Privacy Policy

Effective date: 25 October 2026

Mushy Green ("we", "us") makes short animated and podcast videos and runs a private publishing tool at dangbai.mushygreen.uk (the "Service"). The Service lets the channel owner and their team schedule and publish their own videos to their own YouTube channels, Facebook Pages and TikTok accounts. This policy explains what data the Service handles and why.

Who can use the Service

The Service is not open to the public. Only people the owner has invited can sign in. The public website at mushygreen.uk only shows videos that are already public on YouTube, and it does not ask visitors for any personal data.

Data we receive from TikTok

When an account owner chooses "Log in with TikTok" in the Service, TikTok asks them to approve these permissions:

user.info.basic: the account's open ID, display name and username, used to show which TikTok account is connected.
video.upload and video.publish: used only to upload and post videos that the account owner has prepared and approved in the Service.

Before each post we also read the creator information TikTok provides (username, nickname, allowed privacy options and maximum video length) so the post follows the account's settings.

Data we receive from YouTube and Facebook

For YouTube we use Google sign-in with the YouTube upload permission, and for Facebook a Page access token supplied by the Page owner. These are used only to publish the owner's videos and to read back the published video's ID and link.

How we store it

Refresh tokens, Page tokens and app keys are encrypted (AES-GCM) before they are stored, and the Service never shows them again after they are saved.
Short-lived access tokens are only kept in memory while a post is running.
We keep a record of each post (platform, time, result, post ID and link) so the team can see what was published.
Data is hosted on Cloudflare (Workers, D1 and R2).

What we do not do

We do not sell, rent or share your data with advertisers or other third parties.
We do not read your followers, messages, comments or other people's content.
We do not post anything that the account owner has not approved.

Your choices and deleting data

An account owner can disconnect TikTok at any time with "Remove login" on the Connections page. This deletes the stored refresh token right away.
You can also revoke access from TikTok: Settings and privacy → Security → Manage app permissions. Google and Facebook access can be removed the same way in those services.
To ask us to delete all data linked to your account, contact us using the details below. We will do it within 30 days.

Children

The Service is a work tool for adults and is not meant for children under 13.

Changes

If we change this policy we will update this page and the effective date above.

Contact

Send us a message through our Facebook Page Eastern Wisdom for Modern Life.