Privacy Policy

tikklip is a tool for retrieving and exporting public TikTok data. This policy explains what we hold about you, the account holder. It is written to be read, not to be survived.

What we collect

Account information. When you sign up we receive your email address, and — if you use Google sign-in — your name and profile image. Authentication is handled by Clerk; we never see or store your password.

Billing information. Subscriptions are processed by Stripe. Card numbers never touch our servers. We store only a Stripe customer identifier and a subscription identifier so we know which plan you are on.

Usage data. For each job you run we store what you asked for (a profile handle, a keyword, a video link), when you ran it, whether it succeeded, and how many requests you have spent against your monthly quota. This is what makes your dashboard and your quota meter work.

Exported results. The public TikTok data a job returns is stored against your account so you can re-download it without spending quota twice.

API keys. If you create a key for the Agency API we store a one-way hash of it, never the key itself. This is why a lost key cannot be recovered, only replaced.

What we do not collect

We do not store card numbers, we do not run advertising or cross-site tracking pixels, and we do not sell data to anyone, ever.

We also do not keep copies of the videos you download. A download is streamed through our servers directly from TikTok's content network to your browser and is never written to disk.

TikTok data and your responsibilities

tikklip retrieves data that TikTok already publishes publicly. We do it because you instructed us to, in response to a specific request you made. For that data, you are the one deciding why it is collected and what happens to it next.

That means the obligations travel with you. If you export a creator's followers, or a video's comment authors, you are handling other people's personal data, and the law in your jurisdiction — GDPR, CCPA, or otherwise — applies to what you do with it. Our Terms of Service require that you have a lawful basis for it.

How we use what we collect

• To authenticate you and keep you signed in.
• To run the jobs you ask for and show you the results.
• To meter usage against your plan's monthly quota.
• To bill you, and to email you about billing.
• To detect abuse and enforce rate limits.

We do not use your job inputs or exported results to train models, and we do not read them except when you ask us to investigate a problem.

If the GDPR applies to you, these are the lawful bases we rely on for the data we hold about you, the account holder:

We deliberately do not claim a lawful basis here for the public TikTok data you ask us to retrieve. That data is dealt with in the next section, and who bears responsibility for it depends on what you do with it.

Who else processes your data

We rely on the following processors. Each one receives only what it needs to do its job.

All of them are located in the United States. If you are in the European Economic Area or the United Kingdom, using tikklipinvolves transferring your data to the United States. Each processor above receives that data under its own published data-processing agreement, which incorporates the European Commission's Standard Contractual Clauses (and, for the UK, the ICO's Addendum). We do not rely on the EU–US Data Privacy Framework alone.

If your public TikTok data is in our systems

You may be reading this because you post on TikTok and one of our customers exported data about you — a handle, a comment you wrote, a video you published, a follower relationship. We did not choose you. A customer asked for you by name, and we retrieved what TikTok already publishes.

You can still ask us to remove it. Email support@tikklip.com with the TikTok handle concerned and we will delete the rows we hold that relate to it, within 30 days, and tell you when it is done. We cannot retrieve copies a customer has already exported to their own computer — for those, the customer is the one who must answer you, and our Terms of Service require them to.

How long we keep it

We will be direct with you, because a vague answer here is worse than an inconvenient one: we do not currently delete anything automatically. Your jobs, your exported results, and your account record persist until you ask us to remove them.

Deleting a job from your dashboard is immediate and permanent. The job record and every result row scraped for it are removed from the database at once — there is no soft delete and no recycle bin. Videos you already saved to a collection survive, because a collection stores its own copy of the details.

Deleting your whole account is not yet self-service. Email support@tikklip.com and we will delete your account and everything attached to it within 30 days.

Records we are required to retain for tax and accounting purposes — chiefly Stripe invoices — outlive account deletion, as the law requires.

Your rights

Wherever you live, you can ask us to show you what we hold about you, correct it, export it, or delete it. If you are covered by the GDPR you additionally have the right to object to processing, to restrict it, and to complain to your national supervisory authority without going through us first.

If you are covered by the CCPA: we do not sell personal information, and we do not share it for cross-context behavioural advertising. We run no advertising pixels and no analytics scripts of any kind — the only third-party code on this site is Clerk's, which signs you in. So there is no "Do Not Sell or Share My Personal Information" link, because there is nothing behind it, and a Global Privacy Control signal has nothing here to switch off. You also have the right to know, delete, correct, and not be retaliated against for asking.

Exercise any of these by emailing support@tikklip.com. We will respond within 30 days and will not charge you or degrade your service for asking.

Cookies

We set one category of cookie: the session cookies Clerk uses to keep you signed in. They are strictly necessary, so there is no consent banner — there is nothing to consent to. We run no analytics or advertising cookies.

Security

All traffic is served over TLS. API keys are stored as one-way hashes. Download links are signed and expire. Access to production systems is limited to people who need it.

No system is perfectly secure. If we discover a breach affecting your personal data, we will notify you and the relevant regulator within the timeframes the law sets.

Children

tikklip is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has created an account, contact us and we will delete it.

Changes

If we change this policy materially we will update the effective date at the top and email active subscribers before it takes effect. Continuing to use tikklip after that date means you accept the revision.

Contact

tikklip is the controller of the personal data described above. Reach us at support@tikklip.com.

tikklip is the trading name of a sole proprietorship operated from the State of Georgia, United States. The operator's full legal name and postal address are available on request.