In effect from 3 November 2026
Here is how Tookitoki treats your information when you visit tookitoki.digital or use our TikTok Ads growth, audit and automation service. Questions go to [email protected].
What you share with us
Your name, email, business details and messages, along with account and billing details if you use paid services.
What we collect automatically
Basic logs (IP address, browser, pages, times) and cookies that sign-in and security depend on.
What we get from TikTok
If you connect TikTok for Business, you approve Tookitoki on TikTok's own screen. We then receive a token limited to the ad accounts and permissions you chose, never your password. Based on what you allow, we may process:
- advertiser details such as ID, name, currency, time zone and status;
- campaigns, ad groups and ads, including status, objectives, budgets, bids, schedules and targeting settings;
- aggregated reports such as spend, impressions, clicks, CTR, CPC, CPM, conversions, CPA and ROAS;
- creative details such as IDs, thumbnails and ad text, plus files you upload for new ads.
Changes in your ad account
With the Ads Management and Creative Management permissions, Tookitoki can create, edit, pause or resume campaigns, ad groups and ads, change budgets and bids, and upload creatives. It does so only when an authorized person on your side approves the action, or when a rule you turned on is triggered.
We don't sell TikTok data, build advertising profiles from it, or share it with other customers. TikTok's reports are aggregated and don't identify people who see your ads.
Why we use it
- To run tracking, alerts, reports and audits.
- To carry out changes you approve or automate.
- To help you and keep you informed about the service.
- To stay secure and follow the law.
Who sees it
Providers that work for us (such as hosting, email and payments), people on your own team, and authorities where the law requires. If the business changes hands, this policy still applies.
How long we keep it
Tokens stay until you disconnect. TikTok data stays while your account is active and goes within 30 days of disconnecting or asking us to delete it. Billing records stay as long as the law says.
Keeping it safe
We use encrypted connections and limit who can access data. Nothing online is perfectly secure, and we'll tell you about a breach where the law requires it.
Your rights
Ask us to access, fix, export or delete your information, or withdraw your consent, at [email protected]. We answer within 30 days, and you can also contact your data protection authority.
Kids
Tookitoki is for businesses and isn't meant for anyone under 18.
Updates
When this policy changes, we'll post the new version here with a new date.