Privacy Policy
Last updated: September 2026
Overview
Improvia Creator CRM is an internal application used by authorized Improvia employees to manage conversations with TikTok creators. This policy explains what data the application processes and how it is protected.
Data we process
The application stores creator profile information (display names, handles, and TikTok identifiers), conversation metadata, and message content synchronized from connected TikTok accounts. It also stores technical records such as webhook events and raw API responses for troubleshooting and auditing.
Credentials and tokens
TikTok API credentials are held in server-only environment variables and are never sent to the browser. OAuth access and refresh tokens are encrypted at rest and accessible only to privileged server-side processes.
Access
Access is limited to authenticated Improvia employees whose roles are granted by an administrator. All application data is protected by row-level security in the database.
Data sharing
Data is used solely for Improvia's internal creator-relationship operations and is not sold or shared with third parties for marketing purposes.
Contact
Questions about this policy can be directed to the Improvia internal tools team.