DARUM.Studio

Privacy Policy

Effective Date: April 25, 2026

1. Data Controller

DARUM GROUP LLC, a Michigan limited liability company, is the data controller for personal data processed through DARUM.Studio ("Platform"). Contact: support@darumgroup.com.

2. About DARUM.Studio

DARUM.Studio is an internal marketing operations console used by DARUM GROUP LLC to plan, produce, publish, and measure content for its owned brands across social channels including YouTube, Instagram, and TikTok. It is not offered as a public SaaS; access is restricted to authorized operators of DARUM GROUP LLC.

3. Data We Process

  • Operator credentials (email, hashed password) for the single operator account.
  • Connected social account tokens (OAuth access/refresh tokens) for brand accounts owned and operated by DARUM GROUP LLC.
  • Account metadata returned by the integrated platforms — e.g., from the TikTok Login Kit and Content Posting API: open_id,display_name, username, and avatar URL.
  • Video files, images, captions, and other creative assets produced inside DARUM.Studio and published to connected accounts.
  • Public engagement metrics returned by the platforms after a post is published (e.g., views, likes, comments, shares).
  • Application logs, request logs, and operational metadata.

4. How We Use the Data

We use the data exclusively to operate DARUM.Studio for DARUM GROUP LLC's own brands: producing creative, scheduling and publishing content, monitoring performance against internal KPIs, and managing engagement on the operator's brand-owned posts.

5. TikTok-Specific Use

Data obtained through the TikTok APIs is used solely within DARUM.Studio to:

  • Authenticate brand-owned TikTok accounts selected by the operator (Login Kit, scope user.info.basic).
  • Upload and publish video content the operator has produced and approved (Content Posting API, scopes video.upload and video.publish).
  • Read public performance metrics for the operator's own published videos in order to render internal performance dashboards.

We do not share TikTok data with any third party, do not use it to build advertising profiles, and do not aggregate it across users. Data obtained through TikTok APIs is processed and stored solely for the purposes described above and within the connected DARUM GROUP LLC account scope.

6. Third-Party Processors

  • Anthropic and OpenRouter — AI inference for assistive content generation.
  • ElevenLabs — voice synthesis.
  • Hostinger — VPS hosting in the United States.
  • Backblaze B2 — encrypted database backups.

7. No Sale of Personal Data

We do not sell, rent, or trade personal data to any third party for marketing or commercial purposes.

8. Retention and Deletion

OAuth tokens and connected-account metadata are retained while the connection is active. Disconnecting an account from DARUM.Studio revokes and purges its tokens. Performance snapshots are retained for 90 days and then purged automatically. Deletion requests for any other data may be submitted to support@darumgroup.com and will be honored within 30 days, except where retention is legally required.

9. Security

All data is transmitted over TLS and stored on access-controlled infrastructure. Database backups are encrypted at rest. We perform regular security reviews and apply the principle of least privilege to operator credentials.

10. Your Rights

You may request access, correction, or deletion of personal data we hold about you at support@darumgroup.com.

11. Changes to This Policy

Material changes to this Privacy Policy will be reflected by a new Effective Date and, where applicable, communicated to the operator.

12. Contact

DARUM GROUP LLC — support@darumgroup.com