Privacy and Cookies Policy
This Privacy Policy was last updated on 26 May 2026.
This Privacy and Cookies Policy (the "Privacy Policy") describes how personal data is collected, processed, and used in connection with the website https://ttpulse.pro and the related services, tools, APIs, dashboards, and features available through it (together, the "Service" or the "Website"), provided under the "TTPulse" brand ("TTPulse", "we", "us", "our").
By using the Service, you confirm that you have read, fully understood, and agree to this Privacy Policy. If you do not agree, you may not access or use the Service. This Privacy Policy forms an integral part of our Terms of Use, which contain important provisions limiting our liability and governing dispute resolution.
For users located in the European Economic Area (the "EEA") and the United Kingdom, this Privacy Policy is designed with regard to the General Data Protection Regulation (the "GDPR") and the UK GDPR. TTPulse acts as a data controller in respect of personal data collected through the Service for the purposes of registration, account management, billing, and operating the Service. With respect to data we receive from the TikTok advertising accounts you connect, we act on the basis of the authorization you grant and on your instructions, solely to provide you with the Service's features. We engage processors and sub-processors (including hosting, payment, and infrastructure providers) as necessary to provide the Service.
This Privacy Policy does not apply to third-party websites, platforms, payment providers, or other services you may access through the Service or via links on the Website, including TikTok, Binom, Keitaro, or identity providers. We are not responsible for the privacy practices of such third parties. You should review their own privacy policies.
1. Definitions
"Personal data" means any information relating to an identified or identifiable natural person, such as a name, email address, account identifier, IP address, or any other identifier.
"Navigation information" means information about your device and your visits to the Service, such as IP address, approximate geographic location, browser type, operating system, language, time zone, pages viewed, and interaction patterns.
"Advertising account data" means data we receive from the TikTok advertising accounts you connect through the TikTok Marketing API, including account identifiers, the structure and statuses of campaigns, ad groups, and ads, as well as aggregated performance metrics.
"User Content" means advertising creatives (video, images, text), campaign templates, settings, and other materials that you upload to or create through the Service.
2. What personal data we collect
We may collect and process the following categories of data:
Account data: name (or nickname), email address, password (in hashed form), and the identifier assigned to you by our system. If you sign in through a third-party identity provider (including Google), we receive the basic profile data that such provider supplies (typically name, email address, and profile photo).
TikTok connection data and access tokens: the identifier of the connected account/Business Center and the access and refresh tokens granted upon authorization through the TikTok Marketing API. Tokens are stored encrypted and used only to perform the actions you request.
Advertising account data: the list and identifiers of ad accounts, the names and statuses of campaigns, ad groups, and ads, as well as aggregated performance metrics (including spend, impressions, clicks, conversions, CTR, CPC, CPM, ROAS) for the selected period, which we synchronize to display in the dashboard.
Management and automation data: the campaign templates, automation rules and settings (auto-launch) you create, their execution logs, and the actions performed (including creating and launching campaigns, changes to statuses, budgets, and bids) carried out at your request or under your rules.
User Content: advertising creatives and other materials you upload to create and launch ads. Such materials are transmitted to TikTok via the API in order to perform the actions you request.
Payment data: transaction amount, time, pricing plan, and similar billing information necessary for accounting and anti-fraud. Payments are processed exclusively by independent third-party payment providers; we do not store full payment card details.
Navigation information: IP address, device and browser type and version, operating system, time zone, language, pages viewed, visit duration, and interaction with pages.
System logs: activity logs, login and feature-use timestamps, action identifiers, error logs, and security logs.
Communication data: any messages, complaints, or requests you send us at support@ttpulse.pro or through another support channel (including Telegram).
3. The TikTok permissions (scopes) we use
By connecting an advertising account through the TikTok Marketing API (TikTok for Business), you grant the Service permissions, each of which is used solely for the corresponding feature. The list corresponds to Section 4 of our Terms of Use:
- Account Management — retrieving the list of ad accounts and Business Centers you have access to;
- Ads Management (read) — the structure and statuses of campaigns, ad groups, and ads for display in the dashboard;
- Ads Management (write) — creating and bulk-launching campaigns (auto-launch), turning on/off, changing budgets and bids;
- Creative & File Management — uploading and managing advertising creatives for auto-launch;
- Identity Management — using the advertising identities under which ads are published;
- Reporting — aggregated performance metrics for statistics.
Depending on your plan and the features you use, the Audience Management, Pixel / Events, Comment Management, and Catalog / DPA permissions may additionally be requested. Any actions on your accounts are performed solely at your explicit request or when the automation rules you configure are triggered. We never publish organic content on your accounts outside the advertising actions you initiate.
4. Purposes and legal bases for processing
We process your personal data for the following purposes and on the following legal bases:
Providing the Service (performance of a contract / your consent): registering and managing your account, connecting advertising accounts, synchronizing and displaying statistics, performing the actions and automation rules you request, processing payments, and providing user support.
Legitimate interests: ensuring the security, stability, and integrity of the Service; preventing, detecting, and investigating fraud and abuse; handling complaints and legal requests; analyzing usage to improve the Service; protecting our rights and the rights of third parties.
Compliance with legal obligations: complying with applicable laws, regulations, court orders, and lawful requests from competent authorities.
Marketing (your consent): subject to your separate consent — sending information about our products, features, and capabilities.
5. How we use your data — and what we do not do
We use your data to administer your account and subscription, display statistics in the dashboard, authenticate you, perform ad-management actions and automation rules at your request, send service notifications (including via Telegram), personalize and improve the Service, and comply with legal, accounting, and security requirements.
