HR

Hack Rebel Social

Agency Dashboard

Privacy Policy

This Privacy Policy explains how Hack Rebel Social ("we," "us," or "our") collects, uses, stores, and protects information when you use our TikTok Analytics Dashboard ("Service"). We are committed to protecting the privacy of our clients and the TikTok account holders whose data we access.

1. Information We Collect

We collect the following types of information through our Service:

Data Type	Source	Purpose
TikTok Profile Data Display name, bio, avatar, verification status	TikTok Content API (via OAuth)	Display account overview in dashboard
Audience Metrics Follower count, following count, total likes	TikTok Content API (via OAuth)	Track growth and audience size
Video Analytics Video titles, thumbnails, views, likes, comments, shares, publish dates	TikTok Content API (via OAuth)	Analyze content performance
OAuth Tokens Access token, refresh token (encrypted)	TikTok OAuth 2.0 flow	Maintain authorized API access
Account Identifier TikTok Open ID, username	TikTok Content API (via OAuth)	Identify and link account records

We do not collect passwords, payment information, personal addresses, or any sensitive personal information beyond what is described above.

2. How We Use Your Information

We use the collected data exclusively for:

• Displaying analytics metrics in the Hack Rebel Social dashboard for authorized agency team members.
• Generating performance reports for social media management purposes.
• Refreshing data on a scheduled basis (daily) to keep analytics up to date.
• Diagnosing technical issues with the dashboard or API connections.

We do not use your TikTok data for advertising, machine learning training, profiling, or any purpose beyond agency analytics reporting.

3. Data Storage and Security

All data retrieved from the TikTok API is stored in a secure, encrypted database (Upstash Redis / Vercel KV) hosted on Vercel's infrastructure. Security measures include:

• OAuth tokens are stored with encryption at rest.
• Access to the dashboard is restricted to authorized agency personnel only.
• All communications between our Service and TikTok's API are encrypted via HTTPS/TLS.
• Data is retained only as long as necessary to provide the Service.

4. Data Sharing

We do not sell, rent, or trade your personal information. We may share data with:

• Vercel Inc. — our hosting provider, for infrastructure and database services.
• Upstash Inc. — our database provider (Redis KV).
• Authorized agency clients — dashboard users authorized to view analytics for specific accounts.
• Law enforcement — only if required by applicable law or valid legal process.

5. TikTok API Compliance

Our use of the TikTok Content API complies with TikTok's API Terms of Service. Specifically:

• We only request the minimum necessary OAuth scopes required to provide analytics.
• We do not access private messages, contacts, or any data beyond what is required for analytics.
• Users can revoke our API access at any time through TikTok's Connected Apps settings.
• We comply with TikTok's data deletion requirements upon request or upon account disconnection.

6. Your Rights

As a user of our Service, you have the right to:

• Access — Request a copy of the data we hold about your TikTok account.
• Deletion — Request deletion of all data associated with your account from our systems.
• Revocation — Revoke API access authorization at any time via TikTok's settings.
• Correction — Request correction of inaccurate information we hold.

7. Data Retention

We retain TikTok analytics data for as long as your account is connected to our Service. If you revoke authorization or request deletion, OAuth tokens are deleted immediately and cached analytics data is deleted within 30 days.

8. Children's Privacy

Our Service is intended for business use only and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of material changes by updating the "Last updated" date. Continued use of the Service following any changes constitutes your acceptance of the updated Policy.

10. Contact Us