PRIVACY POLICY

Effective Date: March 21, 2026 | Forge Analytics & Systems Inc.

This Privacy Policy describes how Forge Analytics & Systems Inc. ("we", "us", or "our") collects, uses, and shares information when you use Hogmatix ("the Service"), available at hogmatix.com. By using the Service, you agree to the practices described in this policy.

1. Who We Are

Hogmatix is operated by Forge Analytics & Systems Inc., incorporated in Ontario, Canada. For privacy inquiries, contact us at payme@ishti.org.

2. Information We Collect

Account Information: When you sign up, we collect your email address and a hashed password to authenticate your account.

Connected Platform Accounts: When you connect a social media account (such as X/Twitter or TikTok), we receive and store OAuth access tokens that authorize Hogmatix to post on your behalf. We do not store your social media passwords.

TikTok Data: When you connect your TikTok account via the TikTok API, we collect and store:

Your TikTok Open ID (a platform-specific identifier)
Your TikTok display name and username
OAuth access tokens and refresh tokens required to publish content
Content you submit through Hogmatix for publishing to TikTok (text, images, videos)
Post status and publish results returned by the TikTok API

Content You Create: We store posts, schedules, and content you create within the Service, including drafts and published post history.

Usage Data: We collect standard server logs including IP addresses, browser type, pages visited, and timestamps for security and debugging purposes.

3. How We Use Your Information

To authenticate you and maintain your account session
To connect to social media platforms and publish content on your behalf
To schedule and automate posts according to your preferences
To detect and prevent duplicate content
To improve the reliability and performance of the Service
To respond to your support requests
To comply with legal obligations

4. TikTok API Data — Specific Disclosures

Hogmatix uses the TikTok API to publish content on your behalf. Our use of data obtained through the TikTok API is governed by TikTok's Platform Policy. We only request the minimum permissions necessary to provide the Service.

We do not sell TikTok user data to any third party.
We do not use TikTok data for advertising targeting on any platform.
TikTok data is used solely to provide posting and scheduling functionality within Hogmatix.
You may revoke Hogmatix's access to your TikTok account at any time through TikTok's app settings under Manage App Permissions.
Upon revoking access or deleting your account, we delete your TikTok tokens from our systems within 30 days.
We retain post history (titles, publish timestamps, content hashes) for duplicate detection purposes for up to 12 months after account deletion, after which it is permanently deleted.

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

Social media platforms: Content you schedule is transmitted to the respective platform APIs (X/Twitter, TikTok, etc.) to fulfil your posting requests.
Infrastructure providers: We use DigitalOcean for hosting. Your data is stored on servers located in Canada or the United States.
PocketBase: We use PocketBase as our database backend to store account and post data.
Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of our users.

6. Data Retention

Account data is retained for the duration of your account plus 30 days after deletion.
OAuth tokens for connected platforms are deleted immediately upon disconnecting an account or within 30 days of account deletion.
Post history and content logs are retained for up to 12 months after account deletion for deduplication purposes, then permanently deleted.
Server logs are retained for up to 90 days.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Withdraw consent for data processing
Lodge a complaint with a data protection authority

To exercise any of these rights, contact us at payme@ishti.org. We will respond within 30 days.

8. Cookies and Tracking

Hogmatix uses session cookies strictly necessary for authentication. We do not use third-party analytics cookies or advertising tracking cookies.

9. Security

We store OAuth tokens encrypted at rest. Access to production systems is restricted to authorized personnel only. We use HTTPS for all data in transit. Despite these measures, no system is completely secure — if you discover a security issue, please report it to payme@ishti.org.

10. Children's Privacy

Hogmatix is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

11. International Data Transfers

If you are accessing Hogmatix from outside Canada, your data may be transferred to and processed in Canada or the United States. By using the Service, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated effective date. Continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact

Forge Analytics & Systems Inc.
Ontario, Canada
Email: payme@ishti.org
Website: hogmatix.com