Privacy Policy

Effective 23 September 2026

1. General Information

This Privacy Policy sets out the rules governing the processing of personal data in connection with the use of the TikChat web application, available at tikchat.eu.

TikChat is an application designed to support the management of TikTok LIVE streams. In particular, it enables the display of events occurring during a public livestream, such as comments, viewer activity, gifts sent and other information made available in connection with a TikTok LIVE stream.

This Privacy Policy applies to:

data relating to persons holding a TikChat Account;

data relating to persons contacting TikChat;

data relating to participants of public TikTok LIVE streams processed when TikChat is used by its Users.

TikChat is a service independent of TikTok. TikChat is not a product of TikTok or ByteDance and is not sponsored, authorised or endorsed by those entities.

2. Data Controller

The controller of personal data relating to the operation of the TikChat service, User Accounts, Application security, communications and the Controller’s own legal obligations is:

MattMedia Mateusz Olech

ul. Łokietka 5/2

70-254 Szczecin

Poland

Tax Identification Number (NIP): 9860231264

REGON: 380967348

Contact regarding privacy and personal data:

support@tikchat.eu

Where a TikChat User uses the Application to process data relating to participants of a LIVE stream conducted or managed by that User and independently determines the purposes for which such data is used, the User may act as a separate data controller.

In such circumstances, MattMedia may process LIVE participant data in connection with providing the TikChat service to that User.

The respective responsibilities of the parties depend on the specific manner in which TikChat is used and on the nature of the User’s activities.

3. What Data Do We Process About TikChat Users?

In connection with creating and using a TikChat Account, we may process:

email address;

Account identifier;

information concerning creation and status of the Account;

the User password stored only as a cryptographic hash;

information concerning login sessions and their validity;

IP address;

date and time of requests made to the server;

basic technical information concerning HTTP requests;

information about LIVE Sessions that have started and ended;

the TikTok username entered when starting a LIVE Session;

information saved by the User in TikChat, including names assigned to individual viewers;

information contained in correspondence with TikChat support;

information necessary to ensure Application security and prevent abuse.

Users log in using their email address and password. An email confirmation link is used when registering or setting a password on an existing account that did not previously have one.

4. Data Relating to TikTok LIVE Participants

During an active LIVE Session, TikChat may process information relating to participants of a public TikTok LIVE stream.

Depending on the availability of data, this may include:

TikTok username or nickname;

TikTok user identifier;

avatar;

comment content;

information about joining the LIVE stream;

information about likes on the stream;

information about following the creator;

information about gifts sent;

gifter level;

fan club status;

technical and time-related information associated with an event occurring during the stream;

a name assigned to a particular viewer by the TikChat User.

TikChat does not require livestream participants to create a TikChat Account.

TikChat does not log LIVE participants into TikTok and does not obtain their TikTok login credentials or private TikTok messages.

5. Where Does LIVE Participant Data Come From?

LIVE participant data is not provided directly to TikChat by those individuals.

The source of the data is information made available in connection with a public TikTok LIVE stream.

TikChat uses the technological infrastructure of EulerStream, which enables the Application to receive real-time data and events relating to TikTok LIVE streams.

Depending on the type of event, this may include comments, information about gifts, likes, follows, viewers joining the stream and other events made available during TikTok LIVE.

The TikChat User specifies the TikTok account whose public livestream they wish to manage using the Application.

Information assigned directly to viewers by the TikChat User, such as an assigned name, is provided by that User.

6. For What Purposes Do We Process Data?

6.1. Managing a TikChat Account

We process User data in order to:

create the Account;

authenticate the User;

send email confirmation links;

maintain sessions;

provide TikChat functionality;

save Account settings.

The legal basis for this processing is Article 6(1)(b) GDPR – performance of a contract for the provision of the TikChat service or taking steps at the request of the data subject prior to entering into a contract.

6.2. Supporting TikTok LIVE Streams

Data relating to a livestream is processed in order to enable the TikChat User to monitor and manage activity occurring during a public LIVE stream.

