides aggregate site analytics. When enabled, Google Analytics and PostHog measure page views and selected conversion events, while Microsoft Clarity records interaction and session data used to understand site usability. Email delivery and member-access messages may be handled by Resend. TikTok processes account authorization and content submitted through HXP Studio under TikTok's own terms and privacy practices.

Security and retention

TikTok access and refresh tokens are encrypted before they are stored in a secure, HTTP-only HXP Studio session cookie. The public website and browser interface cannot read the token contents. Creator connections expire within 24 hours unless reconnected. Selected video bytes are held temporarily in server memory for the requested transfer to TikTok; HXP Studio does not store a persistent copy of creator uploads. Submission records include a pseudonymous account identifier, media hash, caption, settings, timestamps, and TikTok processing reference so status can be checked without repeating a post. Authorization records, selected publishing settings, and operational evidence are retained only as long as reasonably needed to maintain the connection, prevent duplicate publishing, provide support, protect the service, and meet legal obligations. Access is removed when it is revoked, expires, is no longer required, or is deleted in response to a valid request, subject to limited security and legal retention needs.

On-device information

The site may store anonymous analytics identifiers, playback progress, saved episodes, and related preferences in your browser. HXP Studio stores a submission reference and status locally to recover an interrupted attempt. Session-replay and marketing analytics are disabled on the creator Studio page. You can remove local information by clearing site data in your browser.

How information is used

Information is used to deliver requested emails and member access, operate the community, process subscriptions, provide support, protect the service, understand aggregate usage, improve HXP, verify connected social accounts, and complete publishing actions expressly approved by the connected creator.

Sharing and retention

HXP does not sell personal information. Information is shared only with service providers needed to operate the site or HXP Studio, with TikTok when an authorized user requests a TikTok connection or publishing action, or when required by law. Records are retained only as long as reasonably necessary for the purpose collected, contractual obligations, security, and legal compliance.

Your choices

You may unsubscribe through any newsletter email, request account deletion through community settings, clear browser storage, revoke HXP Studio in your TikTok account's connected-app permissions, or contact HXP to request access, correction, disconnection, or deletion where applicable.

Contact

Questions, privacy requests, and HXP Studio account-disconnection or deletion requests can be sent to thehumanxp@gmail.com.