Privacy Policy

1. Information We Collect

We collect information you provide directly, such as your name, email address, and account credentials when you register. When you connect third-party platforms (YouTube, Instagram, TikTok), we access and store content performance data from each platform’s official API. The specific data we read is enumerated in Section 3.

2. How We Use Your Information

We use your information to provide and improve the Service, including: displaying analytics dashboards, generating AI-powered content insights, sending service-related communications, and maintaining account security. We do not sell your personal information to third parties.

3. Third-Party Platform Data

When you connect your social media accounts via OAuth, we access data in accordance with each platform’s API terms. We only access data necessary to provide the Service and we do not post, modify, or delete content on your behalf. The specific fields we read are:

• Instagram (via the Instagram Graph API, scopes instagram_business_basic and instagram_business_manage_insights): profile fields (username, name, profile picture, follower count, post count, biography); media metadata (caption, media type, timestamp, permalink, thumbnail); account-level insights (reach, views, profile views, follower count); per-media insights (likes, comments, shares, saves, video views); audience demographics (age, gender, country, city); and the online-followers schedule.
• YouTube (via the YouTube Data API and YouTube Analytics API, scopes youtube.readonly, yt-analytics.readonly, and, when revenue analytics is enabled, yt-analytics-monetary.readonly): channel metadata; uploaded video metadata (title, description, publish date, thumbnail); video statistics (views, likes, comments); channel and video analytics (impressions, click-through rate, watch time, audience retention, traffic sources including referrer/search-detail breakdowns, demographics); and monetization analytics such as estimated revenue, CPM, ad impressions, monetized playbacks, and YouTube Premium revenue.
• TikTok (via the TikTok Display API, scopes user.info.basic, user.info.profile, user.info.stats, and video.list): profile information (display name, avatar, bio, follower count, following count, likes count, video count); list of public videos (title, description, cover image, duration, post date, view count, like count, comment count, share count).

Our use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies. Our use of YouTube data is governed by the YouTube API Services Terms of Service and Tippity adheres to the Google Privacy Policy. Our use of TikTok data is governed by the TikTok Developer Terms of Service.

You can disconnect any platform at any time through the Settings page in your Tippity account. You can also revoke Tippity’s access directly from each platform: Instagram (Settings → Apps and Websites → Active), YouTube / Google (Google Account → Security → Third-party apps with account access at myaccount.google.com/permissions), and TikTok (Settings and privacy → Security and login → Manage app permissions).

4. Data Storage and Security

Your data is stored on secure servers with encryption at rest and in transit. We implement industry-standard security measures including access controls, regular security audits, and encrypted backups. OAuth tokens are stored securely and are never exposed to client-side code.

5. Cookies and Tracking

We use essential cookies to maintain your session and authentication state. We may use analytics tools to understand how the Service is used. You can configure your browser to refuse cookies, though this may affect the functionality of the Service.

6. Data Sharing

We do not sell or rent your personal data. We may share information with: service providers who assist in operating the platform (hosting, email delivery), when required by law or legal process, or in connection with a merger or acquisition. All service providers are bound by data protection agreements.

7. Data Retention

We retain your data for as long as your account is active. Connected-platform analytics data is retained according to your subscription tier:

• Free: rolling 30-day window
• Pro: rolling 365-day window
• Team: full history while your account is active

When you disconnect a platform, all analytics data associated with that platform is deleted within 30 days. When you delete your account, all personal data is deleted from our active systems within 30 days, and from encrypted backups within an additional 30 days, except where retention is required by law (such as billing records for tax compliance).

8. Your Rights

You have the right to access, correct, or delete your personal data. You can export your data, disconnect third-party platforms, or delete your account at any time through the Settings page. For data subject requests or inquiries, contact us at the email below.

EEA / UK residents (GDPR): If you are located in the European Economic Area or United Kingdom, you have additional rights under the General Data Protection Regulation, including the rights of access, rectification, erasure, restriction of processing, data portability, objection, and the right to lodge a complaint with a supervisory authority. To exercise any of these rights, contact privacy@tippity.ai.

California residents (CCPA / CPRA): If you are a California resident, you have rights under the California Consumer Privacy Act and the California Privacy Rights Act, including the right to know what personal information we collect, the right to delete personal information, the right to correct inaccurate personal information, the right to opt out of the “sale” or “sharing” of personal information, and the right to non-discrimination for exercising your rights. We do not sell or share your personal information for cross-context behavioral advertising. To exercise any of these rights, contact privacy@tippity.ai.

9. Children’s Privacy

The Service is not directed to individuals under 16. We do not knowingly collect personal information from individuals under 16. If we become aware that we have collected data from someone under 16, we will take steps to delete that information promptly. Where applicable law requires a higher age threshold, we comply with that threshold.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy, please contact us at privacy@tippity.ai.