This includes, among other things:

displaying comments;

identifying comment authors;

presenting viewer activity;

presenting information about gifts;

searching information during an ongoing stream;

facilitating more efficient chat management;

helping identify viewers.

To the extent that MattMedia independently determines the purposes of such processing, the legal basis is Article 6(1)(f) GDPR – the legitimate interest consisting in providing and ensuring the functionality of an application supporting management of public LIVE streams.

To the extent that MattMedia processes data on behalf of a TikChat User acting as a separate data controller, the legal basis for the use of such data must be determined by that User.

6.3. Remembering Viewers

TikChat allows a TikChat User to assign a chosen name to a specific TikTok user identifier.

This enables the User to recognise the same person during subsequent livestreams.

The association between a TikTok user identifier and an assigned name may remain stored between LIVE Sessions.

TikChat does not modify the viewer’s TikTok username or any other information stored on that person’s TikTok account.

TikChat Users should use this functionality only to the extent necessary to manage their community and should not use it to store excessive, unlawful or particularly sensitive information.

6.4. Statistics and Rankings During a Stream

TikChat may automatically aggregate viewer activity, for example on the basis of the number of comments or gifts sent.

Such summaries are intended to present the course of the livestream to the TikChat User.

They may constitute profiling in the broad meaning of the GDPR; however, TikChat does not use them to make decisions concerning viewers that produce legal effects or similarly significantly affect those individuals.

6.5. Security and Prevention of Abuse

Technical data, in particular IP addresses, session information and server logs, may be processed in order to:

secure the Application;

detect attacks;

diagnose failures;

prevent unauthorised access;

prevent abuse;

determine the causes of technical errors.

The legal basis for this processing is Article 6(1)(f) GDPR – the Controller’s legitimate interest in ensuring the security and proper functioning of the service.

6.6. Contact and Support Requests

If you contact us at support@tikchat.eu, we process the information contained in your message in order to respond and handle your request.

The legal basis may be:

Article 6(1)(b) GDPR – where the communication relates to an existing or intended contract;

Article 6(1)(f) GDPR – in other cases, as a legitimate interest consisting in conducting correspondence and handling requests.

6.7. Establishment, Exercise and Defence of Legal Claims

Certain data may also be retained for the purpose of establishing, exercising or defending legal claims.

The legal basis is Article 6(1)(f) GDPR.

7. Does TikChat Process Special Categories of Personal Data?

TikChat is not intended to collect special categories of personal data, such as information concerning health, political opinions, religion, sexual orientation or ethnic origin.

However, the content of a public comment posted by a TikTok user may contain information of this kind.

TikChat does not analyse such information for the purpose of creating separate categories of users and does not use it for advertising targeting or automated decision-making.

TikChat Users should not use the viewer naming feature or other Application functions to create their own databases containing special categories of personal data relating to viewers.

8. How Long Do We Retain Data?

8.1. TikChat Account

Basic Account data is retained for the duration of the Account.

After use of the service ends, certain data may be retained for as long as necessary to comply with legal obligations or to establish, exercise or defend legal claims.

8.2. Authentication Sessions

Information relating to login sessions is retained until the session expires, is invalidated or the Account is deleted, subject to data required for system security.

8.3. Names Assigned to Viewers

The association between a TikTok user identifier and a name assigned by the TikChat User is retained between livestreams because it is necessary for the viewer recognition functionality during subsequent LIVE streams.

Such data is retained until:

the assigned name is removed by the TikChat User;

the TikChat User’s Account is deleted;

a valid request for deletion is submitted by the person to whom the data relates,

unless another legal basis exists for further retention.

8.4. LIVE Data and Events

Data relating to a specific LIVE stream is processed while that stream is ongoing.

When a LIVE Session is stopped in TikChat or a confirmed provider-end signal is received, detailed LIVE event rows, including comment content and individual event records, are deleted. If a connection is interrupted without a confirmed end, collection may remain open until the User stops it.

TikChat does not provide Users with a searchable archive of comments from completed livestreams.

