Privacy Policy

Introduction

This Privacy Policy explains how TokToolset ("TokToolset", "we", or "our") collects, uses, stores, and shares information when you visit toktoolset.com or use our TikTok viewing, research, download, export, account, credit, payment, and support features (collectively, the "Service").

TokToolset is an independent service and is not endorsed by, sponsored by, operated by, or affiliated with TikTok or ByteDance. Use of the Service is also subject to our Terms of Service.

For privacy questions or requests, contact support@toktoolset.com.

Information We Process

The information we process depends on the features you use.

1. Account and Authentication Data

When you create or use a TokToolset account, we may process:

• your name, email address, avatar, language, and basic profile information;
• email verification status, registration date, and registration or referral source, when available;
• password credentials stored in hashed form, verification or reset tokens, and session identifiers;
• account identifiers and authentication tokens returned by providers such as Google or GitHub when you choose one of those sign-in methods; and
• security and request information such as IP address, browser, device, user agent, and timestamps.

TokToolset does not ask for your TikTok password, TikTok session cookie, or TikTok verification code. You do not connect a personal TikTok account to run a lookup. New lookup requests require a TokToolset sign-in so that credits, recent results, security controls, and background tasks can be associated with your TokToolset account.

2. TikTok Lookup Inputs and Public Results

Depending on the tool, we may process:

• a TikTok username, @handle, public profile URL, post URL, supported share link, post ID, comment ID, or reply ID;
• the tool and result category you select, such as stories, posts, reposts, followers, following, account details, profile pictures, photos, videos, comments, or replies;
• pagination values, export selections, requested row limits, file formats, and similar request settings;
• public profile and content information returned by supported providers, including usernames, display names, biographies, avatars, verification status, public account statistics, stories, posts, reposts, media, captions, comments, replies, follower or following profiles, and engagement information; and
• request timestamps, result status, cursors, provider identifiers, errors, and credits deducted, reserved, settled, or returned.

Supported share links may be resolved through TikTok domains before a public post is processed.

The Service processes information made publicly available by TikTok or returned as public profile information by a supported provider. It does not bypass private-account settings or recover private, deleted, expired, hidden, moderated, restricted, or otherwise unavailable content. Results may be incomplete, delayed, cached, unavailable, or different from what currently appears on TikTok.

Public TikTok information may still be personal data. You are responsible for using results lawfully and respecting creators, commenters, and other individuals.

3. Downloads, Exports, and Background Tasks

TokToolset may provide individual media downloads, browser-created ZIP or CSV files, background CSV or XLSX exports, and other generated files expressly offered by the Service.

For a background task, we may process and store the source URL or identifier, selected settings, task status, progress, provider cost, credit status, error information, file metadata, and the resulting file. Completed background files use private task storage. After an authenticated ownership check, the download endpoint issues a short-lived signed storage URL. Anyone who receives that signed URL may be able to use it while it remains valid, so do not share it. Completed files are scheduled to expire after 7 days. Operational task records and related metadata may be retained longer for credit settlement, security, support, failure investigation, or dispute handling.

A browser-created download is saved to the location selected by your browser or device. TokToolset does not control a file after it has been downloaded.

Downloading or exporting public content does not transfer ownership, copyright, privacy, publicity, or other rights. Rights in TikTok profiles, media, music, comments, and related content remain with their respective owners.

4. Credits, Payments, and Subscriptions

When you receive or use credits, or purchase a plan or credit pack, we may process:

• your credit balance, grants, expiration dates, reservations, consumption, settlement, returns, and source;
• the selected product, price, currency, billing period, order status, and transaction date;
• order, transaction, subscription, invoice, and payment-provider identifiers;
• the email, transaction response, and limited billing information returned by the payment provider; and
• information you provide about billing questions, cancellations, refunds, disputes, or chargebacks.

Payment credentials are submitted through the payment provider shown at checkout. TokToolset receives and stores the business and technical records needed to create and manage the purchase, including relevant provider responses.

5. Support Requests, Profile Images, and Attachments

If you contact support, open or reply to a ticket, update a profile image, or use another enabled upload feature, we may process your name, email address, subject, messages, replies, and files you choose to provide.

Some profile images, support attachments, or other user uploads may use a public storage URL. Anyone who obtains the exact URL may be able to access the file. Do not upload confidential information, sensitive personal data, or content you are not authorized to share. Background-task files use separate private storage as described above.

6. Usage, Device, Security, and Analytics Data

When you visit or use the Service, we may process:

• IP address, browser, device, operating system, visited URL, referring page, and timestamps;
• pages visited, feature usage, clicks, and session activity;
• request-limit, fraud-prevention, and abuse-prevention signals; and
• errors, response times, logs, and diagnostic information.

How We Use Information

We use information described in this policy to:

• create, authenticate, secure, and manage TokToolset accounts;
• validate inputs and run requested public TikTok lookups;
• return results and support pagination, downloads, and exports;
• create, process, store, deliver, and expire background-task files;
• calculate, reserve, deduct, settle, grant, expire, and return credits;
• manage orders, payments, subscriptions, cancellations, refunds, and billing support;
• provide support and respond to requests;
• enforce limits and prevent fraud, misuse, duplicate-account abuse, and security threats;
• diagnose errors and improve reliability, accessibility, performance, and user experience;
• measure Service usage through enabled analytics tools;
• send authentication, security, operational, support, and billing messages; and
• maintain records needed for Service operation, security, accounting, dispute handling, and valid legal requests.

What “Anonymous” Means

TokToolset may describe a viewer as anonymous because a lookup does not require or use your personal TikTok password or TikTok session and is not performed through your personal TikTok profile. You do not need to follow the target account or connect your TikTok identity.

