Privacy Policy

Promoter · shurco.app · Last updated 2026-09-03

Overview

This Privacy Policy describes how Dmitry Shurco ("we", "us", or "our"), operating as shurco.app, collects, uses, and protects information when you use Promoter — our launch console for publishing original videos and announcements to TikTok, YouTube, Instagram Reels, Facebook Reels, and developer channels — including the Promoter web application, the promoter.shurco.app website, and related services (collectively, the "Promoter Services" or "Services").

Promoter runs primarily on your machine. We do not sell your personal data, and we collect only what we need to operate Promoter and respond to your requests.

Information we collect

When you use Promoter, we may process the following categories of information:

• Account and contact information (such as your email address): only if you choose to contact us for support, early access, or feedback about Promoter.
• Platform credentials and API keys you enter in Promoter: stored locally on your device with encryption at rest. We do not receive or store these secrets on our servers unless you explicitly send them to us for support.
• App listing and marketing content you create in Promoter: stored locally as part of your Promoter workspace.
• Diagnostic data (such as crash reports): collected automatically by platform providers where applicable to help us fix bugs and improve Promoter. This data is not linked to your identity unless you also provide contact information.
• Technical data (such as device type, OS version, and Promoter version): used to understand compatibility and performance.

How we use information

We use the information described above solely to:

• Provide and operate Promoter
• Respond to support and early-access requests you send us about Promoter
• Diagnose crashes and improve Promoter reliability
• Comply with applicable law

What we do not do

With Promoter we aim to keep things simple:

• We do not sell your personal data to third parties
• We do not use your Promoter data for cross-app advertising profiles
• We do not track you across unrelated websites or apps for marketing purposes

Third-party services

Promoter connects to third-party platforms — such as TikTok, YouTube, Instagram, Facebook, Reddit, dev.to, Hashnode, Mastodon, Discord, and AI providers — only when you configure credentials and submit content. Those platforms process data under their own privacy policies.

When you open an external link from Promoter or promoter.shurco.app, that third party's privacy policy applies.

TikTok integration — data we access

When you connect your TikTok account through Promoter, we request two OAuth scopes:

• user.info.basic — to display your TikTok nickname and avatar so you know which account is connected. We do not store your TikTok profile data beyond the current session display.
• video.publish (Content Posting API, Direct Post) — to publish original videos you created to your own TikTok profile after you explicitly review and confirm each post. We do not access your existing TikTok videos, followers, analytics, or any other account data.

We do not request video.upload (draft inbox), video.list, or any analytics or audience-data scopes.

TikTok OAuth tokens (access token and refresh token) are stored on your own server instance, encrypted with AES-256-GCM at rest. Refresh tokens are rotated on each use as recommended by TikTok. We do not transmit or store your TikTok credentials on our infrastructure. You can revoke Promoter's access at any time in your TikTok app settings (Settings → Security → Manage app permissions).

Promoter does not copy, scrape, or aggregate content from other platforms onto TikTok. Every video published through Promoter is original content created by the authorized TikTok account owner. For the full integration description, see promoter.shurco.app/tiktok.

Data retention

We retain information only for as long as needed to operate Promoter, respond to support requests, or meet legal obligations. Promoter workspace data and credentials remain on your device unless you choose to share them with us.

Crash and diagnostic data retained by platform providers is governed by their respective policies and retention schedules.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object to certain processing or lodge a complaint with a supervisory authority.

To exercise these rights, contact us at the email address below. We will respond within a reasonable time and as required by applicable law.

Children

Promoter is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children through Promoter. If you believe a child has provided us personal data, please contact us and we will take appropriate steps to delete it.

International transfers

We are based in Spain. If you use Promoter from outside the European Economic Area, your information may be processed in countries with different data-protection laws. Where required, we rely on appropriate safeguards for such transfers.

Changes to this policy

We may update this Privacy Policy for Promoter from time to time. The "Last updated" date at the top of this page indicates when it was last revised. Continued use of Promoter after changes take effect constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy or Promoter data practices, contact Dmitry Shurco at contact.

Postal address: Pg. de St. Joan, 6, 08010 Barcelona, Spain.