Privacy Policy
Last updated: 2026-04-19
This Privacy Policy explains what personal information TikMonitor ("we", "us") collects, how we use it, and your rights over it.
Information we collect
- Account data — email, password hash, display name, and any organization/billing details you provide at signup.
- Usage data — which TikTok accounts you monitor, which features you use, logged-in sessions, and device/browser fingerprints we use to detect suspicious sign-ins.
- Payment data — handled entirely by our payment provider (Stripe, LemonSqueezy, or DodoPayments). We never receive or store your card number.
- Cookies and similar technologies — see "Analytics and advertising" below.
How we use it
- Run the product (monitor TikTok Lives you've chosen, deliver alerts, store history).
- Protect accounts (rate limiting, failed-login detection, new-device alerts).
- Bill and account (through our payment provider).
- Improve the product (anonymous product analytics).
- Reach potential customers (advertising measurement — see below).
We do not sell your personal data.
Analytics and advertising
TikMonitor uses the following third-party services. Each sets cookies or similar identifiers; EU/EEA/UK visitors see a consent banner controlling which categories run:
- PostHog (product analytics) — records product events, session replays with all inputs masked, and error reports. Runs under the "analytics" consent category.
- Google Analytics 4 — measures site traffic, pageviews, and conversions. Runs under the "analytics" consent category.
- Google Ads conversion tracking — attributes signups and subscriptions to Google Ads clicks so we can measure ad spend. Uses Google's Consent Mode v2; when you accept marketing cookies, we enable Enhanced Conversions, which sends a SHA-256-hashed version of your email to Google Ads so it can match conversions to clicks. We never send your unhashed email. Runs under the "marketing" consent category.
- Sentry (error tracking) — records client-side JavaScript errors with the URL, browser version, and a stack trace. Runs as a necessary service.
- Tawk.to (live chat, optional) — runs as a necessary service if you open the chat widget.
You can change your consent at any time by clicking "Cookie preferences" in the footer.
Legal basis for processing (GDPR)
- Contract — we need to run the product you signed up for.
- Legitimate interests — fraud prevention, security, basic analytics.
- Consent — advertising cookies, marketing emails. Withdrawable at any time via the consent banner or by emailing us.
Retention
- Account data: kept while your account exists; deleted within 30 days of account deletion.
- Billing records: 7 years for tax compliance.
- Event history (TikTok Live events, chat logs): retained for the period listed on your plan (Starter: 90 days, Pro: 365 days).
- Analytics data: 14 months in GA4 (then aggregated).
Your rights
Under GDPR and comparable laws you can request: access, correction, deletion, export, restriction of processing, and objection. Email lebdevs@gmail.com and we'll respond within 30 days.
International transfers
Data is hosted on servers in the United States and the European Union via our infrastructure providers. Transfers rely on Standard Contractual Clauses where required.
Contact
Questions: lebdevs@gmail.com.