מדיניות פרטיות · Privacy Policy

"Hafatza Studio" is operated by Rabbi Roi Amgar. It has two parts: a public service where each user publishes their own videos to their own TikTok account, and an internal tool where the rabbi publishes his own videos to his own YouTube, TikTok, Instagram and Facebook accounts and manages comments on them.

Service users

Data we process: Google account ID and email (for sign-in); TikTok account ID, display name and the access tokens TikTok issues (encrypted at rest with AES-256-GCM); the videos you upload, your captions and the settings you choose. We never receive or store your password.

Use: only to publish what you approved, show you its status and protect the service. We do not sell data, use it for advertising or share it, other than with the infrastructure providers that run the service (Vercel for storage, Neon for the database) and TikTok, which receives the video you approved.

Retention: a video is deleted from our storage once TikTok has received it. Drafts and failed posts are deleted after 14 days without activity. Tokens are deleted when you disconnect. Until then, videos are stored at a random, unpublished address, though anyone holding that address could open them. A security log, including email addresses and actions taken, is kept and is not deleted.

Deletion: you can delete your account and all your data from the "My videos" screen. Videos already published on TikTok stay there and remain yours to manage.

The rabbi's internal tool

Data we process: OAuth tokens for the rabbi's own accounts (encrypted at rest); public comments on the rabbi's videos and a one-way hash of the commenter ID; view statistics for those videos.

Use: publishing videos, showing comments to the rabbi, hiding spam/abusive comments, and replying to comments. Comment text may be processed by an AI model (Anthropic Claude) to classify it and draft a reply. Comments are deleted after at most 90 days. YouTube API data is deleted within 30 days of access being revoked. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Deletion and contact: see data deletion instructions. Email: amgarw3@gmail.com