# TikHub Privacy Policy # TikHub Privacy Policy **Effective Date:** March 17, 2026 **Last Updated:** March 17, 2026 --- ## 1. Introduction TikHub, LLC ("TikHub," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you access or use TikHub's website, APIs, tools, documentation, and all related products and services (collectively, the "Services"). This Privacy Policy is incorporated into and forms part of our Terms of Use. By accessing or using the Services, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree, please do not use the Services. **Data Controller:** TikHub, LLC, a California limited liability company. **For all privacy inquiries, contact:** team@tikhub.io --- ## 2. Information We Collect ### 2.1 Information You Provide to Us - **Account Registration Data:** Email address, username, company name (if applicable), and password when you create an account - **Payment Information:** Billing address and payment method details. Payment card information is processed by our third-party payment processors (e.g., Stripe) and is not stored on TikHub's servers - **Communications:** Information you provide when you contact support, submit feedback, or communicate with us via email - **OAuth Data:** When you authenticate through our OAuth platform, we securely store basic profile information and session tokens necessary to maintain your authenticated session ### 2.2 Information We Collect Automatically - **Usage Data:** API request logs, endpoints accessed, request timestamps, response codes, and usage volume - **Device and Technical Data:** IP address, browser type and version, operating system, device identifiers, and referring URLs - **Cookies and Similar Technologies:** Session cookies, authentication tokens, and analytics identifiers (see Section 7 for details) ### 2.3 Publicly Available Data Accessed Through the API When you make requests through TikHub's API, TikHub may cache and store the publicly available data returned by those requests ("Cached Platform Data"). This Cached Platform Data may include public posts, public profile information, public engagement metrics, and other publicly available content from Supported Platforms. TikHub stores this data for the following purposes: - To improve API performance, reduce latency, and optimize service delivery - To generate aggregated and de-identified Raw Platform Data for third-party licensing and sale, as described in Section 4.2 - To monitor and enforce compliance with our Terms of Use and Acceptable Use Policy - To comply with legal obligations **Important clarifications:** - TikHub does not associate Cached Platform Data with your specific account or API requests when sharing it with third parties. All customer-identifying metadata (request IDs, API keys, timestamps, IP addresses) is stripped before any data is shared externally - Cached Platform Data consists solely of content that was publicly available on the originating Supported Platform at the time of the API request - You acknowledge that by using the API, the data returned through your requests may be cached by TikHub and used as described in this Section and in our Terms of Use (Section 8.5) ### 2.4 Information We Do NOT Collect - We do not collect biometric data, government-issued identification numbers, or financial account numbers (other than payment processing) - We do not knowingly collect information from individuals under the age of 18 (see Section 11) - We do not access or store private, restricted, or password-protected content from any Supported Platform --- ## 3. How We Use Your Information | Purpose | Legal Basis (GDPR Art. 6) | |---|---| | Provide, operate, and maintain the Services | Performance of contract | | Process payments and manage subscriptions | Performance of contract | | Authenticate your identity and secure your account | Performance of contract / Legitimate interest | | Respond to your support requests and communications | Performance of contract | | Monitor and enforce compliance with our Terms of Use and Acceptable Use Policy | Legitimate interest | | Detect, prevent, and address fraud, abuse, and security incidents | Legitimate interest | | Generate aggregated, de-identified analytics to improve the Services | Legitimate interest | | Comply with legal obligations and respond to lawful requests | Legal obligation | | Send service-related notifications (e.g., maintenance, policy changes) | Performance of contract | We will not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects on you. --- ## 4. How We Share Your Information ### 4.1 Information We Never Share TikHub will never sell, rent, or disclose your personal account information to third parties, including: - Your email address, password, or authentication credentials - Your