Legal
Privacy Policy
Last updated: 17 September 2026
This policy explains how Nepali Ho handles information on NepaliHo.com and, where available, in Nepali Ho Studio.
Information we use
When you visit the public website, technical request information may be processed by the website, hosting, and proxy infrastructure to deliver and protect the service. The public website is designed not to set Studio login or session cookies and does not include advertising or analytics scripts.
If you use Nepali Ho Studio, we may process the account, authentication, session, project, and media information needed to provide the Studio workflow. That can include content you upload or create for a project, such as audio, lyrics, artwork, video, metadata, and reviewed distribution materials.
Authentication and browser data
Studio uses authenticated sessions and CSRF protections for signed-in actions. It may also use browser-local storage for limited workspace state, such as recoverable timing work. The public website does not use Studio authentication or read Studio session data.
Connected provider accounts
If you choose to connect a provider account, Studio processes the account information and permissions returned by that provider that are needed to identify the connected account and operate the authorized workflow. Provider connection credentials are kept in Studio's server-side credential store and are not exposed through the browser or public music website.
TikTok
When the TikTok connection is enabled and you choose to use it, Studio uses TikTok OAuth and asks for the permissions shown by TikTok. The intended draft-transfer workflow requests user.info.basic and video.upload; it does not request video.publish.
For an explicitly approved draft transfer, Studio sends the selected reviewed video to TikTok so it can appear in the connected creator's TikTok inbox. The creator reviews, edits, and completes any publication in TikTok. Studio does not automatically publish the video to TikTok. You can disconnect a TikTok connection in Studio; Studio disables the local connection and handles any provider-side revocation through its connection-maintenance process.
Why we process information
We use information to provide and secure the website and Studio, keep project and review records, render or prepare the media you explicitly request, maintain authorized provider connections, respond to support requests, and investigate misuse or service problems.
When information is shared
External providers receive information only when you choose an action that uses them or follow a link to them. For example, TikTok receives the authorization and selected video needed for an approved creator-inbox draft transfer. YouTube, Instagram, streaming services, and social networks process activity under their own policies when you use their services.
Retention and security
Studio keeps information for as long as reasonably needed to operate, secure, maintain, and document the service and its project workflows. The service uses access controls, hashed authentication material, and encrypted server-side provider credentials as safeguards, but no internet service can promise absolute security. Retention can vary with the project, service, security, and legal context; contact us with questions about retention or deletion.
Your choices and questions
You may choose not to connect a provider account, disconnect an existing connection, and contact us with questions or requests concerning information associated with your use of the service. We will consider requests in light of applicable law, security, and the records needed to operate the service.
For privacy questions, use the public contact page.
Children and updates
Do not use Studio to provide a child’s account or provider-connection information without the authority required by applicable law. If you believe information about a child was provided in error, contact us. We may update this policy when the service or its legal requirements change; the updated date above identifies the current version.