PRIVACY
POLICY.

OkeDokey is a desktop application that runs entirely on your local machine. Understanding this architecture is critical to understanding our privacy posture:

• Local Processing: All video color grading, audio mixing, file hashing, queue scheduling, and upload execution happens on your PC using local FFmpeg binaries and a local SQLite database.
• Direct API Uploads: When you upload content to TikTok, YouTube, Instagram, or Facebook, your desktop app communicates directly with those platform APIs. Your media files are sent from your PC to the social platform — they never pass through Wamaaz servers.
• OAuth Tokens: Social media authentication tokens (access tokens, refresh tokens) are stored locally on your device in an encrypted SQLite database. They are never transmitted to or stored on our central servers.
• Website Role: Our website (okedokey.com) handles only: user account registration, subscription management, license validation, and desktop app download distribution.

Account Information (Server-Side): When you register for OkeDokey, we collect your name, email address, and encrypted password to manage your subscription, validate your license, and provide access to the platform.

Subscription Data (Server-Side): We store your subscription tier (Free, Individual, Business), billing cycle, and payment status. Payment processing is handled by third-party processors — we never store credit card numbers.

Device Fingerprint (Server-Side): We may collect a hashed device identifier to validate your license and prevent unauthorized use across multiple machines.

Local Data (Never Transmitted): The following data is stored only on your PC and is never sent to our servers:

• Social media API tokens (TikTok, YouTube, Instagram, Facebook OAuth credentials)
• Automation configurations (folder paths, scheduling rules, platform settings)
• Media content (videos, images, carousels) and processing artifacts
• Upload queue history and error logs
• Color grading presets and audio mixing settings

OkeDokey connects to the following third-party platforms via their official APIs:

• TikTok — via TikTok Content Posting API (OAuth 2.0 with PKCE). Used for video, carousel, and image uploads.
• Instagram — via Meta Graph API. Used for Reels, carousels, and image publishing.
• Facebook — via Meta Graph API. Used for video and image publishing to Pages.
• YouTube — via YouTube Data API v3. Used for video uploads and scheduling.

When you connect these platforms, you authorize OkeDokey (on your local machine) to act on your behalf. Your authentication tokens are stored locally. Disconnecting a platform in the app immediately removes all stored tokens for that platform from your local database.

Server-Side: We implement industry-standard AES-256 encryption for data at rest and TLS 1.3 for data in transit. We retain your account information as long as your account is active.

Local-Side: Your local SQLite database containing automation data and API tokens is stored in your OkeDokey application directory. We recommend enabling full-disk encryption on your operating system for additional protection.

Server Data: You may request full account and data deletion by emailing our support team. Upon verification, all personal data will be purged from our active databases within 14 business days.

Local Data: To remove all local data, simply uninstall OkeDokey from your PC and delete the application data directory. All automation configs, API tokens, and media processing artifacts will be permanently removed.