← Back to TikPlan

Privacy Policy

Last updated: August 9, 2026

Note: this policy was drafted to cover what TikTok's app review and basic legal hygiene expect. It has not been reviewed by a lawyer — if you're handling EU/UK users or larger volumes of payment data, it's worth a proper legal review before you scale.

1. Who we are

TikPlan ("TikPlan," "we," "us," or "our") is a content calendar and publishing tool for TikTok, operated by Puncak Digital Marketing, No. 19, Jalan PJS 10/32, Taman Seri Subang, 46150 Petaling Jaya, Selangor, Malaysia. This policy explains what personal data we collect, why, and what you can do about it.

2. What we collect

  • Account information: name and email address, via our authentication provider (Clerk), when you sign up.
  • TikTok account data: when you connect a TikTok account, we receive your TikTok profile info (username, avatar, open ID) and an access token that lets us publish content and read analytics on your behalf, strictly within the permissions you grant during TikTok's own consent screen.
  • Content you upload: videos, captions, hashtags, and thumbnails you create or upload for scheduling and publishing.
  • Performance data: views, likes, comments, and shares for posts published through TikPlan, pulled from TikTok's API after you publish.
  • Payment information: if you subscribe to a paid plan, our payment processor (Stripe) handles your card details directly — we never see or store your full card number.
  • Usage data: pages visited, features used, and similar analytics needed to operate and improve the product.
  • Approximate location: we capture your country (not your exact location or IP address itself) once at signup, derived from your IP address by our hosting provider (Vercel), to understand where our users are.
  • Referral data: if you were referred by an affiliate link, a cookie (tikplan_ref) records which affiliate referred you, for 60 days.

3. How we use it

  • To provide the core service: scheduling, drafting, and publishing your content to TikTok
  • To generate AI-assisted captions, hashtags, and video hooks (via Google's Gemini API)
  • To show you analytics on your published content
  • To process payments and manage your subscription
  • To send transactional email (e.g. team invitations, weekly performance digests) via Resend
  • To detect and prevent fraud or abuse
  • To comply with legal obligations

We do not sell your personal data.

4. Who we share it with

We use the following sub-processors to operate TikPlan. Each only receives the data it needs to do its job:

  • TikTok — to publish content and retrieve analytics, via TikTok's official Content Posting API
  • Clerk — authentication and account management
  • Stripe — payment processing and subscription billing
  • Supabase — database and video/file storage
  • Google (Gemini API) — AI-generated captions, hashtags, and hooks
  • Resend — transactional email delivery
  • Vercel — application hosting

We do not share your data with third parties for their own marketing purposes.

5. Security

Sensitive data — TikTok access tokens and affiliate payout details — is encrypted at rest (AES-256-GCM). All traffic between your browser and TikPlan is encrypted in transit (HTTPS). No system is perfectly secure, but we take reasonable technical and organizational measures to protect your data.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we're legally required to retain it (e.g. financial records for tax purposes).

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at nasrulizwan@gmail.com. If you're in the EU/UK, you also have the right to lodge a complaint with your local data protection authority. If you're in Malaysia, this processing is conducted in accordance with the Personal Data Protection Act 2010.

8. Children's privacy

TikPlan is not directed at children under 18. We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this policy from time to time. We'll post the updated version here with a new "last updated" date, and notify you directly for material changes.

10. Contact

Questions about this policy? Email us at nasrulizwan@gmail.com.