Privacy Policy
Last updated: October 2026
StarPresence LLC (“StarPresence”, “we”, “us”) offers the platform under the name StarPresence (starpresence.ai) for businesses anywhere in the world. Protecting your data is important to us. This privacy policy explains what data we collect, how we use it, and what rights you have.
Who is responsible for which data
Platform data. For the data of your account and of your visits to our websites (registration and contact details, billing and payment records, usage data, support correspondence and website access data), the data controller is:
StarPresence LLC
30 N Gould St Ste N, Sheridan, WY 82801, USA
Email: [email protected]
An affiliated company in the United Arab Emirates, which owns the platform and operates its technology, processes that data on our behalf as our processor. We have appointed DataRep (Data Protection Representative Limited, trading as DataRep) as our representative in the European Union and the European Economic Area under Article 27 GDPR and in Switzerland under Article 14 FADP. You may address any question about the processing of your personal data to DataRep instead of us: by email to [email protected], with “StarPresence” in the subject line; through the form at www.datarep.com/data-request; or by post to DataRep, 77 Camden Street Lower, Dublin, D02 XE80, Ireland, or, from Switzerland, to DataRep, Leutschenbachstrasse 95, 8050 Zurich, Switzerland. Please address letters to DataRep, not to StarPresence, or they may not reach it. For questions about our service itself, please contact us directly.
Your business data. For the personal data contained in the business data you bring to the platform or publish through it (reviews, comments and mentions with their author identifiers, the private messages sent to your connected accounts, and your own replies, posts, profile facts, photos, videos, images with their prompts and documents), you, the business using StarPresence, are the data controller. StarPresence LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA, processes that data on your behalf as your data processor under the Data Processing Agreement, which forms part of the Terms of Service. This privacy policy describes how that data is handled on the platform; the Data Processing Agreement sets out the obligations.
1. Data We Collect
We collect the following personal data:
- Name and email address, and how you sign in: with an account at a sign-in provider you choose, which sends us your name and email address; with a sign-in link we email to you; with a passkey; with a digital wallet, whose public address we keep; with an account on a decentralised network, whose account identifiers we keep; or with your organisation's single sign-on.
- Data from the Google services you connect for your business listing (location information, reviews, review texts, reviewer name)
- YouTube data, if you connect a YouTube channel: the channel's identifier, name and handle; the identifiers and titles of its newest videos; the comments on those videos (the text, the commenter's public display name and channel identifier, and the identifier and time of the comment); the channel's daily figures; and the record of what you publish, delete or upload through StarPresence (see section 7)
- TikTok data, if you connect a TikTok account: the account's identifier and display name; its follower, following, like and video counts; the identifiers, publication times and view, like, comment and share counts of its newest videos; and the record of what you publish through StarPresence (see section 13)
- Social reply generator data for the selected business location: pasted review text, optional one-time context, selected platform and listing metadata, saved platform profile context and reply policy notes, generated replies, copied or selected variant metadata, and usage or credit metadata
- Payment information (processed by our payment processor, we do not store credit card data). If you pay with a stablecoin, our payment processor receives your wallet address and the transaction details. This payment method is not yet available.
- Usage data (login times, features used)
- Website access data: when you visit our websites, our hosting provider processes your IP address and the technical details of the request (page, time, browser) to deliver the page and to protect the site against abuse.
- Customised replies (to improve the response style, “Style Memory”)
- Your media library: the photos and videos you upload or copy in, and the images you ask StarPresence to generate together with the prompt you wrote, with each file's name, type and size, so that you can use them in your posts.
- Documents you upload to propose facts for your business: the file is sent to our AI provider so that it can read it and propose facts. We keep the file's name, type, size and page count, an identifier that recognises the same file again, whether a person or an agent started the import, how many facts were proposed, dropped or refused, and which facts you chose to save. We do not keep the document itself or the text inside it.
- Files you pick from your Google cloud storage: when you choose to import from Google and pick a file in Google's file picker, Google gives StarPresence that file and no other. A photo or video is copied into your media library like any file you upload; a document is handled as described in the previous point. We do not store Google's access token. See our Google API disclosure.
- Private messages, if you switch on messages for a connected account: the messages people send to that account and the replies sent from StarPresence, with the sender's name and the identifier the platform gives them (for WhatsApp, the phone number). A message can contain whatever its sender chooses to write, including information about their health.
- Accounts on decentralised networks, if you connect one: the account's public identifiers, including the address of the wallet that controls it, and the content you publish or receive there.
- Records of StarPresence Admin access, if your organisation's Owner switches Admin access on: who switched it on or off and when; each support session (the StarPresence staff login, its start and end); and every action taken in it, marked as taken by support.
