Last updated: October 7, 2024

Toklytics-LiveIQ Privacy Policy

Toklytics-LiveIQ uses TikTok's Login Kit to authenticate creators and provide secure access to personal performance analytics. This privacy policy explains what information we collect, how it is used, and the steps we take to protect your data.

1. Information We Collect

Toklytics-LiveIQ authenticates creators with TikTok Login Kit and stores only the data required to recognize roster members and provide analytics access.

  • Identifiers provided by TikTok: display name, handle, avatar URL, open_id, and union_id.
  • Authentication artifacts: OAuth access tokens, refresh tokens, expiration timestamps, and session identifiers.
  • Application telemetry: anonymized product usage, error logs, and feature events captured to maintain service reliability.

2. How We Use Collected Information

  • Authenticate rostered creators and display personalized dashboards.
  • Maintain secure sessions, refresh expiring tokens, and prevent unauthorized reuse.
  • Notify agency staff about platform health, suspected abuse, or required compliance actions.
  • Produce aggregated insights that never expose individual creator credentials or personal data.

3. Data Sharing & Processors

We do not sell or rent user data. Limited third parties process data strictly on our behalf to support the service.

  • Supabase (database, authentication, and storage services).
  • Vercel (application hosting and edge delivery).
  • Slack or email providers (optional alerts configured by agency administrators).
  • These partners operate under data processing agreements and cannot use your information for their own purposes.

4. Data Retention

  • Account metadata persists while you remain an authorized creator and for up to 90 days after access is revoked, unless removal is requested sooner.
  • System logs that may contain pseudonymous identifiers are retained for up to 30 days for security investigations.
  • We delete or anonymize data when it is no longer necessary for the purposes described in this policy.

5. Security Practices

  • All traffic is encrypted in transit (HTTPS/TLS 1.2+).
  • Service-role credentials and tokens are stored using provider-managed encryption at rest.
  • Access to production infrastructure is restricted to vetted engineering staff with least-privilege controls.
  • We conduct regular access reviews, rotate keys, and monitor for suspicious activity.

6. Your Rights & Choices

  • Request access, correction, or deletion of your data by emailing support@toklytics.live.
  • Opt out of roster monitoring by coordinating with your agency contact to deactivate your account.
  • Disable local storage sessions at any time by logging out of the dashboard.

7. International Users

Toklytics-LiveIQ is operated from the United States. By using the service, you consent to processing and storage in the U.S. and any other country where our processors operate.

8. Updates to This Policy

We may update this privacy policy to reflect product changes or legal requirements. When updates are material, we will notify roster administrators and update the “Last updated” date below.

9. Contact

Questions, concerns, or requests regarding privacy can be directed to support@toklytics.live.