Privacy Policy

kariochi ("the Platform," "we," "us," "our") is a music content distribution platform operated by Artem Korneev that helps independent music artists publish their audio and video content to social media channels. This Privacy Policy explains what information kariochi collects, how it is used, your rights regarding that information, and how to contact us with questions or requests.

1. Information We Collect

When you use kariochi, we collect the following types of information:

• Account and contact information: Your name, email address, and profile information when you register or join the waitlist.
• Uploaded content: Audio files, cover images, and video content you upload to the Platform for distribution.
• OAuth access tokens: When you connect a social media platform (TikTok, YouTube, Instagram, SoundCloud, or Telegram), we store OAuth access tokens and refresh tokens to enable publishing on your behalf. Tokens are encrypted in transit and stored with restricted access controls.
• TikTok user data: When you connect your TikTok account, we request two scopes: (a) user.info.basic — used solely to retrieve your TikTok display name and username, displayed in your kariochi dashboard to confirm the connected account; (b) video.publish — used solely to upload original short-form video content (vertical 9:16 format) to your TikTok account, exclusively at your explicit instruction. We do not access your TikTok followers, messages, likes, or any data beyond these two scopes. The specific fields stored on our servers for TikTok are: open_id (your TikTok account identifier), access_token (used to call the TikTok API on your behalf), and refresh_token (used to renew the access token when it expires). No other TikTok user data is stored.
• Usage logs: Timestamps and outcomes of publish actions, stored locally for your publish history. No behavioural analytics or advertising data are collected.

2. Legal Basis for Processing (GDPR)

Where the General Data Protection Regulation (GDPR) applies, we process your personal data on the following legal bases:

• Contract performance: Processing necessary to deliver the distribution service you have signed up for.
• Legitimate interests: Basic operational logging to ensure service reliability and security.
• Consent: Where you have explicitly authorised connection of a third-party platform account via OAuth.

3. How We Use Your Information

• To publish your music and video content to the platforms you have connected, at your instruction.
• To display your connected account identities in the kariochi dashboard.
• To automatically refresh OAuth tokens to maintain uninterrupted publishing access.
• To store publish history so you can track where and when your content was distributed.
• To send you service-related communications (account updates, availability notifications). We do not send marketing emails without your consent.

We do not use your information for advertising, profiling, sale to third parties, or any purpose beyond delivering the distribution service you have requested.

4. Data Sharing

kariochi does not sell, rent, or share your personal information with third parties, except in the following limited circumstances:

• Connected platforms: When you publish content, that content and required metadata are transmitted to the platform you selected (TikTok, YouTube, etc.) according to your instructions and their terms of service.
• Infrastructure providers: We use Railway (railway.app) for hosting and Google Drive for encrypted database backups. These providers process data only as necessary to operate the infrastructure and are bound by their own privacy and security commitments.
• Legal requirements: We may disclose data if required by law, court order, or to protect the safety of our users or the public.

5. Data Retention

• OAuth tokens: Retained for the duration of your connected account. Deleted immediately and permanently upon disconnection.
• Uploaded files (audio, images, video): Retained until you delete the track from the Platform.
• Waitlist email addresses: Retained until you request removal or until the Platform launches and accounts are created.
• Publish logs: Retained for up to 24 months for operational purposes, then deleted.

6. Security

We implement reasonable technical and organisational measures to protect your data, including HTTPS encryption for all data in transit, restricted administrative access controls, and infrastructure-level security provided by Railway. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and, where required, the relevant supervisory authority within 72 hours of becoming aware of the breach.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure ("right to be forgotten"): Request deletion of your personal data, subject to legal obligations.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Disconnect any connected platform at any time through your dashboard, which immediately revokes our access to that platform's data.

California residents (CCPA): You have the right to know what personal information we collect, to request deletion, to opt out of any sale (we do not sell personal information), and to non-discrimination for exercising these rights.

To exercise any of these rights, contact us at artemkorneevmusic@gmail.com. We will respond within 30 days.

8. Third-Party Platforms

kariochi connects to third-party platforms including TikTok, YouTube, Instagram, Telegram, and SoundCloud. Your use of those platforms is governed by their own privacy policies. kariochi is not responsible for the data practices of those platforms. We encourage you to review TikTok's Privacy Policy at tiktok.com/legal/privacy-policy.

9. International Data Transfers

kariochi is operated from Ukraine. If you access the Platform from the European Economic Area or other regions with data protection laws, your information may be transferred to and processed in jurisdictions with different data protection standards. By using kariochi, you consent to such transfers. We take steps to ensure adequate protections are in place.

10. Children's Privacy

kariochi is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. We will notify registered users of material changes via email. Continued use of kariochi after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions, data requests, or to exercise your rights, contact us at:
artemkorneevmusic@gmail.com