TikChat retains session dates, the selected creator, derived statistics and rankings, including activity totals and TikTok identifiers appearing in top-commenter or top-gifter summaries, so that existing session statistics remain available. These summaries are stored with the Account until its deletion or a valid erasure request, subject to applicable legal exceptions. Viewer Names and highlights are stored independently and remain available between LIVE Sessions.

8.5. Server Logs

The server may retain technical logs containing, among other things, the IP address, request time and basic connection information.

Logs are used solely for security, diagnostics and proper operation of the Application.

8.6. Correspondence

Correspondence is retained for the period necessary to handle the relevant matter and may subsequently be retained until the limitation period for potential claims expires.

9. Who May Receive the Data?

Data may be processed using services provided by entities supplying infrastructure necessary for TikChat to operate.

OVHcloud

TikChat uses server infrastructure provided by OVHcloud.

The server hosts, among other things:

the Node.js application;

the Nginx server;

the SQLite database.

EulerStream

TikChat uses EulerStream services in order to receive real-time data relating to public TikTok LIVE streams.

Accordingly, information necessary to establish and maintain a connection to a livestream, as well as LIVE event data, may pass through EulerStream infrastructure.

The scope of such data depends on the types of events occurring during the livestream and may include, among other things, user identifiers, comments, gifts, likes, users joining the livestream and other LIVE-related activity.

EulerStream is an external technology provider and applies its own security and data processing rules.

Zenbox / cyber_Folks

Messages enabling Users to log in to TikChat are sent using the Zenbox SMTP service.

In connection with sending such messages, the email service provider may process, in particular:

the recipient’s email address;

technical data relating to delivery;

the content of the system message.

Professional Service Providers

Data may also be disclosed to entities providing the Controller with legal, accounting, IT or security services – solely to the extent necessary to provide such services.

Data may also be disclosed to competent public authorities where required by law.

10. Payments and Stripe

Payments for the Creator Plan are processed by Stripe. TikChat stores the Stripe Customer ID, Subscription ID, subscription status, billing-period end date and cancellation status to provide the correct plan access and show its status in the Account Panel. TikChat does not maintain a separate copy of full payment history.

TikChat will not independently store full payment card details where payments are processed directly by Stripe.

11. Emails

TikChat sends technical messages necessary for operation of the Account, in particular messages containing an email confirmation link.

As of the effective date of this Privacy Policy, TikChat does not operate a newsletter or an email marketing system.

Creating an Account does not automatically subscribe the User’s email address to a newsletter.

12. Analytics and Cookies

TikChat may use technologies necessary for:

maintaining sessions;

logging in;

ensuring security;

remembering settings;

proper operation of the Application.

Strictly necessary technologies may be used without consent to the extent permitted by applicable law.

The TikChat code technically allows Google Analytics 4 to be configured.

If Google Analytics 4 or another optional analytics tool is activated, it will be used in accordance with applicable law, including after obtaining User consent where such consent is required.

Relevant information will also be presented through the cookie management mechanism.

13. Automated Decision-Making

TikChat does not make decisions concerning Users or LIVE participants based solely on automated processing where such decisions would produce legal effects concerning those individuals or similarly significantly affect them.

The Application may automatically process activity occurring during a livestream in order to create summaries or rankings supporting LIVE management.

Such processing does not result in automatic denial of access to services, changes to contractual terms or similar significant consequences for a LIVE participant.

14. TikChat Does Not Use Data to Train AI

User data and comment content collected during LIVE streams are not used by TikChat to train artificial intelligence models.

TikChat does not use comments to create AI models or advertising profiles of livestream participants.

If the manner in which data is used in this respect changes, this Privacy Policy will be updated accordingly.

15. Transfers Outside the European Economic Area

Certain technology providers may provide their services or use infrastructure located outside the European Economic Area.

Where the use of a particular provider involves a transfer of personal data outside the EEA, the Controller applies a transfer mechanism required by law, where such a mechanism is necessary.

This may include, in particular:

an adequacy decision adopted by the European Commission;

Standard Contractual Clauses;

another transfer mechanism provided for under the GDPR.

The Controller periodically reviews the external services used and the scope of data processed through them.

