Privacy Policy

Fortune & Ruin — effective July 30, 2026

Fortune & Ruin ("we", "our") operates automated publishing tools that post our own original short-form video content to our own social media accounts (YouTube, TikTok, Instagram, Facebook). This policy describes how those tools handle data.

1. What data we collect

Our tools access only the social media accounts that we own and operate. Through platform APIs (with OAuth authorization granted by us, the account owner) we store:

• OAuth access and refresh tokens for our own accounts (including, for TikTok, the account's open_id, display name and avatar), encrypted at rest (AES-256-GCM);
• Public performance metrics of our own published videos (view, like and comment counts).

We do not collect, store, or process any personal data from viewers, followers, commenters, or any third party. We do not read private messages, follower lists, or any data belonging to other users.

2. How we use data

Tokens are used exclusively to upload our own videos and read our own analytics. Metrics are used internally to improve our content. Nothing is sold, shared, or transferred to third parties.

3. Data retention and deletion

Tokens remain stored while our publishing integration is active and are deleted when an integration is disconnected. To request deletion of any data related to our tools, email us; we respond within 30 days with confirmation.

4. Cookies and tracking

This site serves static informational pages and OAuth redirect endpoints only. It sets no cookies and runs no analytics or tracking.

5. Security

Credentials are stored encrypted (AES-256-GCM) on infrastructure with access limited to the operator. No plaintext secrets are stored in code repositories.

6. Contact

Data controller: Fortune & Ruin (channel operator).
Email: nexspireai@gmail.com

7. Changes

We may update this policy; the effective date above reflects the latest revision.