Key Privacy Commitments at a Glance
- Zero Data Selling: We never sell, rent, or monetize your personal information or TikTok creator data to data brokers or third parties.
- Minimum Necessary Scope: We only request TikTok API permissions strictly necessary to generate videos and post them directly to your TikTok account at your explicit request.
- Full User Control: You can disconnect your TikTok account and request complete deletion of all associated data at any time.
- Enterprise-grade Security: Sensitive tokens and media assets are encrypted in transit via TLS 1.3 and at rest with AES-256 encryption.
Information We Collect
When you interact with Vipee, we collect information depending on how you use our application:
TikTok Account Data (via Login Kit)
When you authenticate via TikTok Login Kit and authorize our app, we receive:
- TikTok OpenID (an anonymized unique identifier)
- Display name & Profile avatar URL
- Temporary OAuth Access Token & Refresh Token (encrypted)
- Account verification and creator region info
* Note: We never receive, store, or have access to your TikTok password.
Content & Studio Assets
Data generated or uploaded while creating video projects:
- Product images, titles, and descriptions input into the editor
- Generated video scripts, storyboards, and audio voiceovers
- Video rendering settings and output MP4 files
- Post metadata (captions, hashtags, privacy levels, commercial disclosure toggles)
Technical Logs & Usage Information
We collect standard technical information automatically when you use our platform, including browser type, operating system version, referral URLs, IP address for bot/DDoS mitigation, and API error diagnostic logs.
How We Use Your Information
We use the collected data strictly to operate, maintain, and deliver the services requested by you:
- Facilitating TikTok Direct Posting: Transmitting your rendered video and post parameters (title, privacy level, commercial music/sponsorship tags) directly to TikTok servers through the official TikTok Content Posting API.
- AI Content Creation: Analyzing provided product information to generate high-converting video scripts, motion design storyboards, and realistic synthetic voiceovers.
- Rendering Engine Execution: Assembling images, captions, audio, and visual animations into vertical video formats (9:16) optimized for TikTok feeds.
- Account Management & Security: Authenticating your session, preventing abusive automated requests, and validating token expirations.
- Legal & Policy Compliance: Ensuring compliance with the TikTok Developer Terms of Service, TikTok Community Guidelines, and applicable national laws.
Third-Party Services & Data Transfers
Vipee integrates with trusted infrastructure and AI providers to deliver core functionalities:
1. TikTok / ByteDance Pte. Ltd. (Platform API)
When you initiate direct publishing, video files and metadata are transferred to TikTok in accordance with the TikTok Privacy Policy and the TikTok Developer Terms of Service.
2. Google Gemini AI (Multimodal Analysis)
Product images and text descriptions may be processed via Google Gemini APIs exclusively to analyze product attributes and create storyboard ideas. No personal identity data is shared with Google.
3. ElevenLabs & Microsoft Edge TTS (Voice Synthesis)
Audio voiceovers are generated from your approved video script. Only script text strings are sent to voice synthesis engines; no user identifiers are attached.
Data Retention & Storage
We adhere to data minimization principles. We do not retain data longer than is strictly necessary:
- OAuth Tokens: TikTok access tokens and refresh tokens are stored securely in encrypted format and are deleted immediately upon account disconnection or token expiration.
- Rendered Video Files: Video files rendered in the studio are temporarily stored on our secure media servers for a maximum of 48 hours to allow download or retry posting, after which they are permanently purged.
- Audit & Diagnostic Logs: Anonymous server interaction logs are retained for 30 days for debugging, rate-limit defense, and security analytics.
5. User Data Deletion Instructions
In compliance with TikTok Developer Policy and global privacy regulations (GDPR Article 17, CCPA), users have the right to request the complete deletion of their account data and revoked authorizations at any time.
Method A: Revoke Access Directly via TikTok App
- Open your TikTok mobile application.
- Go to your Profile and tap the hamburger menu icon (three lines) at the top-right corner.
- Select Settings and privacy > Security & permissions.
- Tap on Manage app permissions.
- Locate Vipee in the authorized apps list and tap Remove access.
* Once access is revoked, our access tokens are immediately invalidated and our system will cease all communications with your TikTok account.
Method B: Direct Request to Our Data Protection Officer
You can also request immediate manual wiping of all your stored data (tokens, media drafts, logs) by emailing us:
Please include your TikTok Display Name or OpenID in the subject line. We will process and confirm deletion within 48 hours.
Data Security & Protection
We employ administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, destruction, loss, alteration, or disclosure:
- Encrypted Transmission: All data transmissions between your browser, our servers, and TikTok endpoints utilize modern TLS 1.3 cryptographic protocols.
- Encrypted Storage: Access credentials and refresh tokens are encrypted at rest with industry-standard AES-256 algorithms.
- Restricted Access: Access to production servers is strictly limited to authorized engineers subject to role-based access control and two-factor authentication.
Your Privacy Rights (GDPR & CCPA)
Depending on your jurisdiction (such as the European Economic Area, UK, or California), you hold legal rights regarding your personal information, including:
Children's Privacy
Vipee is strictly designed for commercial creators and eCommerce businesses aged 18 and older (or the age of legal majority in your country). We do not knowingly collect, store, or solicit personal data from children under the age of 13 (or under 16 in certain EU jurisdictions). If you discover that a child has provided us with personal information, please contact us immediately and we will promptly remove such records.
Policy Amendments
We may revise this Privacy Policy periodically to reflect technological updates, product enhancements, or adjustments in TikTok platform guidelines. The updated revision date at the top of this page indicates the most recent modification. Continued use of our application after any change constitutes acceptance of the revised policy.
Contact Us
If you have questions, inquiries, concerns regarding our privacy practices, or if you wish to exercise your data rights, please contact our Legal & Data Protection team: