Privacy Policy

1. Who we are

Viewlark is operated by Viewlark IC, in the United Kingdom. We are the “controller” of the personal data described in this policy under UK data protection law. You can contact us at [email protected].

Viewlark is an independent service. It is not affiliated with or endorsed by TikTok.

2. What we collect and why

Waitlist

What: your email address.
Why: to send you a welcome email and to tell you when Viewlark opens.
Legal basis: your consent, which you give by submitting the form.
How long: until you ask us to remove you, or 24 months after you join, whichever comes first.

Your Viewlark account

What: your email address; your password, which we store only as a salted hash and cannot read; when you accepted our terms; and the daily figures from your TikTok export (views, profile views, likes, comments and shares for each day).
Why: so you can log in and see your analytics again next time, and so we can email you to confirm your address or reset your password when you ask.
Legal basis: providing the service you asked for.
How long: until you delete your account. You can do that yourself on the Account page, which also lets you download everything we hold about you.

Files you load into Viewlark

If you load a TikTok Studio export, the file is read inside your own browser and the file itself is not uploaded. If you are logged in, only the daily figures in it are saved to your account. If you use the analysis page without an account, it can keep a copy of those figures in your browser's local storage on your own device. We never receive that copy, and you can delete it with “Clear saved data” or by clearing your browser data.

If you connect your TikTok account

When Viewlark opens, you will be able to log in with TikTok. TikTok will ask you to approve what we can see. With your approval we receive:

• your TikTok open ID and display name; and
• information about your public videos: video ID, title or description, length, when it was posted, a link to its cover image, and its number of views, likes, comments and shares.

We use this only to show you analytics and trends for your own account. We keep an access token on our server so we can refresh your statistics, and we may save regular snapshots of your video statistics so we can show you how they change over time. We cannot post, edit or delete anything on your TikTok account.

Legal basis: your consent, given on TikTok's approval screen, and providing the service you asked for.
How long: while your account is connected. If you disconnect or ask us to delete your data, we delete it within 30 days.

Technical information

Our network provider (Cloudflare) handles your IP address and basic request details to deliver and protect the site. We also hold your IP address briefly in memory to limit repeated sign-up attempts, and we do not store it long term. Legal basis: our legitimate interest in keeping the service secure and preventing abuse.

Messages you send us

If you email us, we keep the message and your address so we can reply and keep a record of the conversation.

3. What we do not do

• We do not sell your personal data.
• We do not show advertising or use advertising trackers.
• We do not use your data to train AI models.

If we add AI-written suggestions in future, we will update this policy before any AI provider receives your data.

4. Who we share data with

We use a small number of service providers who process data for us:

• Resend sends our emails (the waitlist welcome, email confirmation and password reset). It receives your email address and the content of the email.
• Cloudflare provides our domain, network security, delivery of the site and forwarding of the [email protected] mailbox.
• TikTok handles the login when you connect your account, under its own privacy policy.
• Google Fonts supplies the fonts our pages use. Your browser requests them from Google, so Google receives your IP address.

Some of these providers may process data outside the UK. Where they do, it is protected by safeguards that UK law requires. We do not share your data with anyone else unless the law requires it.

5. Cookies

When you log in, we set one cookie that keeps you logged in. It is strictly necessary for the service, is not used for tracking, and is removed when you log out or after 30 days. We do not use analytics or advertising cookies. Our network provider may also set strictly necessary security cookies.

6. Your rights

Under UK data protection law you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct anything that is wrong;
• delete your data;
• restrict how we use it, or object to how we use it;
• give you your data in a portable format.

Where we rely on your consent, you can withdraw it at any time. That does not affect anything we did before you withdrew it. Email [email protected] and we will reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

7. Disconnecting TikTok and deleting your data

You can remove Viewlark's access at any time in your TikTok account's app permissions settings. To have your saved data deleted as well, email us and we will do it within 30 days.

You can also delete your saved figures, or your whole account, yourself on the Account page of the app. Everything linked to your account is deleted straight away.

8. Security

We keep your data on a server we control and use reasonable technical and organisational measures to protect it, including encrypted connections (HTTPS) when data travels between your browser and our site. Passwords are stored only as salted hashes, and repeated login attempts are slowed down. No system is completely secure, so we cannot guarantee absolute security.

9. Children

Viewlark is not intended for anyone under 13, which is also TikTok's minimum age. If you think a child has given us their data, email us and we will delete it.

10. Changes to this policy

If we change this policy, we will update the date at the top. If a change is significant, we will also tell you by email or on the site before it takes effect.