HeliomBuilt to hold as little as possible.
The safest data is the data we never keep. Here is how Heliom handles your accounts and your videos — the same facts as our Privacy Policy, in plain words.
Official sign-in only
Every account is connected through the platform’s own OAuth page. Heliom never sees or stores your passwords.
Authorizations stay in your browser
The access granted by each platform is kept in a cookie in your browser — signed (HMAC) so it cannot be altered, HTTP-only so page scripts cannot read it, and sent only over HTTPS.
Minimal account data
Your Heliom account holds only your email, a one-way fingerprint of your password and your plan. Platform authorizations are never copied to our servers.
Videos are never stored
Your video goes to the platforms you choose. No video file is written to Heliom’s servers or to any storage service.
Least access
Heliom asks only for what it needs to show which account is connected and to publish. It does not read your messages, watch history, comments or analytics.
Encrypted in transit
The website and the app are served only over HTTPS, and Heliom talks to each platform through its official API over HTTPS.
Stay in control
You can end Heliom’s access at any time, without contacting us:
- TikTok: Settings and privacy, in the section that lists the apps with access to your account
- YouTube / Google: your Google Account › Security › third-party apps and services
- Facebook / Instagram: Facebook Settings › Business integrations
- Any platform: clear the cookies of app.helliomlabs.com in your browser
Report a security issue
If you believe you have found a vulnerability in Heliom, write to admin@helliomlabs.com with the details. Please do not access other people’s data, and give us reasonable time to fix the issue before disclosing it. Our contact is also published at /.well-known/security.txt.
Full details
Read the Privacy Policy, which lists every cookie, its content and its lifetime.