Tik Tok Privacy

Last updated: January 2019

If you are an EU resident, instead of the below, this Privacy Policy shall apply. If your usual residence is in Germany, this Privacy Policy shall apply. If your usual residence is in Russia, this Privacy Policy shall apply.

Welcome to TikTok (the “Platform”). The Platform is provided and controlled by Musical.ly, Inc or TikTok Pte. Ltd. (“Tiktok”, “we” or “us”). We are committed to protecting and respecting your privacy.

By accessing or using our website, services, applications, products and content (that include but are not limited to the Platform) (collectively, the “Services”), you acknowledge that you have read this policy and that you understand your rights in relation to your information and how we will collect, use and process it. If you do not agree with this policy in general or any part of it, you should not use our Services. Capitalized terms that are not defined in this policy have the meaning given to them in the Terms of Service.

If you have any questions about how we use your information please contact privacy@tiktok.com.

SUMMARY
What information do we collect about you?
We collect information when you create an account, and use the Platform, such as your contact details, content you create, your location, and credit card details. We also collect information you share with us from third party social network providers, and technical and behavioural information about your use of the Platform. We also collect information contained in the messages you send through our Platform and your contacts if you allow us access to your phone book on your mobile device. More information.

How will we use the information about you?
We use your information to fulfil and enforce our service contract with you, to improve and administer the Platform and allow you to use its functionalities. We also use your information to, among other things, show you suggestions, promote the Platform, and serve you targeted advertising.More information.

Who do we share your information with?
We share your data with our third party service providers we rely on to help you provide you with the Platform. These providers include cloud storage providers, and other IT service providers. We also share your information with our business partners, advertisers, analytics and search engine providers. We may also share your information with law enforcement agencies, public authorities or government bodies as required by law. More information.

Your Rights
You may have rights in relation to your information. More information.

How long do we keep hold of your information?
We retain your information for as long as it is necessary to fulfil (1) our contractual obligations and rights in relation to the information involved, (2) our legal obligation(s) under applicable law(s) and regulations to retain data for a certain period of time, taking into account statute of limitations under applicable law(s); (3) our legitimate business purposes;(4) and to conduct a defence in relation to disputes or potential disputes. More information.

How will we notify you of any changes?
We will generally notify all users of any material changes to this policy, through a notice on our Platform. However, you should look at this policy regularly to check for any changes. We will also update the “Last Updated” date at the top of this policy, which reflects the effective date of such policy. Your continued access to or use of the Services after the date of the updated policy constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you must stop accessing or using the Services.

The types of information we collect

We may collect and use the following information about you:

Information you give us. You give us information about you when you register for and/or use the Platform, including your name, age, gender, address, email address, social media login details, telephone number and financial and credit card information and your photograph as well as your language selection. In addition, this category will include your customer profile, the comments you make on our Platform (including any Virtual Items you contribute to any user-generated content), account and billing details, including but not limited to, your Apple, Google or Windows account, PayPal or other third-party payment channel account where required for the purpose of paying or withdrawing cash. It also includes user-generated content, photographs and video content that you choose to broadcast on our Platform. You are also able to register using your user credentials to certain social media sites, such as Twitter, Facebook, Instagram or Google.

Information you choose to share from your social networks.If you choose to link your social network or public forum account (e.g. Facebook, Twitter, Instagram, Google or WeChat) to the Platform, you will provide us or allow your social network to provide us with information from your social network or public forum accounts, including your contact list. This data will include information relating to your use of the Platform on such public forums and/or social networks. For further information as to how and for what purpose the social network provider processes your data, please see the relevant privacy policies of these social network providers.

Technical Information we collect about you. We automatically collect certain information from you when you use the Platform, including your IP address, location-related data (as described below) or other unique device identifiers, your browsing history (including content you have viewed in the Platform), Cookies (as defined below), your mobile carrier, time zone setting, mobile or device information including the model of your device, your screen resolution, operating system and platform and information regarding your use of the Platform.

Behavioural information we collect about you: We also collect information regarding your use of the Services, e.g. your comments on our Platform or any other user-generated content and video content that you generate through and broadcast on our Platform. In addition, we link your contact or subscriber information with your activity on our Platform across all your devices using your email or social media log-in details. We collect engagement scores (“likes”, comments, repeated views) and relate users based on your behaviour. Finally, we collect opt-ins and communication preferences.

Location data.When you use the Platform on a mobile device, we may collect information about your location. With your permission, we may also collect Global Positioning System (GPS) data and mobile device location information.

Information from third parties. We will receive information about you from third parties if you use any of the other websites we operate or other services we provide. We will also receive information from third parties (such as advertising networks and analytics providers) and from other sources, including business directories and other commercially or publicly available sources.

Your phone and Facebook contacts. You can choose whether to find other users of the Platform either through (i) your phone contacts or (ii) Facebook contacts. If you chose to find other users through your phone contacts, we will access and collect your phone contacts, including the names, phone numbers, addresses and any other information that you have stored on your phone about your contacts in order to determine if they are using the Platform by matching them with existing users of the Platform. If you want to find other users through your Facebook contacts, we will collect your public Facebook information as well as names and profiles of your Facebook contacts.

Messages.We collect and process (which includes scanning and analysing) information you provide, including any personal information, in the context of composing, sending, or receiving messages (that means the content as well as information about when the message has been sent, received and/or read and the participants of the communication) through our Service's messaging functionality. Please be aware that messages sent to other users of our Service will be accessible by those other users and that we are not responsible for the manner in which those users use or disclose messages.

Metadata. When you upload a video to the Platform (“User Content”), you automatically upload certain metadata that is connected to the User Content. In essence, metadata describes other data and provides information about your User Content that will not always be evident to the viewer. In connection with your video the metadata can describe how, when and by whom the piece of User Content was collected and how that content is formatted. It further includes information such as your account name that enables other users to trace back the video to your user account. Metadata will further consist of additional data that you chose to provide with the video, e.g. any hashtags used to mark keywords to the video or comments.

Buy coins.You might choose to buy coin packs via in-app purchases. You can use these coins to buy virtual gifts and send them to support other users during live broadcasts or in their channels. When you chose to buy coins you will be transferred to your app store on your mobile device to complete the purchase. In connection with this purchase, we will collect personal information from you. Furthermore, if you purchase any gift points in accordance with the Gift Point Policy using your Apple iTunes or Google Play account, we process the confirmation of the payment and credit your account.

Cookies

We use cookies and other similar technologies (e.g. web beacons, flash cookies, etc.) (“Cookies”) to enhance your experience using the Platform, improve our services, and provide you with targeted advertising . Cookies are small files which, when placed on your device, enable us to provide certain features and functionality.

We use the following Cookies:

Strictly necessary Cookies.These are Cookies that are required for the operation of the Platform. They include, for example, Cookies that enable you to log into secure areas of the Platform.

Functionality Cookies. These Cookies are used to recognise you when you return to the Platform. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region). These Cookies support the log-in function in the Platform for a 90 day period

Social media Cookies These Cookies allow users to create an account on the Platform by using their existing log-in for other services (for example, for WeChat, Baidu, Facebook, and Google).

Targeting Cookies.These Cookies record your visit to the Platform, the pages you have visited and the links you have followed, including your interactions with other websites or applications. We will use this information to make the Platform and the advertising displayed on it more relevant to your interests. We will also share this information with third parties for this purpose. Our service providers may also use the information about your interactions with our Platform to serve you targeted advertisements on other websites and applications.

Analytics Cookies. Analytics Cookies are statistical audience measuring systems that we use for our Services to help us measure which web pages you click on and how you use the Platform (see below for more details).

If for any reason you do not wish to take advantage of Cookies, you can disable Cookies by changing the settings on your browser. However, if you do so, this will affect your enjoyment of the Platform and we will no longer be able to offer to you personalised content. Unless you opt out of Cookies, we will assume you consent to the use of Cookies.

“Do-not-track” signals are preferences that users can set on their web browser to limit how their activity is tracked across third-party websites or online services. The Platform does not respond to "do-not-track" signals in your web browser.

Analytics information
On our Platform, we use third-party analytics tools to help us measure traffic and usage trends for the Services. Traffic refers to the different data flows surrounding activities of the users on the Services. These tools, for example, collect information sent by your device or our Services, including the pages you visit, add-ons, and other information that assists us in improving the Service. The information will be used to report and evaluate your activities and patterns as a user of the Platform to provide services in accordance with these activities.

Our third party analytics tool is Google Analytics provided by Google, Inc (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Google Analytics uses Cookies, small text files containing a string of alphanumeric characters and which are stored on your computer. Google will use this information including your truncated IP address to assemble statistics on the use of our Service or to provide other related services as described above. For further information on how Google Analytics collects and processes information about you and information on how to opt out from Google's collection of information from you, please click here. You can also find further information in the Google Analytics Terms of Service & Privacy.

