Bestari Publikasi Konten · Bestari Literasi Indonesia
Last updated / Terakhir diperbarui: 8 October 2026
Terms of Service / Syarat Penggunaan
Scope and current integration status
This policy explains how Bestari Literasi Indonesia handles data in Bestari Publikasi Konten at ruangbestari.com. The dashboard currently serves authorized website administrators. Facebook, Instagram, Threads, and YouTube integrations are deployed; their live publishing results depend on testing and platform availability. TikTok is being prepared and is not yet connected. No TikTok account data is currently collected by this integration.
Data processed by the tool
- Website administrator identity and session information used to control access and validate requests.
- Connected platform account, Page, profile, or channel identifiers and available display names; authorized permission scopes; token expiry and connection-check information.
- Authorization tokens and, where provided, refresh tokens; application credentials configured by the administrator.
- Draft titles, captions, hashtags, media files, selected accounts, privacy and disclosure choices, and publication schedules.
- Publication identifiers, destination links, timestamps, processing states, results, and limited diagnostic information.
When TikTok is enabled, the applicable connection will process its authorized account identifier, available display information, permissions, tokens and expiry information, and publishing settings or status needed for the approved feature. This policy will be reviewed against the actual implementation before that feature is enabled.
Purpose and authorization
We use this information to connect and identify destination accounts, store drafts, execute approved uploads or schedules, refresh permitted access, display results, prevent duplicate submissions, and diagnose failures. Social-platform passwords are entered on the provider’s authorization page and are not requested by this tool. You may decline platform permissions, but the corresponding feature may be unavailable.
Sharing and media visibility
Approved content and the necessary request metadata are transmitted to the selected platform, such as Meta, Google/YouTube, or TikTok once its integration is enabled. Tokens are sent to the relevant provider to perform authorized API requests. Website hosting, storage, and backup services also process data to operate the website.
Draft screens require administrator access, but uploaded media and generated image assets can have publicly accessible website URLs. Do not upload confidential media merely because a draft has not been published. Visibility on a destination platform follows its actual privacy settings and processing decisions.
The tool does not include a feature to sell platform data or send it to advertising services or AI model training systems. This statement is limited to this publishing tool, not to unrelated website components.
Google/YouTube data
The YouTube connection uses authorized access to identify the connected channel and upload videos. Bestari’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. You can revoke access through Google account connections or the available revoke control in the dashboard.
Storage and safeguards
Connection credentials and tokens stored by the deployed integrations are encrypted in the WordPress database using keys derived from the website’s security salts. Access to the dashboard is restricted to administrators, and requests use session, nonce, and authorization-state checks. Diagnostic views do not intentionally display full tokens or client secrets.
These safeguards do not eliminate all risks. Hosting administrators, server compromise, improperly shared backups, or accessible media URLs may expose data. Keep administrator accounts and hosting access secure.
Retention
Connection data is retained while configured until it is removed or replaced. Disconnecting a connection does not automatically erase its separate application settings, all diagnostics, or historical content. Drafts, uploaded media, schedules, and publication history have no automatic retention deadline in the current publishing module; they remain until removed by an administrator or in response to a deletion request.
Connection diagnostics shown in the dashboard are configured to expire after 30 minutes. Expired transient records or backups may remain in storage until database cleanup or backup rotation. Provider tokens expire or are revoked according to provider rules. Backup copies may retain prior data until the hosting backup lifecycle removes them.
Disconnecting and requesting deletion
Use the available disconnect button to remove the local connection. Revoke provider access in the platform’s app-permission settings, or use the dashboard’s provider-revoke control where available. Neither action automatically deletes posts already delivered to a platform.
For access, correction, or deletion requests, contact the operator below and identify the relevant website account, destination account, or content. Do not send passwords, tokens, or client secrets. We may verify that you are authorized to make the request. The publishing module currently has no separate self-service endpoint for deleting all platform-related records. Administrators handle requests and explain any remaining backup copies or records that must be retained.
Website sessions and other policies
WordPress login cookies and administrator session information support authentication and request validation. Hosting infrastructure may maintain standard security and access logs. Each destination platform processes received information under its own policies: TikTok, Meta, and Google.
Updates
The update date is displayed above. We will update this policy to reflect material changes to the publishing tool, including the actual TikTok data flow before it is enabled.
Ringkasan bahasa Indonesia
Kami memakai identitas admin, data akun terhubung, token, draft/media, jadwal, serta hasil pengiriman untuk menjalankan Publikasi Konten. Token koneksi disimpan terenkripsi; kata sandi media sosial tidak diminta oleh fitur ini. Media yang diunggah bisa memiliki URL publik. Draft dan riwayat belum memiliki penghapusan otomatis; diagnostik ditampilkan selama 30 menit, sementara salinan cadangan dapat bertahan sampai rotasi. TikTok belum aktif dan belum mengumpulkan data melalui integrasi ini. Hubungi pengelola untuk akses, koreksi, atau penghapusan data; jangan kirim token atau kata sandi.
Contact / Kontak
Operator: Bestari Literasi Indonesia
Website: ruangbestari.com
Support and privacy requests: bestariliterasicjr@gmail.com