We expressly emphasize that:
- we do not sell, rent, or share your data with third parties for their own purposes;
- we do not use your data to target third-party advertising;
- we do not use your User Content or advertising account data to train, fine-tune, or develop any artificial intelligence models;
- we do not publish any content on your connected accounts outside the advertising actions you expressly initiate or configure.
6. Disclosure of your personal data
We may share your personal data with the following categories of recipients:
- TikTok — within the scope of performing the actions you request through the Marketing API;
- Service providers and processors (including hosting and infrastructure providers, payment providers, anti-fraud and security providers) that process data on our behalf and on our instructions;
- Integrations you enable (including Binom, and Keitaro in the future), to which data about spend and performance is passed according to your configuration;
- Government, law-enforcement, and regulatory authorities — where required by law or a lawful request, or where we believe in good faith that disclosure is necessary to protect rights, safety, or to prevent fraud;
- Professional advisers (lawyers, auditors, accountants) — where necessary;
- Successors — in the event of a merger, acquisition, reorganization, financing, or sale of the business.
7. Integrations and third-party services
The Service interacts with third-party platforms and services, including TikTok, identity providers (e.g., Google), payment providers, and tracking and analytics integrations (Binom; Keitaro may be provided in the future). Your connection to and use of any third-party service is governed by that service's terms and policies. Data is passed to such integrations according to your configuration and in your interest.
8. International data transfers
The Service is available worldwide. Your personal data may be processed and stored on servers located outside your country of residence, including outside the EEA. Where such transfers occur, we take reasonable measures to ensure an appropriate level of protection in accordance with applicable law (including, where applicable, standard contractual clauses). By using the Service, you acknowledge that your data may be transferred to jurisdictions that may not provide the same level of protection as your jurisdiction of residence.
9. Data retention and deletion
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, security, or anti-fraud requirements.
- Access tokens and synchronized advertising account data are deleted within seven (7) days after the relevant account is disconnected, access is revoked, or your account is deleted.
- Account data, templates, rules, and statistics are retained while your account is active.
- After account deletion, we delete or anonymize your personal data within thirty (30) days, except for data whose retention is required by law (e.g., billing or anti-fraud records).
You may at any time: delete User Content or disconnect an advertising account in the Service settings; revoke our access directly on the TikTok side (TikTok → Settings → Authorized apps); delete your account; or send a data-deletion request to support@ttpulse.pro. You acknowledge that you are responsible for exporting and backing up any data you wish to keep.
10. Security
We use reasonable technical and organizational measures to protect personal data, including:
- access tokens for connected accounts are stored encrypted (storage-level encryption, including the AES-256 standard);
- data is transmitted over secure connections (HTTPS/TLS);
- access to data is limited to your authorized session and authorized personnel on a least-privilege basis.
However, you acknowledge that no method of transmission over the internet or electronic storage is completely secure. We do not guarantee absolute security and, to the maximum extent permitted by law, are not liable for unauthorized access caused by circumstances beyond our reasonable control. You are responsible for keeping your credentials confidential and for all activity under your account.
11. Your rights
Subject to applicable law (including the GDPR where it applies), you may have the following rights in respect of your personal data:
- Access — to obtain confirmation of processing and a copy of your data (including by viewing it in the dashboard);
- Rectification or erasure — to request correction of inaccurate data or its deletion, except where we are required to retain it;
- Restriction — to request restriction of processing in certain circumstances;
- Data portability — to receive the data you provided in a structured, machine-readable format (including a CSV export of statistics where available);
- Objection — to object to processing based on legitimate interests and to direct marketing;
- Withdrawal of consent — to withdraw consent at any time, without affecting the lawfulness of prior processing;
- Complaint to a supervisory authority — to lodge a complaint with the data protection authority of your country of residence.
To exercise these rights, contact us at support@ttpulse.pro. We may need to verify your identity, and we may decline requests that are manifestly unfounded or excessive. Some rights are subject to limitations and exceptions provided by applicable law.
12. California residents
If you are a California resident, the California Consumer Privacy Act ("CCPA"/"CPRA") may grant you additional rights: to know the categories of personal data we collect, the purposes of use, the categories of sources and recipients; to request deletion; and the right not to be discriminated against for exercising your rights. We do not sell users' personal data. To exercise CCPA rights, contact us at support@ttpulse.pro.
13. Cookies and similar technologies
Cookies and similar technologies are small files stored on your device. We use:
- Strictly necessary cookies — required for the Service to function, including authentication and maintaining your session (e.g., session tokens);
- Functional cookies — to remember your preferences (such as language);
- Analytics / performance cookies — to understand how the Service is used so we can improve it.
You can manage cookies through your browser settings. If you disable all cookies, some features of the Service may not work properly.
14. Children
The Service is not intended for and may not be used by minors. We do not knowingly collect personal data from persons under 18 years of age (or under the age of majority in your jurisdiction, whichever is higher). If you become aware that a minor has provided us with personal data, contact us at support@ttpulse.pro and we will take steps to delete such data.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted on the Website with a new "last updated" date. Your continued use of the Service after the updated version is posted constitutes your acceptance of it. We are not obligated to notify you individually of any changes.
16. How to contact us
All questions, comments, complaints, and requests regarding this Privacy Policy or the processing of your personal data should be sent to: support@ttpulse.pro. Support may also be provided through the official TTPulse Telegram channel indicated on the Website.