DIGIZADI is a social media management service operated by Alicia Kirungi, based in Kampala, Uganda. This policy explains what information we hold, why we hold it, and what you can do about it.

It applies to business owners who hire us to manage their social media accounts, and to anyone who contacts us.

Who we are

DIGIZADI is a trading name of Alicia Kirungi, a sole proprietor operating from Kampala, Uganda. For anything in this policy, write to amnuwagaba@gmail.com.

What we collect

We collect only what we need to publish content on your behalf.

• Contact details. Your name, business name, email address and phone number, so we can reach you about your account.
• Social media access. When you connect a TikTok or Instagram account, the platform gives us an access token. We store that token. We never see, ask for, or store your platform password.
• Account information from the platform. Your username, display name, profile picture and the posting permissions your account allows. TikTok and Instagram supply this when you authorise us.
• Content. The images, videos and captions you send us, or that we produce for you, together with the schedule they are published on.
• Publishing records. Which post went out, to which account, and at what time, so we can show you what was published and fix problems.

We do not collect information about your customers or followers. We do not read your direct messages. We do not browse or collect other people's content on TikTok or Instagram.

Why we hold it

Everything above exists for one purpose: publishing the content you have approved to the accounts you have authorised, on the schedule you agreed to.

We do not sell your information. We do not share it with advertisers, data brokers, or anyone building marketing lists. We do not use your content to train machine learning models.

Access tokens

When you authorise DIGIZADI through TikTok or Instagram, you are granting a specific, limited permission — in our case, permission to publish content to your account. That permission is recorded as an access token, which is stored in encrypted form in our workflow system.

A token is not a password. It cannot be used to log into your account, change your settings, read your messages, or see your private information. It does one thing: publish the content you approved.

You can revoke it at any time from inside the TikTok or Instagram app, under the settings section that lists connected apps. Revoking takes effect immediately and does not require our involvement.

Where content is stored

Images and videos awaiting publication are stored on Cloudflare R2 at media.digizadi.online. TikTok and Instagram download files directly from that address when a post goes live — this is how both platforms are designed to receive media.

Files stay there for as long as we manage your account, so that posts can be reviewed, reused or re-published. Tell us to delete them and we will.

Who else can see it

Three categories of third party are involved, and no others:

• TikTok and Meta (Instagram). They receive your content because they are publishing it. Their own privacy policies govern what happens after that.
• Our infrastructure providers. Cloudflare stores media files. PikaPods hosts the automation system that schedules and sends posts. Both hold data on our behalf and neither uses it for their own purposes.
• Anyone we are legally required to give it to. If a Ugandan court or regulator lawfully compels disclosure, we comply. We will tell you unless we are prohibited from doing so.

No one else. We have no advertising partners and no analytics arrangements involving your data.

How long we keep it

• Access tokens are deleted when you stop working with us, or immediately on request.
• Media files are deleted when you ask, or within 90 days of the end of our work together.
• Publishing records are kept for 12 months so we can answer questions about what was posted, then deleted.
• Invoices and correspondence are kept as long as Ugandan tax law requires.

Security

Access tokens are held encrypted. Our systems are protected by individual accounts with strong passwords, and only Alicia Kirungi has administrative access. Media is served over HTTPS.

We will not pretend this is impregnable. No system is. If something happens that puts your information at risk, we will tell you directly and promptly rather than quietly.

What you can ask for

At any time, and without giving a reason, you can ask us to:

• tell you what we hold about you
• send you a copy of it
• correct anything that is wrong
• delete your content, your tokens, or everything
• stop publishing on your behalf

Email amnuwagaba@gmail.com. We answer within seven days.

Children

DIGIZADI provides services to businesses. We do not knowingly hold information about anyone under 18. If we discover that we have, we delete it.

Changes to this policy

If this policy changes, the date at the top changes with it. If a change materially affects how we handle your information, we will email you about it rather than relying on you to notice.

Contact

Alicia Kirungi, trading as DIGIZADI
Kampala, Uganda
amnuwagaba@gmail.com