Local-first by design, explicit by default.
AccountPilot is designed to minimize unnecessary transfer of creator credentials and publishing data.
OAuth, not shared passwords
Creators connect supported platform accounts using official authorization flows. The product does not require creators to share their TikTok passwords with other users.
Local credential protection
Desktop authorization secrets and refresh credentials are intended to be stored locally using operating-system protection rather than exposed in the browser interface or logs.
Fail-closed publishing
Missing authorization, changed media, stale approval or incompatible creator capabilities block automated publishing instead of silently proceeding.
No credential exposure in public UI
Access tokens, refresh tokens, client secrets and temporary upload URLs are not displayed in normal public application responses.
Report a security concern
Contact support@YOUR-DOMAIN.example. Please do not include passwords, access tokens or other secrets in email.