Privacy Policy

Last updated: 30 August 2026

This Privacy Policy explains what information Lizarv Studio (the “Service”) collects when it is connected to a social media account, how that information is used, and what choices exist over it. It applies to the Pinterest and TikTok integrations and to every other platform the Service can connect to.

About this service

Lizarv Studio is an internal, personal-use tool operated by Kevin Tovar to manage organic content for his own e-commerce store, lizarv.com. It is not offered as a service to third parties and is not open to public sign-up — registration is closed and the only accounts are the operator’s own. It accesses no other person’s data. If the application is ever opened to other users, this page will be updated before that happens.

1. What the Service accesses, per platform

Pinterest

The Service does not access other users’ Pinterest data, does not display Pinterest content outside the application, and does not make Pinterest data available to any third party.

TikTok

The Service does not read other users’ TikTok content, does not browse or display TikTok content outside the application, and does not use TikTok data for advertising or profiling.

Other connected platforms

The Service can also connect YouTube, Instagram, Facebook, Threads and Bluesky accounts belonging to the operator. For those it stores the same categories of data: authorization credentials (OAuth access and refresh tokens; for Bluesky, an app password, stored encrypted), basic profile details used to label the connection, and the content submitted for publishing.

Operator account data

A sign-in email address and a hashed password for the operator’s own login, plus the product data (image, title, description, destination link) that the Service pulls from the lizarv.com catalog.

2. How the information is used

Solely to operate the Service: to authenticate with each platform, display the connected accounts, publish the content the operator requests, and avoid duplicate posts. Nothing else.

3. What the Service does not do

4. Sharing

Content and credentials are transmitted only to the platform being published to, through that platform’s official API, and only to perform an action the operator initiates. No data is shared with any other third party except where required to comply with law.

5. Retention and deletion

Tokens and account data are retained only while an account remains connected. To remove data:

Content already published to a platform lives on that platform and must be deleted there.

6. Security

Access tokens and app passwords are encrypted at rest with authenticated symmetric encryption, and all traffic to platform APIs travels over HTTPS. The Service runs as a single-operator deployment with closed registration, so no other account can reach the stored credentials. No method of storage or transmission is completely secure, but reasonable measures are taken to protect this information.

7. Third-party platforms

Use of each platform remains governed by that platform’s own privacy policy — see the Pinterest Privacy Policy, the TikTok Privacy Policy, and the equivalent policies for YouTube, Instagram, Facebook, Threads and Bluesky.

8. Changes

This policy may be updated from time to time. Material changes are reflected by the “Last updated” date above.

9. Your rights under Colombian law

The Service is operated from Colombia. Under Law 1581 of 2012 (Habeas Data) and Decree 1377 of 2013, the owner of personal data may ask the operator to access, correct, update or delete that data, and may withdraw consent at any time. Deletion follows the procedure described in Retention and deletion above; any other request can be sent to kevinetl01@gmail.com and is answered within the terms set by that law.

10. Contact

Lizarv Studio is operated by Kevin Tovar. Questions about this policy, and requests to access or delete data, can be sent to kevinetl01@gmail.com.