Privacy Policy

1. Collection of Routine Information

The Service tracks basic information about its users. This information includes, but is not limited to, IP addresses, browser details, timestamps, and referring pages. None of this information can personally identify a specific user of the Service. The information is tracked for routine administration and maintenance purposes.

2. Account Information

When you create an account, we collect information such as your email address, name, and authentication credentials (password hash or Google OAuth token). This information is used solely to provide, maintain, and improve the Service.

We will not sell any personally identifiable information to third parties for profit.

We may disclose personally identifiable information under special circumstances, such as to comply with subpoenas, court orders, or other legal process.

3. Anti-Abuse Data Collection

To prevent abuse and enforce our Terms of Service, we collect and process the following data:

IP Address at Signup: Your IP address is recorded when you create an account. This is used to detect multiple account creation from the same device or network.

Email Normalization: We normalize email addresses (removing "+" aliases and dots from Gmail addresses) to detect duplicate accounts created with alias variations of the same email address.

Account Flags: If our system detects potential multi-account abuse, we create an internal record linking the flagged account to other accounts from the same IP address or normalized email. This data includes the flag type, related account IDs, IP address, and timestamp.

Device Fingerprinting Cookies: We may set cookies to identify browsers that have been associated with multiple account creation. These cookies are used solely for abuse detection and are not used for advertising or tracking purposes.

Accounts with active paid subscriptions are exempt from multi-account warnings, as multiple legitimate accounts are expected in business contexts.

4. Cookies

Where necessary, the Service uses cookies to store information about a visitor's preferences and history in order to better serve the user and/or present the user with customized content. Cookies are required to use certain features of the Service.

We use the following types of cookies:

Authentication cookies: Required to maintain your login session.

Anti-abuse cookies: Used to detect and warn about potential multi-account creation. These cookies may persist for up to 30 days.

Preference cookies: Used to remember your settings and preferences.

5. API Usage Data

We collect usage metrics related to your API calls, including request counts, endpoints accessed, response times, and error rates. This data is used to monitor service health, enforce rate limits, and improve the Service.

We do not store the content of the TikTok LIVE data that passes through our API. Data streams are relayed in real-time and are not retained on our servers.

6. Third Parties

Third-party services may use cookies, scripts, and/or web beacons to track user activities on the Service. Such tracking is done directly by the third parties through their own servers and is subject to their own privacy policies. The Service has no access or control over these cookies, scripts, and/or web beacons.

We use Stripe for payment processing. When you subscribe to a paid plan, your payment information is handled directly by Stripe and is subject to Stripe's Privacy Policy. We do not store your credit card details.

7. Links to Third-Party Websites

We have included links on this website for your use and reference. We are not responsible for the privacy policies on these websites. You should be aware that the privacy policies of these websites may differ from our own.

8. TikTok Data & Third-Party API Disclaimer

TikTool Live is not affiliated with, endorsed by, or sponsored by TikTok or ByteDance Ltd.

TikTool Live provides a managed third-party API for accessing publicly available TikTok LIVE broadcast data. TikTok does not offer a native, public API for live stream data. Our Service processes publicly accessible broadcast telemetry to deliver structured event data.

Any TikTok data accessed through the Service is publicly available data from TikTok LIVE streams. We do not access, collect, or store private TikTok account information.

TikTok may suppress, modify, or block access to its endpoints at any time without notice. When this occurs, we update our systems to restore access where possible, but we cannot guarantee uninterrupted service. The availability of TikTok data through our Service depends entirely on TikTok's platform policies and technical infrastructure, which are outside our control.

9. Data Security

The internet is a complex system. Your content is transmitted, stored, and manipulated using third-party networks and devices that TikTool Live has no control over. We make a reasonable effort to keep your data private and secure to the best of our abilities, but we cannot guarantee absolute security.

API keys are stored securely and transmitted only over encrypted connections. Password hashes use strong cryptographic algorithms (scrypt with random salts).

10. Data Retention

We retain your account information for as long as your account is active. If you delete your account, all associated personally identifiable information will be removed from our systems within 30 days.

Aggregated, anonymized usage data may be retained indefinitely for analytical and improvement purposes.

Anti-abuse flags and related records may be retained for up to 12 months after account deletion to prevent repeat abuse.

11. Changes to This Policy

We reserve the right to modify this privacy policy at any time. Changes will be effective immediately upon posting to this page. Your continued use of the Service after any changes constitutes acceptance of the revised policy.

12. Discord Bot Data and Privacy

If you choose to use the TikTool Live Discord Bot on your server, the following additional privacy terms apply in compliance with Discord's Developer Terms:

Data Collected: The bot collects and stores only the data strictly necessary for its operation. This includes your Discord Server ID (Guild ID), Channel IDs (where alerts are routed), and the User IDs of administrators who execute slash commands to configure the bot.

Message Content: To enable our seamless cross-server matchmaking feature, the bot processes message content ephemerally within designated channels to detect battle acceptances. This data is processed purely in-memory for real-time contextual matching and is instantly discarded. We DO NOT log, store, or export human message content, direct messages, or conversational data to any database, nor do we use it to train AI models.

Data Usage: The collected Discord IDs are used solely to route your requested TikTok LIVE telemetry (e.g., gifts, chat, battles) to the correct Discord channels.

Data Retention & Deletion: If you kick or remove the TikTool Live bot from your Discord server, the automated alert configurations associated with your Server ID are orphaned and automatically purged from our active routing database. You may also request immediate manual deletion of your server's data at any time by contacting us.

13. Contact Us

For any questions or concerns regarding this privacy policy, please contact us at hello@tik.tools.