Privacy Policy
Effective October 9, 2026
This policy explains what information ScrubNerdHQ collects, how we use it, and the choices you have. ScrubNerdHQ is operated by Santos & Rosa, LLC, a North Carolina limited liability company ("we," "us").
Information you give us
If you join our email list, contact us, or buy something from us, we collect the details you provide, such as your name and email address. Payments are handled by third-party payment processors. We never see or store your full card number.
Information collected automatically
Like most websites, our server records basic technical data when you visit, such as your IP address, browser type, and pages viewed. We may use cookies or similar tools for site analytics and, where shown, advertising. You can block or delete cookies in your browser settings.
Our social media publishing tool
We use an internal tool to create nursing education content and send it to ScrubNerdHQ's own TikTok and Instagram accounts. The tool connects only to accounts we own and manage, and it uses only the official APIs provided by TikTok and Meta. It is not offered to the public, and it does not access anyone else's account.
TikTok data we access. When we connect our own TikTok account through TikTok Login Kit, we ask TikTok for two permissions:
- Basic profile (user.info.basic): the account's TikTok ID and display name. We use them only to show, inside our tool, which TikTok account is connected.
- Upload to inbox (video.upload): lets the tool send photo carousels to our own account's TikTok inbox as drafts. The tool never publishes on TikTok by itself: a member of our team opens each draft in the TikTok app, reviews it, chooses who can see it and posts it.
Along with these permissions, TikTok gives the tool an access token and a refresh token. For each draft we keep the upload ID and status returned by TikTok (for example, "in inbox" or "posted"). We do not collect information about other TikTok users, including people who view, like, comment on or share our posts.
How tokens are protected. TikTok tokens are stored only on our web server, outside the public website, encrypted with AES-256. They are never shown on screen, written to logs, sent by email or included in our database backups, and only our tool uses them, to talk to TikTok's API. Access tokens expire after 24 hours and are renewed automatically while the account stays connected; the refresh token expires after one year.
How long we keep it. Tokens and the display name are kept only while our TikTok account is connected and are deleted when we disconnect it. Upload IDs and statuses are kept with our own content records for as long as we keep those records, including in our database backups.
Disconnecting. We can disconnect TikTok at any time from our tool. This revokes the tool's access with TikTok and deletes the stored tokens and display name. Access can also be removed in the TikTok app, under Settings and privacy, in the security and permissions settings for authorized apps and services.
Instagram. For Instagram, the tool uses Meta's official Instagram Graph API to publish carousels to our own Instagram business account. Its access token is stored only on our server, outside the public website, and is never shown, logged or emailed.
We do not sell, rent or share data received from TikTok or Meta, and we do not use it for advertising or to train artificial intelligence models.
How we use information
- To send emails you signed up for and respond to your messages.
- To process orders and provide products you purchase.
- To publish and measure our own educational content.
- To keep the site secure and understand how it is used.
How we share information
We do not sell your personal information. We share it only with service providers that help us run ScrubNerdHQ, such as email, hosting, and payment providers, and only as needed for them to do that work. We may also disclose information if required by law.
How long we keep it
We keep personal information only as long as needed for the purposes above or as required by law. You can unsubscribe from emails at any time using the link in any message. TikTok tokens and account details are kept only while our TikTok account is connected to our publishing tool, as described above.
Your choices
You can ask us to access, correct, or delete the personal information we hold about you by emailing us at the address below. We will respond within a reasonable time.
Children
ScrubNerdHQ is intended for nursing students and professionals. It is not directed to children under 13, and we do not knowingly collect information from them.
Changes to this policy
We may update this policy from time to time. The effective date at the top shows when it was last changed.
Contact
Santos & Rosa, LLC (ScrubNerdHQ)
Winterville, North Carolina, USA
Email: scrubnerdhq@gmail.com