Privacy Notice

1. Controller and contact

TikLiveRank controls personal information processed for LiveRank's website, customer accounts, and private workspaces. Privacy requests and notices can be sent to [email protected] with “Privacy request” in the subject.

2. Information we collect or process

• Account and identity: name, email, email-verification state, password hash, plan, workspace memberships, roles, invitations, and session records.
• Billing: Apple or Whop transaction, customer, order, membership, product, plan, payment-status, trial, renewal, cancellation, refund, dispute, app-account-token, and provider-event identifiers. Apple and Whop process payment credentials; LiveRank does not receive or store full payment-card numbers.
• Affiliate program: your selected referral code, aggregate link visits and registrations, referred-account relationship, Whop affiliate and plan references, provider status, aggregate commission totals, and program expiration. Whop handles payout identity, tax, and bank information.
• Legal acceptance evidence: the document version and digest, exact clickwrap-presentation digest, acceptance time and context, applicable expiration, account-linked pseudonymous identifier, keyed network and user-agent hashes, and an integrity seal. LiveRank does not store a raw IP address or full user-agent string in this receipt.
• Private workspace: watchlisted creators, alert rules, notes, tags, recruiting stages, roster handles, normalized import rows, team members, and related activity.
• Alert delivery: email preference, Telegram account linkage and username, push-device token when enabled, delivery status, deduplication key, and notification history.
• Usage, security, and support: actions within the product, request and event timestamps, truncated or privacy-minimized network/device signals, error records, rate-limit state, and communications with support.
• How you found LiveRank (optional): if you answer the optional “Where did you first hear about us?” question, we store the source you chose, or that you skipped it, with your account. If you choose to type a creator, account, person or place (up to 100 characters), we store that too, along with the app version and whether the answer came from a production or test build. We use it to understand how people find LiveRank. Answering is never required, and the answer is deleted when your account is deleted.
• Creator and gifter intelligence: publicly observed handles, display names, avatar links, ranks, diamonds, league, region, LIVE status, follower counts, historical observations, gifting activity, and derived estimates or availability signals.

3. Why we use information

We use information to create and secure accounts; verify email addresses; provide rankings, creator profiles, history, estimates, watchlists, rosters, Team, and alerts; enforce plan and seat permissions; process and reconcile subscriptions; administer affiliate attribution and payouts; document agreement acceptance and resolve disputes; detect abuse; maintain data integrity; respond to support and privacy requests; monitor availability; back up and restore the service; and comply with legal obligations.

4. Roster uploads and private workspaces

5. How information is disclosed

We disclose customer account information only as needed for the following recipients and purposes:

• Authorized workspace members receive the private information available within their shared workspace according to role.
• Infrastructure and security providers support application hosting, managed PostgreSQL, DNS, HTTPS, rate controls, monitoring, and encrypted backup storage, including Render, DigitalOcean, Supabase, Cloudflare, and Better Stack.
• Billing and affiliate providers: Apple processes App Store subscriptions and signed subscription events; Whop hosts website checkout and processes website subscriptions, payments, affiliate attribution, onboarding, commission reversals, and payouts.
• Communications providers: Resend, Telegram, Apple push services, and Google Firebase Cloud Messaging process the destination and message data needed for enabled alerts. For Android push, Google processes the app's push-device token and a limited delivery payload containing an opaque event identifier, an in-app destination, an expiry time, an account/session binding identifier, and the alert title and message, which can include public TikTok handles and observed LIVE or gifting activity. Push payloads do not contain your email address, password, or private notes.
• Legal and safety recipients may receive information when reasonably necessary to comply with law, protect rights and safety, investigate abuse, resolve a contract or payment dispute, or respond to valid process.

Customer account information

We do not sell customer account information. This includes information collected to register, administer, secure, or support your TikLiveRank account, such as your account email address, login credentials, billing and subscription records, private workspace content, and nonpublic service-usage and support records.

We may disclose this information to authorized workspace members, service providers, and other recipients for the purposes described in this notice, including operating the service, processing payments, preventing abuse, and meeting legal obligations.

Public TikTok analytics

Separately, TikLiveRank collects, organizes, and analyzes publicly observable TikTok creator and gifter information. This may include public handles, display names, profile images, rankings, LIVE activity, observed gifts, gift timestamps, relationships between gifters and creators, historical observations, and derived estimates or activity patterns.

We make these analytics available through both free features and paid services, including subscriptions and agency or team features. Availability and detail vary by feature and access level. Individuals may appear in these analytics whether or not they have created a TikLiveRank account.

