1. Who we are and what this policy covers
GrowNori is a video creation and marketing workflow project operated by an independent developer. For privacy, account connection or support questions, contact gw16972@outlook.com.
This policy covers the information website at grownori.com, communications with us, and the current local development preview. The public website contains information and contact links. The working video tool runs on the operator's computer; it is not a public cloud workspace. It currently has one local workspace, without separate customer accounts or customer data isolation.
2. Information website visits
The website does not have an upload form, account registration, payment form, advertising pixels or an analytics script. Its page code does not set tracking cookies or store visitor preferences in browser storage.
The hosting provider, Vercel, may process technical request information, such as your IP address, requested page, browser information, request time and security or error records, to deliver and protect the website. See Vercel's Privacy Notice for its own practices. Website hosting does not upload the local video workspace or its files to Vercel.
3. Information used by the local video preview
When you use the local tool, it processes the materials you select or provide: product facts and source references, prompts and conversation messages, scripts and captions, images, recordings, audio and video. It also keeps project versions, selected materials, approval decisions, job identifiers, file hashes, progress, errors and output records. These records support the creation, review, recovery and download of the exact version you selected.
Uploaded assets, job records and produced files are stored on the operator's computer. Some tools also use their own local working folders. The local interface uses browser storage for drafts, conversation references, display preferences and local calendar or demonstration records. Clearing browser storage can remove those browser records; it does not automatically remove files or job records stored on disk.
Please provide only information and media you are authorized to use. Avoid adding passwords, access tokens, payment details or unnecessary sensitive personal information to prompts or materials.
4. AI assistance and other processing tools
When you request AI assistance, your request, relevant conversation context and the selected source excerpts or tool results needed for that task are sent to the configured local agent service. That service may use external model providers. A local interface does not mean every AI request stays on the computer: the operator's provider configuration determines which external services process the request.
The current media workflow also uses configured local tools for generation, speech, editing and file processing. We do not send your local media files to the information website as part of that workflow. If an external processing provider is added or enabled, its data handling and any relevant changes to this policy must be explained before that new workflow is offered. External providers may process requests in other countries and apply their own retention practices; this policy does not promise a retention or model-training setting that we have not confirmed.
5. Optional TikTok account connection
When the developer configuration is available and you choose to connect TikTok, the local tool redirects you to TikTok's official authorization page. You sign in and approve or decline access there. GrowNori does not ask for or store your TikTok password.
The current Sandbox connection is for basic account identification. After successful authorization, the local tool can receive your TikTok application-scoped account identifier, display name, granted permissions, access and refresh tokens, expiry times and connection status. It uses this information to identify the connected account, display its permission status, refresh access when requested, and disconnect it when requested.
Authorization, token exchange, profile lookup, requested refresh and revocation involve requests to TikTok's official services. TikTok also processes information when you use its login and consent pages under TikTok's Privacy Policy.
Access and refresh tokens are encrypted in the local connection store. The encryption key is also managed locally, so protecting the operator's computer remains important. Account identifiers, display names, permissions, expiry times and operational metadata are not all encrypted. Tokens are not returned to browser code or placed in the public website.
A successful account connection is not confirmation of video publication. Real video publishing is disabled in the current preview, and this basic Sandbox connection does not publish a video.
6. Cookies used for local authorization
The local tool sets a necessary, HTTP-only cookie when you start TikTok authorization. It binds the return from TikTok to the same browser and expires after 10 minutes; the callback clears it when it processes a recognized authorization attempt. The server also keeps a short-lived, single-use authorization record that becomes invalid after 10 minutes. An expired record can remain on disk until a later authorization operation cleans it up.
This cookie protects the account connection flow. It is not a customer login session or advertising tracker. TikTok may set its own cookies on its official website, separately from GrowNori.
7. Support messages and information sharing
If you email us, we receive your address, message and attachments through the email provider used for the support mailbox. We use them to respond to you, investigate the issue and handle requests about your information. Please send only the details needed for the request, and never send passwords or tokens.
GrowNori does not sell personal information or use the website for targeted advertising. Information is shared as needed with the hosting, email, TikTok and configured processing services described above. We may also disclose information when required by applicable law or necessary to address security or misuse. Local files are not automatically available to the developer through this website; any support access or file sharing requires a separate arrangement with you.
8. Retention, removal and disconnecting TikTok
The local preview does not yet have an automatic project retention schedule. Local files, job history and conversation records remain on the computer until the operator removes them. Contact us for help locating or removing the relevant records; we cannot remotely erase a computer's files through this website. Independently saved downloads and backups must be managed by their holders.
You can request disconnection from the local TikTok account page, or remove the app's access through TikTok's own account settings. The local tool removes its stored token after TikTok confirms a successful revocation. If the request times out or its result is unknown, the tool keeps a pending disconnection status rather than claiming access was revoked; you can use TikTok's settings to revoke access directly. A connection record, including account metadata and status, may remain locally after disconnection. Disconnecting does not delete video projects or copies held by TikTok.
Hosting, email and model providers manage records they hold under their own policies. Support correspondence is retained as needed to handle the request and follow-up or applicable obligations; you may ask us to delete information we hold.
9. Your choices and requests
You can decline TikTok authorization, stop using a connected feature, revoke permissions, and choose which materials to provide. Depending on the law that applies to you, you may also have rights to access, correct, receive a copy of, delete, or restrict certain processing of your personal information, withdraw consent, or contact your local privacy regulator.
Send requests to gw16972@outlook.com, identifying the relevant interaction or local record without including credentials. We may need reasonable information to confirm the request concerns you. What we can access or delete depends on whether the record is held by us, on your local computer, or by an independent provider.
10. Security and changes
The local APIs are restricted to the local computer, authorization records are single-use, and stored TikTok tokens are encrypted. These measures reduce specific risks; they do not make a shared or compromised computer secure. Keep access to the computer restricted and do not expose the local workspace on the internet.
The preview is not intended to collect children's information. Social account users must meet the connected platform's eligibility requirements. Contact us if you believe information was provided without appropriate authorization.
We will update this page when the product's data practices change and revise the date above. A future hosted customer service or real publishing feature will require an updated description of its data handling before it is offered.