Privacy notice

Draft for legal review Last updated 24 September 2026. The controller's legal name, address and contact will be added before launch.

What we hold

• Account data: your name, work email, and a hashed password or your Google account identifier; your workspace role.
• Workspace data you add: hosts (names, TikTok handles, availability, rate cards, optional contact details), studios, brands, bookings, briefs, campaigns.
• TikTok Shop data for the shops you connect: the LIVE analysis figures Seller Centre shows your shop's users (per-LIVE GMV, duration, viewers, customers, conversion), and the shop's name and region. We read them by signing in as the user you add for us; we don't collect buyers' personal data. Login codes TikTok sends to your workspace's login address are read only to sign in, then ignored.
• Security logs: sign-ins, actions and API use with time and IP address.

Why

To provide the service you signed up for (contract), to keep it secure (legitimate interest) and to meet legal duties. We don't sell data or use it for advertising.

Where and how long

Data is stored encrypted on our UK-hosted server. TikTok access tokens and credentials are encrypted at rest with AES-256-GCM. Workspace data is kept while the workspace exists; security logs for 12 months.

Who we share with

Nobody outside WhizzStreamer except: TikTok (we sign in to Seller Centre as the user you add, on your instruction), Google (if you sign in with Google), your mail provider for the login mailbox, and Anthropic (when the assistant is switched on, the workspace data needed to answer a question is sent to Anthropic's API to write the answer; Anthropic acts as our processor). Nothing is shared between workspaces.

Your rights

You can ask for a copy of your data, to correct it, or to delete it. Workspace owners can export billing data and remove members themselves.

Cookies

We use one essential sign-in cookie and a short-lived cookie during Google sign-in. No analytics or advertising cookies.