Storm Salon Social

Privacy Policy

Last updated: July 18, 2026

Storm Salon Social (operated by Storm Global, Inc., "we," "us," or "our") is a social media marketing agency serving hair salons. This policy explains what information we collect through our publishing tools, how we use it, and the rights of the businesses and platform users whose accounts we are authorized to manage.

1. Who this policy covers

Our publishing tools are used only with social media accounts whose owners have explicitly authorized us to act on their behalf. This includes accounts on TikTok, Instagram, Facebook, Pinterest, and Google Business Profile. We do not access, collect, or process data from any account that has not granted us authorization through the platform's official authorization (OAuth) flow.

2. Information we collect

TikTok data

When a salon client authorizes our application on TikTok, we receive and store only what is required to deliver content to their account:

• The account's TikTok open_id (a stable identifier for the authorized account).
• OAuth access and refresh tokens, used to upload draft content the account owner has approved.
• Basic profile information made available through the user.info.basic scope (display name and avatar), used to confirm which account content is being posted to.
• Profile details made available through the user.info.profile scope (username, profile link, verified status), used to label the account correctly in our tools and in reports we show its owner.
• Account statistics made available through the user.info.stats scope (follower, following, likes, and video counts).
• The account's own post list and its public performance figures, made available through the video.list scope (post title, cover image, link, publish date, and view, like, comment, and share counts).
• Authorization to upload content to the account as a draft, through the video.upload scope. Drafts land in the account owner's TikTok inbox, where the owner reviews the post, chooses its audience and settings, and publishes it themselves.
• Authorization to publish to the account, through the video.publish scope. This lets us post finished content to the account's feed at a time the salon has agreed, instead of leaving a draft for someone to tap. We store no additional personal data to do this. For every such post the salon chooses the audience, whether comments, Duet and Stitch are allowed, and whether the post is disclosed as promotional content or as a paid partnership. Those choices are the salon's, they are recorded with the post, and they are sent to TikTok exactly as chosen. The salon can revoke this authorization at any time from their TikTok settings.

The statistics and post data above are read only, are read only from accounts that have authorized us, and are used for one purpose: showing that salon its own performance. We report a salon's numbers back to that salon and to no one else. We do not collect a TikTok user's followers' identities, direct messages, or any content other than the material we ourselves upload on the account owner's behalf.

Other platforms

For other connected platforms we similarly store only the authorization tokens and account identifiers needed to publish approved content.

3. How we use information

We use the information above solely to:

• Upload and publish short-form video and image content that the account owner has approved.
• Confirm that content is being posted to the correct authorized account.
• Publish that content to the account, either as a draft for the owner to finish or directly to the feed, using the audience and disclosure settings the salon selected.
• Show the account owner how their own posts performed, inside our reporting tools and in the reports we deliver to them.
• Maintain the authorized connection until the account owner chooses to revoke it.

We do not use this information for advertising, profiling, resale, or any purpose unrelated to the publishing service the account owner has contracted us to perform.

4. How information is stored and protected

• Tokens and account identifiers are stored securely on operator-controlled systems with access restricted to authorized Storm Salon Social personnel.
• We never sell, rent, or share this data with third parties.
• We transmit data only to the official APIs of the platform the account belongs to (for example, TikTok's Content Posting API).

5. Data retention and revocation

We retain a client's authorization tokens only for as long as they remain our client and their authorization is active. An account owner may revoke our access at any time from their platform's app-permission settings (for TikTok: Settings → Security & permissions → Apps and websites). Revocation is immediate and final; upon revocation we cease all access and delete the associated tokens.

6. Third-party platforms

Our service interacts with third-party platforms that maintain their own privacy policies. TikTok's handling of user data is governed by the TikTok Privacy Policy. We encourage account owners to review the policies of any platform they connect.

7. Children's privacy

Our service is intended for businesses and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

9. Contact us

Questions about this policy or a request to remove data can be sent to:
Storm Global, Inc. (Storm Salon Social)
hello@stormsalonsocial.com
stormsalonsocial.com