Security
RakuSocia takes the following measures to protect customer data and linked social accounts.
Protecting traffic and data
- All traffic is encrypted with TLS
- Passwords are stored hashed and never kept in plain text
- TikTok access and refresh tokens are encrypted at rest with AES-256-GCM
- Database access is restricted by origin and by privilege
Linking social accounts
- TikTok is linked through the official API using OAuth; we never hold the password
- LINE Official Accounts are connected with a channel access token the customer issues; the token is stored encrypted
- Publishing to Instagram, Facebook and X is coming soon
- RED provides no public API, so the browser session the customer authenticates by QR code is held on a Company-managed server in Japan. We never hold the password
- Connection data is not used for anything other than publishing and analytics
Operational controls
- Access rights are limited to what each role needs (principle of least privilege)
- Public APIs carry rate limiting and other anti-abuse measures
- Changing or resetting the password invalidates every session already issued; signing out ends the session only on the device you are using
- Please report vulnerabilities to support@rakusocia.jp; we respond promptly
As of 14 September 2026