Privacy Policy
Last updated:
This Privacy Policy explains what information (the "Platform") collects, why, and how it's used.
1. Information We Collect
- Account information: your email address and a securely hashed password (we never store your password in plain text, and cannot see it).
- TikTok account data: the username and TikTok user ID of the TikTok account you link, used solely to verify task completions against TikTok's own public data.
- Wallet & transaction data: your PKR balance and full transaction history, and — for withdrawals — the payout account details you provide (JazzCash/EasyPaisa number or bank account).
- Task & verification activity: records of tasks you've completed and verification attempts, used to credit rewards correctly and detect abuse.
- Technical data: basic request information (such as IP address) used for security, fraud prevention, and abuse detection (for example, detecting attempts to create multiple accounts through the same referral link).
2. How We Use Your Information
- To operate your account, verify tasks, and credit rewards.
- To process withdrawal requests to the payout details you provide.
- To send account-related emails: email verification, password reset, and important account notices.
- To detect and prevent fraud, duplicate accounts, and abuse of the task/reward/referral systems.
3. What We Don't Do
- We do not sell your personal information.
- We do not post to, follow, or otherwise act on your TikTok account — we only read the public data needed to verify a task (your Following List and Liked Videos).
- We never store your TikTok password — linking your account only requires your TikTok username.
4. Data Retention
We retain account, wallet, and transaction data for as long as your account is active, and as needed afterward to meet legal, accounting, and fraud-prevention obligations — particularly wallet transaction records, which we keep as a permanent audit trail.
5. Your Choices
- You can unlink and re-link a different TikTok account yourself at any time from your account.
- You can request a copy of your data or ask us to delete your account by contacting us — note that some transaction records may need to be retained as described in Section 4.
6. Security
Passwords are hashed using industry-standard bcrypt hashing. Sensitive tokens (such as password-reset links) are never stored in a directly usable form. We use these and other reasonable technical measures to protect your data, though no system can guarantee absolute security.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.
8. Contact
Questions about this policy can be sent to support@yourdomain.com or via our Contact page.