We further use "Facebook Pixel" of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). This tool is used for advertising purposes in order to reveal if you have seen our advertisement on Facebook. If you do not want Facebook to collect the described information about you, you can opt-out of Facebook's use of cookies and Facebook Pixels here.

How we use your information

We will use the information we collect about you in the following ways:

to administer the Platform (i.e. to provide our Services to you) and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes (i.e. to guarantee the Platform’s stability and security) and to solicit your feedback;

to allow you to participate in interactive features of the Platform, when you choose to do so;

to personalise the content you receive and provide you with tailored content that will be of interest to you;

to improve and develop our Platform and conduct product development;

to measure and understand the effectiveness of the advertising we serve to you and others;

to provide you with services based on the country settings you have chosen, such as advertising and other content that is related to the country settings;

to make suggestions and recommendations to you and other users of the Platform about goods or services that will interest you or them;

to allow other users to identify you via the "Find other friends" function as a user of the Service, to allow you to find other users and to connect with them on the Platform, and to support the socializing function of the Services;

to provide you with your profile information to send to anyone you choose and to enable you to participate on the Platform and interact with other users;

to make your information available to other users in accordance with the privacy settings you chose for the respective information;

to show you content that is similar to content you liked or interacted with (by commenting and/or watching the content), content from your region as well as content from users you follow;

to show you advertisements that are relevant to you;

to promote the Services and use information that you give to us, such as User Content and video content that you can choose to broadcast on our Platform, as part of our advertising and marketing campaigns to promote the Platform;

to enable our messenger service to function (although this information is only processed if you choose to use this function) and you can choose to delete any information in this regard on your discretion via the clear cache function within the Platform’s settings; and

to help us detect abuse, fraud, and illegal activity on the Platform;

to ensure that you are old enough to use our Services (as required by law).

to notify you about changes to our Services;

to communicate with you.

to provide you with user support;

to enforce our terms, conditions and policies;

to receive payments from you and/or make payments to you in accordance with the Diamond and Flame provisions set out in theSupplemental Terms – Virtual Items Policy under the Terms of Service or under a separate Premium Content Creator Agreement, if applicable.

How we share your information

We will share your information with the following selected third parties:

our business partners so that we can make you special offers via the Platform;

advertisers and advertising networks that require the data to select and serve adverts to you and others.;

cloud storage providers to store the information you provide and for disaster recovery services, as well as for the performance of any contract we enter into with you;

Analytics and search engine providers that assist us in the optimisation and improvement of the Platform; and

IT service providers;

Our data center and the servers of our host providers.

We will also share your information with any member or affiliate of our group, only for the purposes set out above, to assist in the improvement and optimisation of the Platform, in order to prevent illegal uses, increase user numbers, development, engineering and analysis of information or for our internal business purposes (How we use your information).

We will share your information with law enforcement agencies, public authorities or other organizations if legally required to do so, or if such use is reasonably necessary to:

comply with legal obligation, process or request;

enforce our Terms of Service and other agreements, policies, and standards, including investigation of any potential violation thereof;

detect, prevent or otherwise address security, fraud or technical issues; or

protect the rights, property or safety of us, our users, a third party or the public as required or permitted by law (including exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction).

We will also disclose your information to third parties:

in the event that we sell or buy any business or assets, in which case we will disclose your data to the prospective seller or buyer of such business or assets; or

if we sell, buy, merge, are acquired by, or partner with other companies or businesses, or sell some or all of our assets. In such transactions, user information will be among the transferred assets.

Your Rights

If you have registered for an account, you may access and update certain personal information that you have provided to us by logging into your online account and using the features and functionalities available there.

You can manage third party advertising preferences for some of the third parties we work with to serve advertising across the Internet by clicking here and by utilizing the choices available at http://www.networkadvertising.org/managing/opt_out.asp and www.aboutads.info/choices.

You can opt out of marketing or advertising emails by utilizing the “unsubscribe” link or mechanism noted in marketing or advertising emails you receive from us.

You can switch off location information functionality on your mobile device if you do not wish to share your GPS or mobile device location information with us.

