Privacy Policy

Transparency is our core principle. Understand exactly how we protect your personal data and how we handle public social media information.

Last Updated: July 1, 2026

1. Introduction and Scope

Welcome to TTRepost (referred to collectively as "we," "our," or "us"). We are deeply committed to protecting your privacy and ensuring transparency in how we handle both your personal information and the public data we aggregate. This comprehensive Privacy Policy explains in detail how we collect, use, store, share, and protect information when you visit ttrepost.com and utilize our suite of tools (collectively, the "Service").

By accessing or using our Service, whether as a casual visitor exploring our TikTok Repost Viewer or as a registered enterprise client utilizing our Comment Exporter, you acknowledge that you have read, understood, and agree to be bound by the practices described in this document. If you do not agree with this policy, please do not use our Service.

This Privacy Policy applies solely to information collected by our Service. It does not apply to the data collection practices of any third-party websites or services, including TikTok, to which we may link or from which we may retrieve public data.

2. Information We Collect from Our Users

We believe in data minimization. We only collect the information absolutely necessary to provide, secure, and improve our Service.

2.1 Information You Voluntarily Provide

When you interact with our platform, you may choose to provide certain personal information directly to us:

  • Account Registration Data: If you choose to create an account to access premium features like batch exporting or monitoring, we collect your email address and a password. If you use a third-party authentication provider (such as Google OAuth), we receive your email address and your basic profile name as permitted by your privacy settings with that provider.
  • Billing and Payment Information: When upgrading to a Pro or Agency subscription, you will provide payment details. Please note that TTRepost does not directly store your credit card numbers or banking information. All financial transactions are processed securely by our certified third-party payment processor (Stripe), whose privacy practices are governed by their own policies.
  • Communication Records: When you contact our support team, submit a bug report, or fill out a content removal request, we retain the contents of your messages, your email address, and any attachments you provide to assist in resolving your inquiry.

2.2 Information Collected Automatically

To ensure the security, reliability, and performance of our global infrastructure, we automatically collect certain technical information when you visit our site:

  • Log and Usage Data: We collect standard server logs, which may include the type of browser you use, the pages you visit, the time and date of your visit, and the time spent on those pages.
  • Anonymized Device and Network Information: We collect your IP address; however, to protect your privacy, we immediately apply a one-way cryptographic hash to this address. We cannot reverse this hash to recover your original IP. This hashed identifier is used strictly for rate-limiting, preventing DDoS attacks, and ensuring fair usage of our API resources.
  • Search Queries: When you use tools like the TikTok Story Viewer or Comment Viewer, the usernames or URLs you submit are processed by our servers. We aggregate these queries anonymously to identify broad usage trends and optimize our caching layers, but we do not permanently link these search queries to your identifiable personal account.

3. How We Process Public TikTok Content

It is critical to distinguish between the personal data of our users (described above) and the public data we aggregate. TTRepost acts as a specialized search engine and viewing client for publicly available social media data.

  • Public Nature of Data: We only retrieve and display content that is strictly classified as public on the host platform (TikTok). This includes public profiles, public reposts, public comments, and public videos.
  • No Private Access: We do not possess, nor do we attempt to acquire, the capability to bypass privacy settings. If a creator sets their profile to private or deletes a video, our tools cannot access that data.
  • Ephemeral Processing: When you search for a profile or video, our servers fetch the public data in real-time and display it in your browser. We do not maintain a permanent, centralized database of all TikTok users. Unless you specifically initiate an export task (e.g., generating a CSV file of comments), the data resides only temporarily in our volatile server memory and caching layers.
  • Content Removal Requests: Even though the data is public on TikTok, we respect individual creators' preferences regarding our specific platform. We offer a dedicated Remove Content form where individuals can request that their public profile be blocked from our search index.

4. How We Use Your Personal Information

The personal data we collect from you is utilized for specific, legitimate business purposes:

  • Service Delivery: To create and manage your account, process your subscriptions, and deliver the specific tools you request (such as email notifications when a large export is complete).
  • Security and Integrity: To monitor our network for fraudulent activity, unauthorized API scraping, or violations of our Terms of Service.
  • Communication: To send you essential administrative messages, billing receipts, password reset links, and, if you have opted in, occasional product updates or newsletters.
  • Analytics and Improvement: To analyze how users navigate our interface, allowing us to improve user experience, optimize load times, and develop new features like advanced analytics dashboards.

5. How We Share and Disclose Data

We strictly adhere to a "no sale" policy. TTRepost does not sell, rent, or lease your personal information to third parties for their marketing purposes. We only share information under the following limited circumstances:

  • Service Providers: We employ trusted third-party companies to facilitate our Service. This includes cloud hosting providers (e.g., Cloudflare), database infrastructure, email delivery services (e.g., Resend), and payment processors. These providers have access to your data only to perform specific tasks on our behalf and are contractually obligated to protect it.
  • Legal Compliance and Protection: We may disclose your information if required to do so by law, court order, or governmental request. We also reserve the right to disclose information when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a critical security emergency.
  • Business Transfers: In the event that TTRepost is involved in a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of that transaction, subject to the acquiring entity adhering to privacy standards equivalent to this policy.

6. Data Retention and Deletion Practices

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy.

  • Active Accounts: We retain your account information, such as your email and subscription history, as long as your account remains active.
  • Exported Files: If you use our Comment Exporter, the generated CSV or Excel files are temporarily stored on our secure cloud storage to allow you time to download them. These files are automatically and permanently purged from our servers after 7 days.
  • Account Deletion: You may request the complete deletion of your account and associated personal data at any time by contacting our support team. Upon receiving a verified deletion request, we will erase your data from our active databases within 30 days, although residual copies may remain temporarily in secure, encrypted backups.

7. International Data Transfers

TTRepost operates on a globally distributed edge network. As a result, the information we collect may be transferred to, stored, and processed in data centers located outside of your country of residence, including the United States and the European Union. By using our Service, you consent to the transfer of your information to these facilities. We ensure that any such transfers are conducted in compliance with applicable data protection laws, utilizing standard contractual clauses and robust encryption protocols.

8. Your Privacy Rights (GDPR and CCPA)

Depending on your geographical location, you may be granted specific rights regarding your personal data under frameworks such as the General Data Protection Regulation (GDPR) in Europe, or the California Consumer Privacy Act (CCPA) in the United States. These rights generally include:

  • The Right to Access: You can request a copy of the personal data we hold about you.
  • The Right to Rectification: You can request that we correct any inaccurate or incomplete information.
  • The Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data under certain conditions.
  • The Right to Restrict Processing: You can ask us to pause the processing of your data.
  • The Right to Data Portability: You can request that we transfer your data to another organization.

To exercise any of these rights, please submit a formal request to our privacy team at the contact information provided below. We will respond to all legitimate requests within the legally mandated timeframes.

9. Children’s Privacy

Our Service is designed for and directed at professionals, digital marketers, and adults. We do not knowingly collect personal information from individuals under the age of 13 (or under the age of 16 in certain European jurisdictions). If you are a parent or guardian and you believe that your child has provided us with personal information, please contact us immediately so that we can take steps to remove that information from our servers.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in technology, legal requirements, or our operational practices. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of the document. For significant modifications that substantially alter your rights, we may also provide a more prominent notice, such as an email notification or an alert within your dashboard. Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the terms.

11. Contact Our Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, we encourage you to reach out to our dedicated privacy and compliance team.

We are committed to resolving any privacy concerns swiftly and transparently.