Security
Security is a core part of PristGem Social Workspace. Our platform is designed to protect account access, TikTok API credentials, workspace data, and user-initiated comment and content workflows.
Credential protection
OAuth access tokens and refresh tokens, when stored, are treated as sensitive credentials. They are not displayed on public pages, not exposed in screen recordings, and not intentionally logged in plain text.
Access control
Workspace access is limited to authorized users. TikTok account actions are scoped to authorized accounts and owned videos. We recommend that account owners remove users who no longer need access.
Auditability
We may maintain operation logs for account connection, analytics retrieval, comment management, and other user-initiated workflows. These logs help with security reviews, troubleshooting, and misuse prevention.
Data minimization
We aim to store only the minimum data needed to provide the service, maintain compliance, and support authorized account workflows.
Responsible disclosure
If you believe you have found a security issue, contact us at [email protected] with details so we can investigate.