Privacy Policy

1. Introduction

Crevoria ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

2. Information We Collect

We collect the following categories of information:

• Account information: Email address, name, and password hash when you register
• TikTok profile data: Display name, avatar URL, and username (via TikTok Login Kit with the user.info.basic scope)
• Content metadata: Video titles, descriptions, and engagement metrics that you choose to import
• Usage data: Pages visited, features used, and interaction patterns within the platform
• Payment information: Processed securely by our third-party payment processor (Stripe). We do not store your full credit card number.

3. TikTok Data Usage

When you connect your TikTok account, we access only the user.info.basic scope, which provides your display name, avatar, and username. We use this information to:

• Verify your identity as a TikTok creator
• Display your profile information within the Crevoria dashboard
• Associate your imported video metadata with your account

We do NOT:

• Post to TikTok on your behalf
• Access your TikTok direct messages
• Modify, delete, or interact with your TikTok content
• Share your TikTok data with third parties for advertising purposes

4. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Generate AI-powered content analyses, monetization scores, and product recommendations
• Build and display your personalized storefront
• Process payments and manage subscriptions
• Send service-related communications (account verification, billing, security alerts)
• Detect and prevent fraud or abuse

5. Token Storage and Security

OAuth tokens obtained from TikTok are stored securely on our servers and are never exposed to the client-side browser. Tokens are encrypted at rest and transmitted only over HTTPS. Access tokens are used solely for authorized API calls and are refreshed automatically when they expire.

6. Data Sharing

We do not sell your personal information. We may share information only in the following circumstances:

• Service providers: Third-party vendors who help us operate the Service (hosting, payment processing, analytics)
• Legal requirements: When required by law, regulation, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets
• With your consent: When you explicitly authorize sharing

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes).

8. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/HTTPS), encryption at rest, secure server infrastructure, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict certain processing activities
• Request data portability
• Withdraw consent at any time

To exercise these rights, contact us at support@crevoria.com.

10. Cookies and Tracking

We use essential cookies to maintain your session and authentication state. We may use analytics cookies to understand how users interact with the Service. You can control cookie preferences through your browser settings.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

12. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

14. AI Processing

Crevoria uses artificial intelligence to analyze content metadata and generate insights. AI-generated outputs (monetization scores, product recommendations, revenue estimates) are automated suggestions and should not be considered financial advice. We do not use your data to train AI models that are shared with or sold to third parties.

15. Account Deletion

You may delete your account at any time through your account settings or by contacting us. Upon deletion, we will remove your personal data, revoke any connected TikTok tokens, and delete your storefront. Some anonymized data may be retained for analytics purposes.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

17. TikTok Disclaimer

Crevoria is an independent product and is not affiliated with, endorsed by, or an official partner of TikTok or ByteDance Ltd. TikTok is a trademark of its respective owner. Our use of TikTok Login Kit is governed by TikTok's Developer Terms of Service.

18. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at support@crevoria.com.