API keys, access tokens, or session data - Your payment information or billing details - Your API query history, search parameters, or specific data requests ### 4.2 Information We May Share **Aggregated and De-Identified Data (Raw Platform Data):** TikHub may sell, license, or make available to third parties aggregated and de-identified data derived from publicly available content accessed through our API ("Raw Platform Data"). This data: - Contains only publicly available social media content (e.g., public posts, public engagement metrics, public profile information) - Has all customer-identifying information stripped and excluded before sharing - Does not include your API query history, request metadata, IP address, or any information that could identify you as the requesting customer - Is shared only with third parties contractually prohibited from attempting to re-identify TikHub customers **Service Providers:** We share information with third-party service providers who perform services on our behalf, including: - Payment processors (e.g., Stripe) for transaction processing - Cloud infrastructure providers for hosting and data storage - Analytics providers for aggregated usage analysis - Email service providers for transactional communications These providers are contractually bound to use your information only for the purposes of providing services to TikHub and are subject to confidentiality obligations. **Legal and Compliance:** We may disclose your information if required by law, regulation, legal process, or governmental request, including: - In response to a valid subpoena, court order, or search warrant - To comply with applicable law or regulatory requirements - To protect the rights, property, or safety of TikHub, our users, or the public - In connection with an investigation of suspected fraud, abuse, or illegal activity **Business Transfers:** In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of the transaction. We will notify you of any such change in ownership or control of your personal information. ### 4.3 Your Right to Opt Out of Data Sharing You may opt out of having Raw Platform Data generated through your API requests included in third-party data sales by contacting team@tikhub.io with the subject line "Data Sharing Opt-Out." Opting out does not affect data already shared prior to your request. --- ## 5. International Data Transfers ### 5.1 Where We Process Data TikHub is based in the United States. Your information may be transferred to, stored, and processed in the United States or other jurisdictions where our service providers operate. These jurisdictions may have data protection laws that differ from those in your country of residence. ### 5.2 Transfer Safeguards **For EU/EEA/UK Data Subjects:** Where we transfer personal data outside the EU/EEA/UK, we rely on appropriate legal mechanisms including: - Standard Contractual Clauses (SCCs) approved by the European Commission - Other legally recognized transfer mechanisms under applicable law We acknowledge that as a US-based company, US law enforcement may seek access to data under applicable US law (including FISA Section 702 and Executive Order 12333). TikHub will comply with valid legal process while providing transparency to the extent permitted by law. ### 5.3 Chinese Platform Data TikHub accesses publicly available data from Chinese Supported Platforms (Douyin, Xiaohongshu, Bilibili, Weibo, WeChat, Kuaishou, Pipixia, Zhihu). We acknowledge that China's Personal Information Protection Law (PIPL), Cybersecurity Law, and Data Security Law impose restrictions on the processing and cross-border transfer of personal information. TikHub accesses only publicly available data from these platforms and does not engage in systematic collection of personal information requiring government security assessments under PIPL Articles 38-40. Customers are solely responsible for ensuring their downstream use of data originating from Chinese platforms complies with applicable Chinese data protection laws. --- ## 6. Data Retention | Data Category | Retention Period | |---|---| | Account registration data | Duration of account + 90 days after termination | | Payment records | 7 years (as required by tax and accounting laws) | | API usage logs | 12 months from date of generation | | Support communications | 3 years from date of last interaction | | OAuth session data | Duration of active session; deleted upon logout or token expiration | | Aggregated analytics | Indefinitely (fully de-identified) | Upon account termination, TikHub will delete or anonymize your account data within ninety (90) days, except where retention is required by applicable law. You may request earlier deletion by contacting team@tikhub.io. --- ## 