Privacy Policy
This Privacy Policy explains how Void (the team operating Void Creators, "Void Creators", "we", "us") collects, uses, and protects your personal data when you use Void Creators (the "App"), an installable web app provided to creators managed by the Void TikTok LIVE talent agency. The data controller is Void; contact: void_bot@agentmail.to.
1. Data we collect
You can sign in two ways: with TikTok (Login Kit, OAuth 2.0), or with a one-time login link we email to the address your Void manager registered for you. When you sign in with TikTok we request two read-only scopes and, with your consent, receive from TikTok:
user.info.basic— a stable user identifier (open_id and union_id) and your avatar URL.user.info.profile— your TikTok username/handle, display name, and profile link.
We do not request the user.info.stats scope, any posting/content scope, your password, your contacts, your videos, or your direct messages.
We also process, to run the App: your agency performance data (diamonds, valid LIVE days, LIVE hours, and follower growth) that Void already maintains from TikTok's LIVE Backstage tools — this is the source of the growth numbers shown to you, not TikTok's stats API; the AI prompts and generated assets you create in the App and your credit balance; your email address (set by your Void manager, used only to send you one-time login links); and, if you enable notifications, a push subscription token. We also keep limited technical and security data (authentication cookies and error/diagnostic logs).
2. How & why we use your data (legal basis)
We use your data solely to operate the App: authenticate you, match your TikTok username to your existing Void creator profile so you see only your own data, personalize the interface, show your performance and AI coaching, run AI generation, and track your credit balance. We do not sell your data or use it for advertising. Under the GDPR our legal bases are your consent (given when you sign in with TikTok and submit prompts) and our legitimate interests (running a secure, working companion app for our roster).
3. Cookies
We use strictly-necessary cookies only: an httpOnly session token (a signed JWT that keeps you logged in), a short-lived account-linking ticket used the first time you connect, and transient OAuth state / PKCE values used only during the TikTok login exchange. These are required for the App to function. We do not use advertising or cross-site tracking cookies. Our public marketing site uses privacy-friendly, cookieless analytics (self-hosted Plausible) that counts anonymous visits only.
4. Posting to TikTok
The App never posts, shares, or changes content on your TikTok account. It only reads your own public profile to authenticate and personalize.
5. How we share data & sub-processors
We do not sell your personal data. Your Void manager can see your agency performance data, as they already do today. We share data with service providers who process it on our behalf under appropriate safeguards: Supabase (database hosting), Vercel (application hosting and delivery), AI model providers via the Vercel AI Gateway (only the prompts you submit, to generate your AI content), and a self-hosted GlitchTip instance (error monitoring). We may disclose data where required by law or to protect our rights and users' safety.
6. International transfers
Some providers may process data outside the EU/EEA. Where that happens, we rely on appropriate transfer mechanisms (such as the EU Standard Contractual Clauses) to protect your data.
7. Data retention
We keep your account data while you are an active Void creator using the App. If you request deletion, we remove your App account and associated personal data, except where we must retain limited information to comply with legal obligations. Agency records held independently of the App are governed separately. Error logs are kept only for a limited period.
8. Your rights
Subject to applicable law (including the GDPR) you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent at any time. To exercise these rights, contact void_bot@agentmail.to. You also have the right to lodge a complaint with your data-protection supervisory authority.
9. Revoking access
You can revoke the App's access to your TikTok account at any time from your TikTok account settings (Manage app permissions), which stops further data sharing.
10. Contact
Privacy requests: void_bot@agentmail.to.