16. Rights of Data Subjects

Where provided for under the GDPR, a data subject may have the right to:

obtain information about the processing of their data;

access their personal data;

receive a copy of their personal data;

rectify inaccurate data;

complete incomplete data;

request deletion of data;

request restriction of processing;

data portability, where the conditions set out in the GDPR are met;

object to processing based on legitimate interests;

withdraw consent at any time where particular processing is based on consent;

lodge a complaint with the competent supervisory authority.

In Poland, the supervisory authority is:

President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

To exercise your rights, you may contact us at:

support@tikchat.eu

The Controller may request information necessary to verify the identity of the person submitting the request where this is required in order to protect personal data from disclosure to an unauthorised person.

17. Right to Object

Where personal data is processed on the basis of Article 6(1)(f) GDPR, the data subject may object to such processing on grounds relating to their particular situation.

Following a valid objection, the Controller will cease processing the personal data unless the Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the data is required for the establishment, exercise or defence of legal claims.

18. Information for TikTok LIVE Participants

If you participate in a public TikTok LIVE stream managed by a creator using TikChat, information relating to your public activity during that stream may be processed by TikChat in real time.

This may include, in particular:

your TikTok username;

your TikTok identifier;

your avatar;

public comments;

information about likes;

information about following the creator;

information about gifts sent;

gifter level;

fan club status;

information about joining the livestream.

The data originates from the public TikTok LIVE stream and not from private messages or private sections of your TikTok account.

Detailed event records, including comment text, are deleted when the LIVE Session is stopped in TikChat or a confirmed provider-end signal is received. Session metadata and derived statistics and rankings may remain with the creator Account.

A creator using TikChat may, however, assign their own designation to a viewer, such as a name, enabling them to recognise that viewer during subsequent livestreams. Such an association may remain stored between LIVE Sessions.

If you wish to:

find out whether TikChat stores information relating to your TikTok account;

access that information;

object to its processing;

request deletion or restriction of processing,

you may contact:

support@tikchat.eu

It is helpful to provide your exact TikTok username or TikTok identifier so that the relevant data can be located.

We may ask for reasonable verification that the request genuinely relates to your TikTok account.

19. Security

The Controller applies technical and organisational measures designed to protect data against:

unauthorised access;

accidental loss;

unauthorised modification;

disclosure;

destruction.

Access to administrative infrastructure is restricted.

Administrator and User passwords are stored as cryptographic hashes, not in plain text. Time-limited email links are used to confirm registration or the first password set for an existing account.

However, no IT system can completely eliminate all risks associated with transmitting or storing information over the internet.

20. Account Deletion

TikChat currently does not provide an in-app button allowing Users to automatically delete their Account.

A User may request Account deletion by contacting:

support@tikchat.eu

Data is deleted taking into account the Controller’s rights and obligations under the GDPR and other applicable laws.

Certain information may remain stored after Account deletion where this is necessary to comply with a legal obligation or to establish, exercise or defend legal claims.

21. TikTok and External Services

TikTok is a separate service and independently determines how it processes the data of its users.

Creating a TikChat Account does not authenticate the User with TikTok. During TikChat setup, the User assigns one TikTok username to their Account; TikChat stores that username to connect to the selected public LIVE stream.

TikChat does not receive a TikTok user’s password or TikTok login credentials.

Use of TikTok is subject to the terms and privacy policies established by the entities responsible for the TikTok platform.

22. Changes to this Privacy Policy

This Privacy Policy may be updated in particular in the event of:

development of TikChat;

changes to the manner in which data is processed;

addition of new service providers;

introduction of payments;

implementation of new analytics tools;

changes in applicable law;

technological changes concerning TikTok or infrastructure providers.

The current version of the Privacy Policy will be available on the TikChat website.

Where a change is material to Users holding an Account, information about the change may also be provided through the Application or by email.

23. Contact

For matters concerning privacy, personal data processing and the exercise of rights under the GDPR, please contact:

support@tikchat.eu

Controller:

MattMedia Mateusz Olech

ul. Łokietka 5/2

70-254 Szczecin

Poland

Tax Identification Number (NIP): 9860231264

REGON: 380967348