Three separate service boundaries
This public information site explains the product and its policies. The Studio application holds authorised workspace information. Social platforms hold their own accounts and public content. Visiting this information site does not grant access to the application or an account.
How access works
- DigiCyfr staff use named authenticated application accounts and workspace permissions.
- Client social accounts remain client-owned. Platform authorisation grants the requested API capabilities.
- OAuth credentials are encrypted by the application and kept out of the source repository and this website.
- Server application secrets are held in a protected credential store. Human passwords and recovery codes are not collected through this site.
- Access is ended through workspace offboarding and platform disconnection/revocation.
Current application controls
The private deployment uses HTTPS for its configured browser/API connection, authenticated application access, separate workspaces and a separate application database. Recovery snapshots are restricted and retained on a rolling basis.
These controls are not a certification or an assurance that all data is encrypted at rest. Backups do not replace a contractual retention plan or an off-server disaster-recovery arrangement. Client-specific hosting and processing terms must be confirmed before onboarding.
Providers and data flows
| Boundary | Information | Role |
|---|---|---|
| Studio application | Workspaces, authorised account records, encrypted tokens, media, drafts and operational status | CYFR-operated application environment |
| TikTok / Meta / enabled platforms | Authorisation, instructed content operations and permitted platform data | Independent platform services |
| Zoho Mail | Support, business and privacy correspondence | Business communications provider |
| OpenAI Sites infrastructure | This informational website and technical requests | Website hosting; no Studio data/API connection |
Platform permissions are not blanket consent
We request and use permissions for the agreed service. Account connection is not permission to publish arbitrary content, an assurance of public-posting approval or permission to bypass a platform’s restrictions.
Client approval requirements and each platform’s live privacy/interaction settings must be respected. Supported features are described on the platform page.
Report a concern
Email info@digicyfr.com with a description and a safe way to contact you. Do not email passwords, tokens or exploit material containing another client’s data. We will coordinate a proportionate way to investigate.