Privacy Policy
Last Updated: August 15, 2026
Overview
GF Social Hub is a secure internal web application developed for Gulf Fashion to manage and connect official social media accounts across multiple brands. This Privacy Policy explains what information is processed, how it is used and how it is protected.
Information We Collect
When an authorized administrator connects a TikTok account, the application receives limited public profile information from TikTok, including the account username, display name, avatar, Open ID and the OAuth permissions granted during authorization. No customer or end-user personal information is collected.
How We Use Information
The collected information is used exclusively to identify the connected TikTok account, maintain secure brand connections, display account status within the dashboard and provide authorized administrators with account management features.
TikTok Login Kit Integration
GF Social Hub uses the official TikTok Login Kit (OAuth 2.0 Authorization Code Flow with PKCE). Authentication is performed directly by TikTok. Access and refresh tokens are exchanged securely on the server and are never exposed to the browser.
Cookies
The application uses secure, httpOnly cookies only for authentication, session management and encrypted OAuth connections. These cookies are essential for the platform to operate and are never used for advertising or cross-site tracking.
Data Security
Sensitive credentials are encrypted using industry-standard encryption and transmitted only over HTTPS. OAuth state values are cryptographically verified to prevent unauthorized requests and protect account integrity.
Data Retention
Connected account information is retained only while the connection remains active. Disconnecting a TikTok account permanently removes the locally stored encrypted credentials associated with that connection.
Data Sharing
GF Social Hub does not sell, rent or share personal information with third parties. Information is processed only as required to provide TikTok account connection functionality or when required by applicable law.
Your Rights
Authorized users may request access to stored information, correction of inaccurate information, removal of connected accounts or deletion of locally stored OAuth credentials by contacting our support team.
Contact Us
If you have any questions regarding this Privacy Policy or your information, please contact us at info@listroma.com or visit https://dashboard.listroma.com/support.
This Privacy Policy may be updated periodically to reflect changes to the platform, applicable laws or TikTok platform requirements. The latest version will always be available on this page.