Bold Evolution Agency provides software and tools for live streaming, content creation, AI video generation, and creator management on platforms like TikTok. This privacy policy applies to all of our products and explains what information we collect, how it is used, with whom it is shared, and the security measures we implement to protect your data.
This policy covers the following products:
•Toklytics-LiveIQ– Live streaming analytics and AI coaching platform
This Privacy Policy describes how Bold Evolution Agency ("we", "us", "our") collects, uses, discloses, and protects your personal information when you use our software products and services designed to support live streaming, content creation, and creator management. This policy applies to all Bold Evolution Agency products, including Toklytics-LiveIQ, Kling-Director, Tik-Tok Verify, and TikTok-Live-Event-Graphic-Engine (collectively, the "Services"). By using any of our services, you consent to the practices described in this policy.
2. Information We Collect
We collect information to provide and improve our services. The types of information we collect include:
Account Information: When you create an account or authenticate via TikTok Login Kit, we collect your display name, username/handle, avatar URL, open_id, and union_id.
Authentication Data: OAuth access tokens, refresh tokens, expiration timestamps, and session identifiers necessary for secure access.
Payment Information: If you make purchases or subscribe to paid services, our payment processor (Stripe) collects payment card details, billing address, and transaction history. We do not store full credit card numbers on our servers.
Usage Data: Information about how you use our platform including features accessed, actions taken, time spent, and interaction patterns.
Live Streaming Analytics: Performance metrics, viewer counts, engagement data, gift/revenue information, and session recordings when using our live streaming tools.
Device & Technical Information: IP address, browser type, operating system, device identifiers, and referral URLs.
Communications: When you contact support or provide feedback, we collect the content of your messages and contact information.
Application Telemetry: Anonymized product usage, error logs, and feature events captured to maintain service reliability.
3. How We Use Your Information
We use the information we collect for the following purposes:
Service Delivery: To authenticate users, display personalized dashboards, and provide analytics and insights for live streaming performance.
Account Management: To create and manage your account, maintain secure sessions, refresh expiring tokens, and prevent unauthorized access.
Payment Processing: To process transactions, manage subscriptions, send invoices, and handle refunds through our payment processor.
Product Improvement: To analyze usage patterns, develop new features, and improve user experience.
Communication: To send service updates, security alerts, support responses, and (with consent) promotional materials.
Safety & Security: To detect, prevent, and address fraud, abuse, security incidents, and technical issues.
Legal Compliance: To comply with applicable laws, regulations, and legal processes.
Aggregated Insights: To produce aggregated analytics that do not expose individual creator credentials or personal data.
4. How We Share Your Information
We do not sell or rent your personal information. We may share your information in the following circumstances:
Service Providers: We share data with third-party vendors who perform services on our behalf, including:
• Supabase (database, authentication, and storage services)
• Vercel (application hosting and edge delivery)
• Stripe (payment processing)
• Slack/email providers (optional alerts configured by administrators)
Agency Partners: If you are a creator rostered with Bold Evolution Agency, limited performance data may be shared with designated agency staff for monitoring and advisory purposes.
Legal Requirements: We may disclose information when required by law, subpoena, court order, or government request.
Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
With Your Consent: We may share information with other parties when you give us explicit consent.
All service providers operate under data processing agreements and are prohibited from using your information for their own purposes.
5. Data Retention
We retain your information only as long as necessary to fulfill the purposes described in this policy:
Account data is retained while you remain an authorized user and for up to 90 days after access is revoked, unless earlier removal is requested.
Payment records are retained as required by tax and accounting laws (typically 7 years).
System logs containing pseudonymous identifiers are retained for up to 30 days for security investigations.
Analytics data may be retained in aggregated, anonymized form indefinitely.
We delete or anonymize personal data when it is no longer necessary for the purposes described in this policy.
6. Data Security
We implement industry-standard security measures to protect your information:
Encryption in Transit: All data transmitted between your device and our servers is encrypted using HTTPS/TLS 1.2 or higher.
Encryption at Rest: Sensitive data including credentials and tokens are stored using provider-managed encryption.
Access Controls: Production infrastructure access is restricted to vetted engineering staff with least-privilege permissions.
Authentication Security: We use secure OAuth 2.0 flows and do not store plaintext passwords.
Payment Security: Payment processing is handled by Stripe, a PCI-DSS Level 1 certified processor. We never store full credit card numbers.
Monitoring: We conduct regular access reviews, rotate cryptographic keys, and monitor for suspicious activity.
Incident Response: We maintain procedures to detect, respond to, and report data breaches in compliance with applicable laws.
While we strive to protect your information, no method of transmission or storage is 100% secure. You are responsible for maintaining the security of your account credentials.
7. Your Rights & Choices
Depending on your location, you may have the following rights regarding your personal information:
Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete information.
Deletion: Request deletion of your personal data, subject to legal retention requirements.
Data Portability: Request a machine-readable copy of your data.
Opt-Out: Unsubscribe from marketing communications or opt out of certain data processing.
Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
To exercise these rights, contact us at support@boldevolution.net. We will respond within 30 days.
You may also disable local storage sessions at any time by logging out of the dashboard.
8. Cookies & Tracking Technologies
We use cookies and similar technologies to:
Maintain your authenticated session and preferences.
Analyze usage patterns and improve our services.
Detect and prevent security threats.
You can control cookies through your browser settings. Note that disabling cookies may limit functionality.
9. Third-Party Links & Services
Our services may contain links to third-party websites or integrate with third-party platforms (such as TikTok). We are not responsible for the privacy practices of these external services. We encourage you to review their privacy policies.
10. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly.
11. International Data Transfers
Bold Evolution Agency Services is operated from the United States. By using our services, you consent to the transfer, processing, and storage of your information in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers.
12. California Privacy Rights
California residents have additional rights under the California Consumer Privacy Act (CCPA):
Right to know what personal information is collected, used, and disclosed.
Right to delete personal information held by us.
Right to opt-out of the sale of personal information (we do not sell personal information).
Right to non-discrimination for exercising privacy rights.
To exercise these rights, contact support@boldevolution.net.
13. Updates to This Policy
We may update this privacy policy to reflect changes in our practices or legal requirements. When updates are material, we will notify users via email or prominent notice on our website and update the "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: support@boldevolution.net
Company: Bold Evolution Agency
For data protection inquiries, please allow up to 30 days for a response.