Our commitment not to sell customer account information concerns the account information described above. It does not mean that all public TikTok analytics are provided without charge. Publicly observable information may still be subject to applicable privacy laws, and we review requests concerning that information under those laws.

We do not use personal data for targeted advertising.

6. Retention

Active account and workspace information is kept while needed to provide the service. Expired sessions, one-time tokens, rate-limit records, and operational events have bounded lifetimes appropriate to their purpose. Affiliate and legal-acceptance evidence may be retained after account deletion for the applicable limitations, tax, payment, fraud, and dispute periods, then deleted or de-identified when no longer reasonably needed. Acceptance receipts are append-only in the operational database so their recorded contents are not silently rewritten; legally required privacy corrections are handled through a linked supplemental record or other lawful process. When an account is deleted, active account access and workspace records are removed or de-identified subject to ownership, billing, fraud, security, and legal requirements. Encrypted backup copies follow a rolling retention schedule and age out rather than being edited in place. Public creator history and aggregate operational evidence may be retained separately from a deleted customer workspace.

7. Security

LiveRank uses HTTPS, salted password hashing, hashed opaque session tokens, Secure and HttpOnly cookies, same-origin and CSRF checks, server-side plan and workspace authorization, request limits, restricted uploads, least-privilege database roles, signed ingestion, origin restrictions, monitored health checks, and encrypted off-device backups. No internet service can guarantee absolute security.

8. Your choices and privacy rights

The Account area on the LiveRank website and in the iOS app provides authenticated account controls, including account deletion; the website also provides a data export. You may request access, correction, deletion, or a portable copy by emailing [email protected]. We may verify your identity and authority before acting. We may deny or limit a request where law permits, including to protect another person, preserve security, or retain legally required records.

Depending on where you live and the applicable law, you may have additional rights to opt out of sale, targeted advertising, or certain profiling, and to appeal a denied request.

Requests may concern your TikLiveRank customer account information, public TikTok analytics associated with you, or both. Please identify the information or TikTok account involved so we can assess the request. We may verify your identity and authority before acting.

To appeal a privacy-response decision, email the contact address in this notice with “Privacy appeal” in the subject and explain the decision being appealed.

9. Cookies and local storage

LiveRank uses essential cookies for signed-in sessions, view selection, and the controlled owner-preview boundary. The application also uses browser storage for interface preferences and limited client state. First-party traffic reporting uses a 30-minute source cookie containing referral/campaign labels and a page category, without a visitor identifier. We record page categories, referral domains, campaign labels, coarse device and browser/operating-system families, approximate IP-derived country, region, city and time zone, network provider, connection protocol and coarse timing, and account-linked activity or signup attribution when signed in or registering. When you're signed in, we keep a record of how you use TikLiveRank, such as the creator profiles you view or save, to improve the app's features. We do not collect full referral URLs, URL query values other than campaign labels, search text, or precise location for this reporting. A separate 30-minute first-party signup cookie contains a random journey identifier and bounded source/browser labels. It connects the displayed signup, chosen sign-in method, request outcomes, account verification and checkout handoff. When registration identifies an account, we can associate its verification and verified payment outcomes with that journey for up to 30 days. A detected in-app browser is a best-effort label, not a device fingerprint. Copy-link actions do not prove that another browser opened. We do not record form contents, passwords, provider tokens or payment-card details for this reporting. Global Privacy Control and Do Not Track signals disable this browser source and signup-journey collection. Cloudflare supplies approximate network location, which may identify a VPN or network location rather than your actual location. These visit records do not retain raw IP addresses, GPS coordinates, postal addresses, or device fingerprints. We also use Cloudflare Web Analytics to measure page loads, visits and page performance; its beacon is loaded only when these browser privacy signals permit it. Cloudflare does not log URL query strings for Web Analytics. Its aggregate network traffic reports also include automated requests and infrastructure traffic, which we keep separate from browser visits. Operational diagnostics record route templates, page categories, response status, timing, and bounded error categories, linked to the signed-in account where available. They do not collect request bodies, raw URLs, error messages, or stack traces. Browser diagnostic collection respects Global Privacy Control and Do Not Track. We do not currently use advertising cookies. Any later optional analytics or advertising technology requires an updated notice and consent where applicable.

10. International processing and children

Providers may process information in the United States and other locations where they operate, subject to their contractual and legal safeguards. LiveRank is a business service intended for adults and is not directed to children. Public creator observations may include platform users, but LiveRank does not knowingly invite children to create customer accounts.

11. Changes and contact

We will date material changes and provide notice through the service or verified account email when appropriate. Contact [email protected] for privacy questions, requests, or appeals.