M23

Privacy Policy

Effective Date: August 3, 2026

Overview

M23 is operated by H9D Studio LLC. This Privacy Policy explains what information M23 collects, why it is used, how it is protected, when it may be shared, how long it is retained, and the choices available to people who use M23 websites, M23 Engine, or an authorized third-party integration such as TikTok.

Information We Collect

We may collect information you provide directly, including your name, email address, business information, messages, account preferences, and content or media you choose to manage through M23. We may also receive basic device, browser, log, security, and website-usage information.

TikTok Integration Data

When an authorized M23 operator connects a TikTok account, TikTok may provide an app-scoped user identifier, display name, avatar, username, granted permissions, access-token and refresh-token information, token expiration information, creator posting capabilities, and the status or identifier of content submitted through TikTok's Content Posting API. M23 processes the video, caption, privacy selection, and comment, Duet, or Stitch settings the operator deliberately chooses for a post. M23 does not request TikTok passwords and currently requests only user.info.basic and video.publish.

How We Use Information

We use information to authenticate authorized operators; connect the correct platform account; display account identity and current posting choices; submit operator-approved content; verify publishing outcomes; prevent duplicate or unauthorized actions; provide support; maintain audit, security, and reliability records; improve the service; and comply with legal obligations.

Cookies and Analytics

Our website may use basic cookies or analytics tools to understand website performance and usage. Visitors can manage cookie preferences through their browser settings.

Sharing of Information

We do not sell personal information. Information is shared with TikTok only when an authorized operator connects an account or deliberately submits content to TikTok. We may also use infrastructure, hosting, security, analytics, communications, and storage providers that process information on our behalf under appropriate restrictions. We may disclose information when required by law or reasonably necessary to protect users, rights, safety, security, or service integrity.

Legal Bases and Operator Control

Depending on applicable law, processing is based on the user's request or contract, consent, legitimate interests in operating and securing the service, or compliance with law. Connecting TikTok and submitting content are deliberate operator actions. TikTok authorization can be revoked through TikTok or by requesting disconnection from M23.

Storage, Security, and Retention

Credentials are kept out of public pages and source code and are restricted to systems used to operate the integration. We use administrative and technical safeguards designed to limit unauthorized access, alteration, disclosure, or destruction. No system is completely secure. We retain information only as long as reasonably necessary for the purposes described here, including account connection, publishing verification, security, dispute resolution, and legal compliance. Tokens are deleted or rendered unusable when an integration is disconnected or deletion is completed, except where limited records must be retained by law or for security and audit integrity.

International Processing

M23 and its service providers may process information in the United States and other countries where they operate. Where required, appropriate safeguards are used for cross-border transfers.

Data Security

We use reasonable administrative, technical, and organizational measures to help protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Third-Party Platforms

Our services may involve integrations or workflows connected to third-party platforms. Use of those platforms is also governed by their own privacy policies and terms.

Your Choices and Data Deletion

Subject to applicable law, you may request access, correction, deletion, restriction, or a copy of personal information, and may object to or withdraw consent for certain processing. You may disconnect TikTok through the platform or contact M23. Instructions are available on our Data Deletion page. We may need to verify a request before acting on it.

Children's Privacy

Our website and services are not intended for children under 13. We do not knowingly collect personal information from children under 13.

Policy Changes

We may update this policy as the service, integrations, or law changes. The effective date above identifies the current version. Material changes will be communicated when required.

Contact

For privacy questions, contact us at info@m23affect.com.