California Residents
California residents who provide personal information in obtaining products or services for personal, family, or household use are entitled to request and obtain from us once a calendar year information about the customer information we shared, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of customer information and the names and addresses of those businesses with which we shared customer information for the immediately prior calendar year. To request a notice, please submit your request to privacy@tiktok.com.

The security of your information

We take steps to ensure that your information is treated securely and in accordance with this policy. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your information, for example, by encryption, we cannot guarantee the security of your information transmitted through the Platform; any transmission is at your own risk.

We have appropriate technical and organizational measures to ensure a level of security appropriate to the risk of varying likelihood and severity for the rights and freedoms of you and other users. We maintain these technical and organizational measures and will amend them from time to time to improve the overall security of our systems.

We will, from time to time, include links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any information to these websites.

Note that If you upload a video to the Platform for the first time, you will be notified that you are using the Platform on a public account, meaning that if you post a video it can be viewed by every user of the Platform regardless your connection to the user. You can limit the audience having access to the information included in the information that you post to the Platform in your privacy settings as specified in the information window. Changes to the privacy settings on the Platform will immediately apply and also affect Information that you have posted in the past. We will delete your information from your use of the Platform once you decided to delete the respective UGV or broadcast content or other information you provided in your profile.
How long we keep your information

We use the following criteria to determine the period for which we will keep your information:

our contractual obligations and rights in relation to the information involved;

legal obligation(s) under applicable law(s) and regulations to retain data for a certain period of time;

statute of limitations under applicable law(s);

our legitimate business purposes; and

disputes or potential disputes.

After you have terminated your use of our Services, we can store your information in an aggregated and anonymised format. Notwithstanding the foregoing, we can also retain any personal information as reasonably necessary to comply with our legal obligations, allow us to resolve and litigate disputes, and to enforce our agreements.

Information relating to children

The Platform is not directed at children under the age of 13. If we become aware that personal information has been collected from a person under the age of 13 we will delete this information and terminate the person’s account. If you believe that we have collected information from a child under the age of 13, please contact us at privacy@tiktok.com.

Changes

We will generally notify all users of any material changes to this policy, through a notice on our Platform. However, you should look at this policy regularly to check for any changes. We will also update the “Last Updated” date at the top of this policy, which reflects the effective date of such policy. Your continued access to or use of the Services after the date of the updated policy constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you must stop accessing or using the Services.

Contact

Questions, comments and requests regarding this policy should be addressed to:

TikTok Pte. Ltd.

Address: 10 Anson Road #10-08 International Plaza Singapore (079903)

Email Address: privacy@tiktok.com

Attention:Privacy Team

Supplemental Terms – Jurisdiction-Specific
In the event of a conflict between the provisions of the Supplemental Terms – Jurisdiction-Specific that are relevant to your jurisdiction from which you access or use the Services, and the rest of policy, the relevant jurisdictions’ Supplemental Terms – Jurisdiction-Specific will supersede and control.

India.If you are using our Services in India, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall prevail.

The security of your personal data. The personal data shared by you for the purposes of the Services would be safeguarded in accordance with the policies and systems adopted by us.

Data retention. We will not retain sensitive personal data or information for longer than is required for the purposes for which such information may be lawfully used or is otherwise required under any law for the time being in force.

Information relating to children. The Platform is not directed at persons under the age of 18. Users under the age of 18 are not allowed to use the Platform or register an account on the Platform. If we become aware that personal data has been collected from a person under the age of 18, we will delete this information and terminate the person’s account. If you believe that we may have personal data about or collected from a person under the age of 18, please contact us at privacy@tiktok.com.

Data rights.You have the right to access and review personal data we hold about you, to rectify any personal data held about you that is inaccurate, to request the deletion of personal data held about you, and the right to request the suspension of the processing of your personal data. You can exercise your rights by contacting us at privacy@tiktok.com.

Indonesia.If you are using our Services in Indonesia, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this Privacy Policy, the following terms shall prevail.

Parental and Guardian Consent. If you are under the age of 21, you declare that you had the consent of your parent or legal guardian to use the Services or to register an account on the Services.

Data Rights. You have the right to access personal data in our Platform from time to time.

Notification. In the event of Bytedance fails to maintain the confidentiality of your personal data in our Platform, Bytedance will notify you immediately through the contact information provided by you.

