Privacy Policy

This Privacy Policy explains how TikActions (“TikActions”, “we”, “us” or “our”) processes personal data when you use the TikActions Windows desktop application, our cloud services, our websites, and the TikTok Login Kit integration.

1. Scope

This policy applies to the TikActions desktop application, TikActions account and licensing services, cloud action synchronization and sharing, the TikActions website, and authentication performed through TikTok Login Kit. Third-party services have their own privacy practices and policies.

2. Personal data we process

2.1 TikActions account data

Depending on how your account is configured, we may process your TikActions username, password hash, account role, plan, account status, expiration date, authorized-device limit, account creation date, and last-login information. We do not store your TikActions password in plain text.

2.2 TikTok Login Kit data

When you choose “Continue with TikTok”, authentication takes place on TikTok's official authorization page. With your authorization and the user.info.basic permission, TikActions may receive and store identifiers and basic profile information needed to identify the authorized account, including TikTok open_id, union_id where supplied, display name, avatar URL, and the time the identity was linked or used to sign in.

TikActions does not receive your TikTok password. OAuth access information is used server-side to complete the authorized login flow and retrieve the permitted basic profile information.

2.3 Device, session and security data

We may process a device identifier or derived device hash, device name, operating-system/platform information, session identifiers, session expiration and revocation information, IP address, and security/audit logs. We use this information to enforce device limits, keep accounts secure, diagnose abuse and maintain the service.

2.4 Cloud actions and share codes

If cloud synchronization is enabled for your account, TikActions stores your automation rules and related rule settings so they can be restored on authorized devices. Rules may include triggers, commands, action parameters, webhook targets or similar workflow information that you enter into the application.

When you create a TK share code, TikActions stores a snapshot of the actions associated with that code, the owner account, creation information and import records. A recipient who has the code can import the shared action snapshot into their own TikActions account.

2.5 Data intended to remain local

Global integration credentials that are designed to remain device-local—such as TikTok LIVE session cookies, ServerTap authentication keys, OBS passwords and local media files—are not intentionally included in TikActions action-share codes. You remain responsible for reviewing rules before sharing them, particularly where a rule contains a URL, command or other information you consider confidential.

2.6 Website and network data

Our infrastructure may process standard request data such as IP address, timestamp, requested path, user agent and error/security information when you access our websites or API.

3. Why we use personal data

• to create, authenticate and administer TikActions accounts;
• to associate an authorized TikTok identity with a TikActions account;
• to provide cloud synchronization, share codes and device authorization;
• to deliver updates, maintain compatibility and operate the service;
• to prevent fraud, misuse, unauthorized access and security incidents;
• to respond to support, privacy and account requests; and
• to comply with applicable legal obligations.

4. Legal bases

Where the GDPR or similar law applies, our processing may rely on performance of a contract or steps requested before entering a contract, our legitimate interests in operating and securing TikActions, compliance with legal obligations, and your consent where consent is the appropriate legal basis. TikTok authorization is initiated by you and can be revoked through the controls provided by TikTok and/or by unlinking the identity from TikActions.

5. TikTok and third-party services

TikTok Login Kit is provided by TikTok. TikTok processes information under its own terms and privacy policy. TikActions is an independent service and is not affiliated with, sponsored by, or endorsed by TikTok.

TikActions may also connect, at your direction, with third-party tools such as OBS, Minecraft/ServerTap, webhook destinations, and online sound providers. Data sent by a rule to a third-party destination is subject to that provider's terms and privacy practices.

6. Sharing of personal data

We do not sell personal data. We may disclose data to infrastructure or hosting providers that process data on our behalf, when needed to provide a feature that you request, when required by law, or when reasonably necessary to protect users, TikActions or others from fraud, security threats or unlawful activity.

Action snapshots are disclosed to another TikActions user only when that user possesses and imports the share code you generated.

7. International data transfers

Some service providers or third-party integrations may process data outside Portugal or the European Economic Area. Where required, we use or rely on appropriate safeguards for international transfers. Your use of a third-party integration may also result in data being transferred according to that provider's own policies.

8. Data retention

We retain account and linked-identity information while it is needed to provide the service and for a reasonable period thereafter where necessary for security, dispute resolution, fraud prevention or legal compliance. Sessions and authorization records may expire or be revoked earlier. Share snapshots remain available until removed or revoked, or until no longer required to provide the sharing feature.

When data is no longer required for the purposes described in this policy, we delete, anonymize or securely dispose of it, subject to technical backup cycles and legal obligations.

9. Security

We use technical and organizational safeguards intended to protect personal data, including HTTPS for public cloud communications, password hashing, session controls, device authorization, access restrictions, and server-side handling of confidential OAuth credentials. No system can be guaranteed to be completely secure, so users should also protect their own devices and credentials.

10. Your privacy rights

Depending on your location, you may have rights to request access to, correction of, deletion of, restriction of, or portability of your personal data, and to object to certain processing. Where processing is based on consent, you may withdraw consent without affecting processing that was lawful before withdrawal.

Users in the European Economic Area may also have the right to lodge a complaint with their competent supervisory authority. In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD).

11. Unlinking TikTok and deleting account data

You can request that the TikTok identity linked to your TikActions account be removed, or request deletion of your TikActions account data, by contacting support@tikactions.pt. We may need to verify your identity before completing a request. Removing a TikTok association may terminate active TikActions desktop sessions that relied on that association.

You can also manage or revoke permissions granted to third-party applications through the controls made available by TikTok.

12. Children

TikActions is not directed to children below the minimum age permitted to use the relevant TikTok services or below the age at which they may lawfully consent to the processing involved. Users must meet TikTok's age requirements and applicable local law. If we learn that personal data has been collected in violation of applicable age requirements, we will take appropriate steps to remove it.

13. Changes to this policy

We may update this Privacy Policy when the service, integrations, legal requirements or our data practices change. The “Last updated” date above identifies the current version. Material changes may also be communicated through the application or website when appropriate.

14. Contact

For privacy questions, account-data requests or complaints relating to TikActions, contact support@tikactions.pt.