“Anonymous” does not mean that TokToolset processes no information about you. Your TokToolset account, IP address, device information, request details, credit activity, and security logs may still be processed as described in this policy. Providers that operate the Service may also process request information under their own policies.

TokToolset does not provide network anonymity, unlock private information, override platform privacy settings, or make an absolute promise about how TikTok or an external provider records, classifies, or reports activity in its own systems.

Ad-Free Service and Analytics

TokToolset is ad-free, meaning the TokToolset interface does not display third-party advertising. Public TikTok content may still contain creator branding, sponsorships, or platform-provided material.

Ad-free does not mean that the Service operates without necessary storage, security, analytics, or support technologies. TokToolset uses Vercel Analytics and may use configured services such as Google Analytics or Plausible to understand traffic and feature usage. Customer-support tools such as Crisp or Tawk.to may also be enabled. Those providers may process usage or device information according to their settings and privacy notices.

We do not sell personal information.

Cookies, Browser Storage, and Result Caches

TokToolset and enabled service providers may use cookies, local storage, session storage, tags, or similar technologies to:

• maintain and protect your TokToolset session;
• remember language, theme, and interface preferences;
• support authentication and enabled third-party sign-in;
• enforce request limits and prevent abuse;
• measure traffic and feature usage;
• enable configured customer-support tools; and
• avoid unnecessary duplicate public-data requests.

Supported public lookup results may be eligible for reuse from the server cache for 10 minutes. Successful, account-scoped lookup results may also be stored in the current browser tab's sessionStorage for 30 minutes. These are cache-validity periods and do not mean that cached data is physically deleted immediately when validity ends or that related request, credit, task, security, or billing records are deleted on the same schedule.

Closing a tab, clearing site data, private-browsing behavior, or browser controls may remove stored results sooner. Blocking cookies or browser storage may prevent authentication, recent-result restoration, or other features from working correctly.

Service Providers and Other Recipients

We share information only when reasonably necessary to operate, secure, and support the Service. Depending on the features and configuration in use, recipients may include:

• TikHub, for supported public TikTok profiles, posts, reposts, followers, following, post details, media information, comments, and replies;
• Apify and the configured TikTok story actor, for supported public story requests;
• TikTok domains and media-delivery infrastructure when resolving supported links or retrieving available public media;
• storage services such as Cloudflare R2 or other S3-compatible providers for uploads and generated files;
• authentication providers such as Google or GitHub when you choose those sign-in methods;
• the payment provider shown during checkout for purchases, subscriptions, taxes, refunds, disputes, and payment records;
• email providers such as Resend or Cloudflare Email when configured;
• analytics providers such as Vercel Analytics, Google Analytics, or Plausible;
• customer-support providers such as Crisp or Tawk.to when enabled; and
• hosting, database, logging, security, and content-delivery providers.

TikTok, TikHub, Apify, and other providers operate under their own terms and privacy practices. TokToolset does not control their independent systems, retention periods, availability, or policy decisions. Providers may process information in locations different from your own.

We may also disclose information when reasonably necessary to investigate fraud or abuse, protect rights and security, comply with a valid legal request, complete a business transaction with appropriate safeguards, or follow your instructions.

Retention

Retention varies by record type and by operational, security, billing, support, and legal needs. Current practices include:

• Supported public lookup results are eligible for reuse from the server cache for 10 minutes. Expired entries may remain until they are read, evicted, or the server process ends.
• Successful lookup results stored in the current browser tab are valid for 30 minutes.
• Completed background-task files are scheduled to expire after 7 days.
• Account and session records may be retained while the account is active and for a reasonable period afterward for security, support, fraud prevention, and dispute handling.
• Orders, subscriptions, invoices, payment events, and credit transactions may be retained for accounting, billing, contractual, anti-fraud, and claims-handling purposes.
• Lookup inputs, result status, provider metadata, task records, errors, and technical logs may be retained as reasonably needed to operate and protect the Service, resolve failures, and provide support.
• Tickets, messages, and bound attachments may be retained until a request is resolved and for a reasonable support-history period.
• Analytics information is retained according to the applicable provider settings and our configuration.

When information is no longer needed, we may delete, anonymize, or aggregate it. Some records may be retained when needed for security, payment reconciliation, fraud prevention, dispute handling, or a valid legal obligation. Independent providers may apply their own retention periods.

Security

We use reasonable technical and organizational safeguards intended to protect information against unauthorized access, loss, alteration, or improper disclosure. Background-task files are stored separately from public uploads. An authenticated download endpoint checks account ownership before issuing a short-lived signed storage URL.

No internet-connected service can guarantee complete security. Protect your TokToolset credentials, avoid sharing download or attachment links, and contact us if you suspect unauthorized account access.

Your Rights and Choices

Where provided by applicable law, you may request access to, correction of, deletion of, or a copy of personal data associated with you, or ask us to restrict or stop certain processing.

You can update some profile information through your account and clear cookies or site storage through your browser controls. Clearing browser data may sign you out or remove recent cached results.

To make a privacy request, email support@toktoolset.com from the address associated with your account and describe the request. We may ask for additional information to verify your identity and protect other people. Some records may need to be retained for security, billing, fraud prevention, dispute handling, or other valid obligations.

If your request concerns public TikTok information about you, include the relevant username, post, comment, or result so we can identify the material. TokToolset may not control or be able to remove the original information from TikTok or an independent provider.

Changes to This Policy

We may update this Privacy Policy when the Service, providers, or data practices change. We will publish the revised version on this page and update the date shown above. Additional notice may be provided when appropriate.

Contact

For questions, privacy requests, or concerns about this Privacy Policy, email support@toktoolset.com.