W&T Planner · smm.wt-studio.org

Privacy Policy

Last updated: 9 October 2026

W&T Planner (“the app”) is a private publishing planner operated by Aleksei Tikhonov, individual entrepreneur (W&T Studio). It is used only by its owner to prepare and schedule his own posts for Instagram, Telegram, VKontakte, YouTube and TikTok, and to view statistics of his own accounts. The app is not offered to the public.

What data the app accesses

• YouTube (Google) — via YouTube API Services. With the account owner’s consent the app uploads videos the owner prepared, sets their title, description, tags, thumbnail, playlist and scheduled publication time, and reads the owner’s channel information and YouTube Analytics reports (views, watch time, audience retention, subscribers). It also reads the comments left on the owner’s videos and posts the replies the owner writes in the app. Scopes: youtube.upload, youtube, yt-analytics.readonly, youtube.force-ssl.
• Instagram (Meta) — via the Instagram Graph API. Publishing to the owner’s own Instagram professional account, reading its statistics, reading comments on the owner’s posts and posting his replies, and reading the messages people send to the owner’s account in Instagram Direct and sending the replies the owner writes in the app (permission instagram_manage_messages). Replies are sent only when the owner writes and sends them; the app sends no automated or promotional messages to Direct.
• TikTok — via TikTok Login Kit and the Content Posting API. The owner signs in with his TikTok account. With his consent the app reads his basic profile (display name, avatar, open ID — user.info.basic), sends the videos and photo posts he prepared to his TikTok account — as a draft to his TikTok inbox (video.upload) or as a post published with the privacy level, comment/duet/stitch settings and branded-content disclosure he chooses in the app (video.publish) — and checks the status of those posts. For the app’s Feed view it reads his own videos with their public counters (video.list), his username and bio (user.info.profile) and his follower, following, likes and video counts (user.info.stats).
• Telegram, VKontakte — publishing to the owner’s own channel and community, reading their statistics, and (Telegram) reading comments on the owner’s posts and posting his replies through the platforms’ official APIs.
• Planner account — a login name, a password hash and a session cookie needed to sign in.

Apart from comments on the owner’s own posts and messages people send to the owner’s Instagram Direct (the sender’s username or public display name, the text and attachments, and the time — shown only to the owner so he can answer), the app does not access, collect or store data of other people (viewers, subscribers) beyond the aggregated statistics the platforms provide to the account owner.

How data is used and stored

• Access tokens are stored on the app’s server encrypted (AES-256-GCM) and are used only to perform the actions listed above at the owner’s request or schedule.
• Statistics received from YouTube API Services are cached for at most 30 days and then refreshed or deleted.
• Comments are stored on the server only to show them to the owner in the app. YouTube comments are refreshed regularly and deleted once they have not been refreshed for 30 days.
• Instagram Direct messages are stored on the server only to show the conversation to the owner and let him reply. They are deleted 90 days after the last message in a conversation, or earlier on request.
• From TikTok the app keeps only the encrypted tokens, the owner’s display name and avatar, and the identifiers and links of the posts it sent. His video list and profile counters are read when he opens the Feed and are not stored.
• Media files and post texts are the owner’s own content, kept until the owner deletes them in the app.
• Data is not sold, shared with third parties or used for advertising. The servers are located in Russia (main server) and the Netherlands (a relay used to reach the platforms’ APIs).

YouTube API Services

The app uses YouTube API Services. By using the app’s YouTube features you agree to the YouTube Terms of Service. Google’s handling of your data is described in the Google Privacy Policy (www.google.com/policies/privacy).

You can revoke the app’s access to your Google account at any time on the Google security settings page, or with the “Disconnect” button in the app’s settings. After revocation the stored tokens are deleted.

TikTok

By using the app’s TikTok features you agree to the TikTok Terms of Service and the Music Usage Confirmation; branded content is subject to the Branded Content Policy. TikTok’s handling of your data is described in the TikTok Privacy Policy.

You can revoke the app’s access with the “Disconnect” button in the app’s settings (the app also revokes the token at TikTok) or in the TikTok app: Settings and privacy → Security → Apps and services. After revocation the stored tokens are deleted.

Deleting data

To delete all data the app stores about your accounts, disconnect the platform in the app’s settings or write to alextikhph@gmail.com; the data is deleted within 7 days. If you wrote to the owner’s Instagram account or commented on his posts and want your messages or comments removed from the app, follow the data deletion instructions.

Cookies

The app uses a single session cookie to keep you signed in. No tracking or advertising cookies are used.

Contact

alextikhph@gmail.com

Terms of Service · Sign in