Privacy Policy

Last updated: 2026-04-19

This Privacy Policy explains what personal information TikMonitor ("we", "us") collects, how we use it, and your rights over it.

Information we collect

  • Account data — email, password hash, display name, and any organization/billing details you provide at signup.
  • Usage data — which TikTok accounts you monitor, which features you use, logged-in sessions, and device/browser fingerprints we use to detect suspicious sign-ins.
  • Payment data — handled entirely by our payment provider (Stripe, LemonSqueezy, or DodoPayments). We never receive or store your card number.
  • Cookies and similar technologies — see "Analytics and advertising" below.

How we use it

  • Run the product (monitor TikTok Lives you've chosen, deliver alerts, store history).
  • Protect accounts (rate limiting, failed-login detection, new-device alerts).
  • Bill and account (through our payment provider).
  • Improve the product (anonymous product analytics).
  • Reach potential customers (advertising measurement — see below).

We do not sell your personal data.

Analytics and advertising

TikMonitor uses the following third-party services. Each sets cookies or similar identifiers; EU/EEA/UK visitors see a consent banner controlling which categories run:

  • PostHog (product analytics) — records product events, session replays with all inputs masked, and error reports. Runs under the "analytics" consent category.
  • Google Analytics 4 — measures site traffic, pageviews, and conversions. Runs under the "analytics" consent category.
  • Google Ads conversion tracking — attributes signups and subscriptions to Google Ads clicks so we can measure ad spend. Uses Google's Consent Mode v2; when you accept marketing cookies, we enable Enhanced Conversions, which sends a SHA-256-hashed version of your email to Google Ads so it can match conversions to clicks. We never send your unhashed email. Runs under the "marketing" consent category.
  • Sentry (error tracking) — records client-side JavaScript errors with the URL, browser version, and a stack trace. Runs as a necessary service.
  • AI support assistant ("Remi") — when you open the in-app chat, the messages you send are processed by Google's Gemini API to generate replies. We keep a copy of the conversation for up to 180 days so our support team can follow up and see what people are asking about; it is stored with your account details (name, email, plan, country, and the page you were on) when you are signed in. If you write in a language other than English, the same Gemini API translates the conversation into English for our team to read. Conversations reach only our support team, and deleting your account deletes them. Runs as a necessary service when you use the chat.

You can change your consent at any time by clicking "Cookie preferences" in the footer.

Legal basis for processing (GDPR)

  • Contract — we need to run the product you signed up for.
  • Legitimate interests — fraud prevention, security, basic analytics.
  • Consent — advertising cookies, marketing emails. Withdrawable at any time via the consent banner or by emailing us.

Retention

  • Account data: kept while your account exists; deleted within 30 days of account deletion.
  • Billing records: 7 years for tax compliance.
  • Event history (TikTok Live events, chat logs): raw event detail is kept for a short operational window (currently around 5 days) and then archived or deleted; aggregated session statistics and gifter summaries are retained and readable for the period listed on your plan (Starter: 90 days, Pro and Studio: 365 days).
  • Support chats with Remi: 180 days, then deleted. Deleting your account deletes them immediately.
  • Analytics data: 14 months in GA4 (then aggregated).

Your rights

Under GDPR and comparable laws you can request: access, correction, deletion, export, restriction of processing, and objection. Email [email protected] and we'll respond within 30 days.

International transfers

Data is hosted on servers in the United States and the European Union via our infrastructure providers. Transfers rely on Standard Contractual Clauses where required.

Contact

Questions: [email protected].