7. Cookies and Tracking Technologies ### 7.1 Types of Cookies We Use | Cookie Type | Purpose | Duration | |---|---|---| | Essential / Authentication | Session management, login authentication, CSRF protection | Session / up to 30 days | | Analytics | Aggregated usage patterns, service improvement | Up to 12 months | ### 7.2 Your Cookie Choices We do not use third-party advertising or marketing cookies. You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Services. --- ## 8. Your Privacy Rights ### 8.1 Rights for All Users - **Access:** Request a copy of the personal information we hold about you - **Correction:** Request correction of inaccurate or incomplete personal information - **Deletion:** Request deletion of your personal information, subject to legal retention requirements - **Data Portability:** Request your data in a structured, commonly used, machine-readable format - **Withdraw Consent:** Withdraw consent for processing based on consent at any time ### 8.2 Additional Rights for EU/EEA/UK Residents (GDPR) Restriction of Processing, Object to Processing, Automated Decision-Making rights, and right to Lodge a Complaint with your local supervisory authority. ### 8.3 Additional Rights for California Residents (CCPA/CPRA) Right to Know, Right to Delete, Right to Correct, Right to Opt-Out of Sale/Sharing (email team@tikhub.io with subject "Do Not Sell or Share My Personal Information"), Right to Non-Discrimination. **CCPA Disclosure:** In the preceding 12 months, TikHub may have "sold" (as broadly defined by the CCPA) aggregated and de-identified Raw Platform Data to third-party data analytics companies. This data does not contain your personal account information. See Section 4.2 for details. ### 8.4 Additional Rights for Brazilian Residents (LGPD) Rights of access, correction, anonymization, portability, deletion, and information about third-party sharing, as provided under Brazil's *Lei Geral de Proteção de Dados*. ### 8.5 How to Exercise Your Rights Contact team@tikhub.io with subject "Privacy Rights Request." Include your full name, email, specific rights, and details. We verify identity and respond within applicable timeframes (30 days GDPR, 45 days CCPA). --- ## 9. Data Security TikHub implements commercially reasonable security measures including encryption in transit (TLS 1.2+) and at rest, access controls, regular security assessments, and secure API key management. No security measure is perfect. ### 9.1 Data Breach Notification In the event of a confirmed data breach, TikHub will: - Notify affected users without undue delay (within 72 hours for GDPR) - Notify relevant supervisory authorities - Take steps to contain and remediate - Provide information about the breach --- ## 10. Third-Party Services The Services may contain links to third-party services. This Privacy Policy does not apply to them. Our use of third-party providers is limited to those necessary for operation. --- ## 11. Children's Privacy Services are not directed to individuals under 18. We do not knowingly collect information from children. Contact team@tikhub.io if you believe a child provided information. --- ## 12. Changes to This Privacy Policy TikHub may update this policy at any time. Material changes will be notified by email or website notice. Continued use of the Services constitutes acceptance. --- ## 13. Data Protection Contact **Email:** team@tikhub.io (include "Privacy" in subject line). EU/EEA residents may lodge complaints with their local Data Protection Authority (DPA). --- ## 14. Jurisdiction-Specific Disclosures ### 14.1 California (CCPA/CPRA) | Category | Examples | Collected? | |---|---|---| | Identifiers | Email, username, IP address | Yes | | Commercial Information | Subscription plan, payment history | Yes | | Internet Activity | API usage logs, browsing history on our site | Yes | | Geolocation | Approximate location from IP address | Yes | | Professional Information | Company name (if provided) | Yes | **Sources:** Directly from you; automatically through your use of the Services. **Business Purpose:** To provide, maintain, and improve the Services; to process payments; to ensure security and prevent fraud. **Categories of Third Parties:** Payment processors, cloud infrastructure providers, analytics providers. ### 14.2 EU/EEA/UK (GDPR) **Data Controller:** TikHub, LLC. **Lawful Bases:** Section 3. **International Transfers:** Section 5. TikHub is appointing an EU representative under GDPR Article 27. ### 14.3 People's Republic of China (PIPL) As described in Section 5.3. TikHub does not directly provide services within the PRC. Customers are responsible for their own PIPL compliance. ### 14.4 Brazil (LGPD) Rights as described in Section 8.4. Contact team@tikhub.io.