Privacy Policy

1. Introduction

Koda ("we", "our", "us") operates the Koda platform, a TikTok account management service accessible at kodahq.app. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our service.

2. Data We Collect

We collect the following types of information:

• Account information: email address, name, and profile data provided during registration via Clerk authentication.
• TikTok account data: TikTok username, display name, profile picture, and account statistics obtained through the TikTok API with your explicit authorization.
• Content data: Videos, captions, hashtags, and scheduling information that you provide to publish through our platform.
• Usage data: Pages visited, features used, and interaction logs to improve our service.
• Billing data: Subscription plan information (payment processing is handled by Stripe — we do not store card details).

3. How We Use Your Data

• To provide and operate the Koda service
• To connect and manage your TikTok accounts via the TikTok API
• To schedule and publish content on your behalf on TikTok
• To generate analytics and performance reports for your TikTok content
• To send transactional emails related to your account
• To improve our platform and develop new features
• To comply with legal obligations

4. TikTok API Data

Koda uses the TikTok API to access your TikTok account data. By connecting your TikTok account, you authorize us to:

• Read your basic profile information (username, display name, avatar)
• Upload and publish videos on your behalf
• Access your video list and statistics for analytics purposes

We only access TikTok data necessary to provide our service. You can revoke our access at any time from your TikTok account settings or from your Koda dashboard. TikTok data is governed by TikTok's Privacy Policy.

5. Data Sharing

We do not sell your personal data. We share data only with:

• TikTok: to publish content and retrieve analytics on your behalf
• Clerk: for authentication and user management
• Supabase: for secure database storage
• Stripe: for payment processing
• Vercel: for hosting and infrastructure

All third-party providers are bound by their own privacy policies and data processing agreements.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law. TikTok access tokens are stored securely and can be revoked at any time.

7. Your Rights

Depending on your location, you may have the following rights:

• Right to access your personal data
• Right to correct inaccurate data
• Right to delete your data ("right to be forgotten")
• Right to data portability
• Right to withdraw consent at any time
• Right to object to processing

To exercise these rights, contact us at cameron.zouai@gmail.com.

8. Security

We implement industry-standard security measures including encryption in transit (HTTPS/TLS), encrypted storage of sensitive tokens, and access controls. However, no method of transmission over the internet is 100% secure.

9. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.

10. Children's Privacy

Koda is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a prominent notice on our platform. Continued use of Koda after changes constitutes acceptance of the updated policy.

12. Contact

For any questions about this Privacy Policy or your personal data, contact us at: cameron.zouai@gmail.com