Privacy

This policy covers the ttpanel.app site, the app.ttpanel.app application (League and the account page), the TT Panel panel and the browser extension. We process the information you give us when you create an account, buy, write to us, look up a creator or use the site assistant, and the analytics data created while you use the site. Below is what we keep, why, and for how long. The data the browser extension handles is described in section 7, creator data that agencies process in the panel in section 8, publicly available creator data shown on the site and how to request its removal in section 9, and League lists in section 10.

Contact: the details you send when you write to us by email or WhatsApp (your name, email address or phone number, and your message); used only to reply to you.

Creator lookup: the username you type, the result shown to you, the country of the request and, if you are signed in, your account; your IP address and the visitor cookie are stored only in hashed form. These records are used for rate limiting, protection against abuse and seeing how the lookup is used, and are kept for 30 days; the rate limit counter is kept for at most 24 hours. Each lookup is also recorded as an analytics event in PostHog without your IP address; if you are signed in, the event is linked to your account.

Account and subscription: your email address, your Google account ID if you sign in with Google, your plan, its status and period dates, and your customer number at the payment provider; for panel users, login identity and the activity records inside the panel. These are needed for the service to work. When you sign in with Google we receive only your email address and account ID from Google (the openid and email scopes); we do not receive your name, photo or any other Google data. Your card details never reach us; they stay with Creem.

Security records: when you request a login link, log in with an email link or with Google, or log out, we record the time of the request, your email address, your IP address, the country derived from it and your browser details. Login attempts made with an invalid or expired login link are also recorded with the IP address, country and browser details. These records exist to protect your account and the site against abuse; the login link itself is never recorded.

Site usage: which pages you open, where you click, a recording of the session, browser and device details, your IP address and the approximate location derived from it, page errors and load times. If you use the site assistant, your questions, the assistant's answers, your country and usage counters are also recorded.

We use PostHog to understand how the ttpanel.app site is used. Page views, clicks and session recordings are collected. Session recordings also include the page's browser console log (technical messages and errors). Your IP address is also processed by PostHog to determine location. The data is kept on PostHog servers in the EU. Visit counts and page speed are also measured in aggregate with Cloudflare Web Analytics; this measurement uses no cookies and does not identify you. No PostHog script runs in the app.ttpanel.app application; creator lookups made there are recorded only as the server side analytics event described in section 2.

For PostHog analytics, a cookie and a local storage entry are written to your browser, so that later visits from the same visitor can be recognized. When you are logged in to your account, this analytics data is linked to your email address; requesting a login link and logging in are also recorded as analytics events. When you log in, a required session cookie that keeps you signed in (at most 30 days), a cookie that only tells the site a session may exist, and short-lived login cookies during sign-in are also written; these are used only for signing in. When you use the creator lookup or the site assistant, a signed visitor cookie with a random identifier (at most 400 days) is written for rate limiting and protection against abuse, and after the assistant's security check a cookie valid for 30 minutes; these cookies hold no personal details.

In session recordings, whatever you type into form fields is masked and never recorded.

There is no advertising tracker. The verification tool used to protect the login form and other forms (Cloudflare Turnstile) does not hand your identity to us.

Cloudflare: hosting the site and the app, form and login verification (Turnstile) and cookieless aggregate visit measurement (Web Analytics).

PostHog: visit analytics and session recordings for ttpanel.app; servers are in the EU. Creem: payment, invoicing and subscription management; as merchant of record it processes data under its own privacy policy. Google: authentication when you choose to sign in with Google.

Our own mail server: sending login links, and receiving and answering the emails you write to us. If you write to us on WhatsApp, your message is delivered through WhatsApp (Meta).

Questions you write to the site assistant are answered with Anthropic's Claude model; the question and answer text is kept in our own database for 30 days. For voice control, audio is processed by a third party model that converts speech to text, and the text is then answered by a language model. Audio is never recorded or stored at any stage.

The eligibility check runs through a central service, and that service sees which creator you are asking about. We run that service ourselves, and in section 1 of the terms of service we commit to never using what it sees, or your panel data, in another agency's work.

Your voice command is only processed while it is being converted to text and then answered; it is never recorded or stored at any stage. No data is processed or stored beyond this.

The TT Panel browser extension shows the creator information from your TT Panel account on the tiktok.com page. You need a TT Panel account to use it; your team does the work, and the extension simply helps.

What it reads: the extension only runs on tiktok.com pages, and there it reads the username of the creator shown on screen and the state of the page (whether they are live, viewer and follower counts, stream title, display name). It also reads the username of the TikTok account signed in to your browser. It does not read pages on other sites.

What it sends to the server: the email address you use to sign in to the panel, the usernames of the creators you visit along with the page state above, the username of the TikTok account signed in to your browser, usage events of the extension (which screen was opened, which button was pressed, the extension version), the message and comment text your team writes through the extension, and your voice command when you use the voice assistant. The data goes only to your agency's TT Panel server; a voice command is also passed to the model in section 4 to be converted to text.

What it does not keep: it never reads or sends your TikTok cookies, password or session details. A voice command is sent to the server only to be converted to text, it is processed by a third party model that converts speech to text, and it is never recorded or stored at any stage; the voice commitment in sections 4 and 6 applies to the extension exactly the same way.

What it keeps on your device: settings, the panel address, your language choice, message templates, drafts and local history stay only in your browser, in the extension's own storage. Local history older than 30 days is deleted. When you remove the extension, this local data is removed too.

Limited use: the data the extension collects is used only for the extension's visible function, which is showing creator information and keeping your team's panel records. It is not sold, not used for advertising, not used to determine creditworthiness, and not shared with any third party outside that function. Data read from TikTok is never sold to third parties.

Who owns the data and how to delete it: the data the extension sends to the server belongs to the agency that owns the TT Panel account; we process it only to provide the service and keep it for the same period as panel records. To ask for your data to be deleted, just write to info@ttpanel.app.

Agencies that use the panel process data about creators they work with or are considering. This covers the public profile (username, display name, follower count, live status, category), the eligibility result with its evidence record, and the content of messages exchanged with the creator. If the agency has turned on the reply assistant, the text of an incoming message is processed by a language model provider to draft the reply.

The purpose is the agency's own management of its creator candidates.

For this data the agency is the data controller and we act as the data processor on its behalf; we do not use it for any other purpose and do not share it with another agency.

It is kept for the length of the agency's subscription and afterward only as long as legal retention obligations require.

A creator who wants their data deleted can write to info@ttpanel.app; we pass the request to the agency concerned and answer within 30 days at the latest.

In the creator lookup, sample creators and showcase lists we show profile information of TikTok creators that is already publicly available on TikTok: username, display name, profile photo, follower count, league, category and last live day. Agency status is shown only to users who are signed in. In the League preview, however, the first 3 rows of the TR and RO pools show the eligibility status without signing in (section 10).

If you are a creator and do not want your information shown on this site, you can use the removal request form or write to info@ttpanel.app. Requests are processed after we confirm by phone that the account belongs to you, and are resolved within 30 days of the request date at the latest. The email, phone number and note you give in the form are used only to process the request and are kept for up to 12 months after the request is closed.

League shows subscribed agencies public information about TikTok LIVE creators, taken from public league rankings: username, display name, league tier, rank, league score and 7 day earnings. In the TR and RO pools it also shows an eligibility status (whether the creator is tied to an agency or can be invited), taken from our eligibility checks. Anyone can preview the first 3 rows of each pool, with the same fields, without signing in. It shows no contact details and no private information.

The legal basis is our legitimate interest and that of the agencies: agencies have a legitimate interest in finding creators to work with, the data is already public on TikTok, and we limit it to what that purpose needs. A creator may object to this processing at any time.

List copies are kept for 2 days and then deleted; each refresh replaces older copies. To protect the lists from resale and automated collection, we keep access records of list requests (day, account, country, network and a shortened, hashed form of the IP address) for 30 days.

A creator who does not want to appear in the lists can use the removal request form or write to info@ttpanel.app, as described in section 9. Once a removal is processed, the creator drops out of the lists within 30 minutes at the latest, and copies already stored are deleted at the latest when the 2 day retention ends.

Lists that an agency copies or downloads become that agency's own data, and the agency is responsible for processing them lawfully.

Contact details: up to 12 months from the end of the conversation.

Creator lookup records: 30 days. Lookup rate limit counter: up to 24 hours.

Security records for logins and mail requests: 12 months.

Account, subscription, panel user and activity records: for the length of the subscription and afterward for as long as legal retention obligations require.

Visit analytics and session recordings: up to 12 months at PostHog. Site assistant questions and answers: 30 days. League list copies: 2 days. League list access records: 30 days. Removal request details: up to 12 months after the request is closed.

To learn what data we hold about you, to ask for it to be corrected or deleted, or to object to processing, just write to us by email. We answer requests within 30 days at the latest.

For any privacy question: info@ttpanel.app