Language. This policy is written in the English language and Indonesian language. In the event of any inconsistency or different interpretation between the English text and Indonesian text, the relevant Indonesian text shall be deemed to be automatically amended to conform with and to make the relevant Indonesian text consistent with the relevant English text. Each party acknowledges that it has read this policy and understands its content and that this policy has been entered into freely and without duress. The official text of this policy shall be in English. The parties agree that to comply with Law No. 24 of 2009 of the Republic of Indonesia (“Law No.24/2009”) on Flag, Language, State Emblem and National Anthem applies to this policy (as an agreement to which an Indonesian entity is a party), this policy is written in both English and Indonesian language. The parties agree that in the event of any dispute concerning the construction or interpretation of this policy, reference shall be made only to the version as written in English and not to the Indonesian language version or any translation into any other language. You acknowledge that you fully understand the language and the content of this policy and you agree that you will not use the provisions under Law No.24/2009 to invalidate this policy.

Change to the terms. The following terms shall apply with priority over “Changes” above: “we may amend this policy from time to time to the extent that is permitted by the applicable laws. In the event we amend this policy, we will notify you of the effective date of the changes through (i) a notice to be posted on the landing page of our website or the splash screen of our mobile app or (ii) the contact information you provided to us. If you fail to explicitly express your objection to the amended policy even though we notified you that your failure to do so within the above advance notification period will be considered as an acceptance of the changes, you will be considered to have agreed to the new policy.”

Japan.If you are using our services in Japan, the following additional terms apply:
Parental and Guardian Consent. If you are over the age of 13 but under the age of 20, you declare that you had the consent of your parent or legal guardian to use the Platforms or to register an account on the Platforms.

Messages. Concerning the provisions set out above (regarding “Messages” of “The types of information we collect”), the following additional terms apply: No person reads your messages unless required by applicable laws and regulations. The purpose of this functionality is to detect abuse, fraud, and illegal activity on the Platform. You may turn this feature off at any time by going to privacy@tiktok.com.

How We Share Your Personal Data. Notwithstanding the information set out above (How we share your personal data), in Japan we share your personal data only with selected third parties expressly listed in that section. For customers in Japan, Bytedance continues to be primarily responsible for protection of your information.

Your Rights

Marketing. You have the right to ask us not to process your personal data for email or text marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by contacting us at privacy@tiktok.com.

Data Rights. You have the right to access personal data we hold about you, to rectify any personal data held about you that is inaccurate, to receive a copy of the personal data we hold about you in a paper format or a structured, commonly-used and machine readable format, and to request the deletion of personal data held about you. You can exercise your rights by contacting us at privacy@tiktok.com.

South Korea. If you are using our services in South Korea, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall prevail.
How we share your personal data. In addition to the main text of this policy, in the event we use information such as user-generated content and video content that you may choose to broadcast on our Platform as part of our advertising and marketing campaigns to promote the Platform, your personal data contained in such information may be disclosed to the recipients of such advertising or marketing content.

Data retention. We destroy personal data whose purpose of collection as consented to by you have been achieved, or whose periods of retention and use to which you consented to or which were provided in this privacy policy have expired; provided, however, we will continue to store your personal data for the following statutorily-prescribed periods, where applicable, including, but not limited to:

Act on Consumer Protection in Electronic Commerce:

Records on your cancellation of an order, your payment on a purchased item, and our supply of a good/service: 5 years

Records on the handling of consumer complaints or disputes: 3 years

Records on advertisements and labels: 6 months

Protection of Communications Secrets Act

Records on your visits to our website: 3 months

Destruction of Personal data. We destroy your personal data in a manner that renders it unrestorable by the relevant department.

Your Rights.

Marketing.You have the right to ask us not to process your personal data for email or text marketing purposes. We will usually inform you (before collecting your data) and obtain your consent if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can withdraw your consent at any time by contacting us at privacy@tiktok.com.

Data rights. You have the right to access personal data we hold about you, to rectify any personal data held about you that is inaccurate, to request the deletion of personal data held about you, and the right to request the suspension of the processing of your personal data. You can exercise your rights by contacting us at privacy@tiktok.com.

Data Security. We work hard to protect Bytedance and our users from unauthorized access to or unauthorized alteration, disclosure or destruction of information we hold. To this end, we have in place technical, managerial and physical safeguards, including internal policy for data protection, limiting the access to personal data on a need-to-know basis and controlling access to the facilities where personal data is processed.

Change to the Policy.In the event we make any changes to this policy, we will notify you of such changes at least 7 days before the effective date of the updated policy (30 days if the changes will significantly affect your rights or obligations under this policy) via our website or service page.