Privacy Policy

Last updated: April 8, 2026

HubCreator is a web application used by agencies, brands, and creator teams to organize creator workspaces, connect authorized TikTok accounts through TikTok Login Kit, and display creator analytics and post-level reporting. This Privacy Policy explains what data HubCreator collects, why it is collected, and how it is used.

1. Who this policy applies to

This policy applies to workspace owners, managers, analysts, and creators who use HubCreator or connect a TikTok account to HubCreator.

2. Data we collect

HubCreator collects and stores the following categories of data:

• Account and workspace data: usernames, email addresses, workspace names, creator names, notes, and role assignments.
• TikTok connection data: TikTok open ID, display name, avatar URL, username when available from the authorized scope set, access token, refresh token, token expiry data, and connection status.
• TikTok analytics data: public video identifiers, publication timestamps, share URLs, titles or descriptions, and available public metrics such as views, likes, comments count, and shares.
• Operational data: sync logs, error logs, timestamps, and audit-style records needed to maintain the integration.

3. How we use data

HubCreator uses data only to:

• authenticate users and manage workspace access;
• connect authorized TikTok accounts through TikTok Login Kit;
• retrieve and display TikTok creator analytics and publication reports requested by the workspace owner;
• refresh tokens, synchronize creator data, diagnose integration errors, and maintain service security and reliability;
• respond to user support, compliance, security, and audit requests.

HubCreator does not sell creator data to advertisers and does not use connected TikTok data for unrelated advertising purposes.

4. Legal basis and authorization

HubCreator processes TikTok data only after the relevant user authorizes HubCreator through TikTok Login Kit. Workspace owners are responsible for inviting only creators and channels they are authorized to manage. Users may revoke authorization through TikTok or ask the workspace owner to remove the connection from HubCreator.

5. Scopes and minimum access

HubCreator requests only the scopes required for its active analytics features. For the current web integration, HubCreator uses user.info.basic and video.list to identify the connected TikTok account and retrieve public video analytics needed for the dashboard.

6. Data sharing

HubCreator shares data only with service providers and infrastructure used to host, secure, and operate the application, or when required by law, regulation, legal process, or a valid request from TikTok relating to security, privacy, compliance, or audit obligations. HubCreator does not share creator data with unrelated third parties without an appropriate legal basis or user authorization.

7. Data retention

HubCreator retains data only for as long as it is needed to operate the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain security records. When a creator, workspace, or connection is deleted, HubCreator removes the related local records within a reasonable operational period, except where retention is required for legal, compliance, or security reasons.

8. Security

HubCreator uses reasonable administrative, technical, and organizational safeguards to protect stored data. Access tokens are stored server-side. Access to workspace data is restricted by authenticated workspace ownership and membership logic. No method of transmission or storage is completely secure, so absolute security cannot be guaranteed.

9. User rights and choices

Depending on applicable law, users may have rights to access, correct, delete, or export certain personal data. Users can also request that a TikTok connection be removed from HubCreator. Workspace owners can delete creators and workspaces directly from the application interface.

10. International transfers

If data is processed in a country different from the user’s country of residence, HubCreator will take reasonable steps to protect the data in line with applicable law and contractual obligations.

11. Children

HubCreator is not directed to children and is intended for business and creator-team use only.

12. Changes to this policy

HubCreator may update this Privacy Policy from time to time. Material updates will be reflected by updating the date at the top of this page.

13. Contact

For privacy, data access, or deletion requests, contact the operator of this HubCreator deployment using the support details shown on the official website linked from the app review submission.