2. How We Use Your Data
We use your data exclusively for the following purposes:
- Creating personalised replies to your Google reviews
- Showing you the comments and daily figures of your YouTube channel, and publishing, deleting or uploading what you approve there (see section 7)
- Showing you the profile and figures of your TikTok account, and publishing what you approve there (see section 13)
- Showing you the private messages people send to your connected accounts, including your WhatsApp Business number, and sending the replies you write or approve. Drafting replies to messages with AI is described here in advance; it is not yet available.
- Creating manual copy-back replies for pasted reviews from other platforms for the selected business location, and showing the related social reply history and credit usage
- Managing your account and subscriptions
- Weekly and monthly summaries via email
- Notifications for negative reviews (1-2 stars)
- Style Memory: when you adjust a reply, the system learns your style for future suggestions in your account
- Improving our services, using only the data of your account (such as which features you use) and anonymised statistics, never the reviews, messages or other business data of your customers
- Proposing facts for your fact sections from a document you upload, for you to review and then save or discard
- Copying the photos and videos you pick from your Google cloud storage into your media library, and reading the documents you pick so that facts can be proposed from them, each only when you start it
- Generating images from your prompts, and keeping your photos, videos and images in your media library so that you can use them in your posts.
We do not train external AI models with your data. Your reviews, replies and Style Memory entries are used only to provide the features of your account and are not used to train or fine-tune third-party AI models.
3. Data Sharing
We do not sell your data or share it with third parties for marketing purposes. Your data reaches the following recipients:
- The review, delivery and social platforms you connect (for example Google services or YouTube API Services), to retrieve reviews and publish replies; each acts as an independent controller under its own terms
- AI service providers in the USA: one processes review texts and your business context to draft replies, posts and analyses, up to two photos of a Google review so that it can describe them for the reply, and a document you upload for a fact import so that it can propose facts from it; another generates images from your prompts when you ask for one. Retention and use are described in section 6.
- Payment processor, for secure payment processing (PCI-DSS compliant)
- Email service provider, for sending notifications
- Hosting providers that operate the platform; its database and file storage are in data centres in Ireland
- Our website hosting and content-delivery provider, which delivers our websites and processes the access data of their visitors
- Services that retrieve public information for the features you use, such as public reviews of your listings, search and map results and the content of public business websites
- Interface providers that connect us to a platform you use, where that platform is reached through one (for example a decentralised network)
The platforms you connect and the sign-in services you use act as independent controllers under their own terms. Our payment processor, which StarPresence LLC engages directly, acts as an independent controller for payment data and as our processor for your billing details. For your business data the other providers act as sub-processors of StarPresence LLC under the Data Processing Agreement; for platform data they act as our processors, engaged through our affiliated company. The list of our sub-processors is on our website at starpresence.ai/sub-processors; you can also ask us for it at [email protected].
StarPresence's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This includes the files you pick from your Google cloud storage. For more details, see our Google API disclosure.
Admin access. Only the Owner of your organisation can switch StarPresence Admin access on or off, in Settings, and every Owner receives an email each time. While it is on, StarPresence support staff can open your account as its Owner sees it, to set it up and test it for you. Support cannot pay, accept terms or give consent, connect or disconnect accounts, or delete anything. Anything that would reach your customers or your platforms, such as a reply, a post or a message, waits for your approval; you approve it, and it then runs as your own action, or you decline it, and a request you do not answer expires after 7 days. A support session ends after at most 8 hours, and at once when the Owner switches access off. Text written by support is not used to learn your writing style. Outside Admin access, only the persons StarPresence has authorised as administrators can open your account's data, through our internal administration tools and only for a stated purpose, such as answering a support request, correcting billing, moderating content or fixing a technical problem; every such access is recorded with its purpose. An authorised administrator can also access the database directly to maintain it or to fix a technical problem; that direct access is not recorded individually. For Google user data, direct access remains subject to the restrictions on human reading in our Google API Services Disclosure.
4. Data Retention
Your data is stored as long as your account is active. You can request the deletion of your account. If you are the only owner, you confirm the request no sooner than 24 hours after making it, and deletion starts then. Where your organisation has several owners, a second owner approves it instead, and deletion starts once 24 hours have passed both since the request and since that approval. A request that is not confirmed or approved within 7 days lapses. Once deletion has started, your account can be restored for 30 days; then it is erased irrevocably, with its data (an erasure that cannot finish is retried, automatically or by our team), except the records and copies listed here: the invoices and payment records that tax and accounting law requires us to keep, for the period it requires, and the record of which version of our terms and policies was accepted and when, which we keep for 10 years with your user identifier replaced by a pseudonym. Copies that our AI providers keep for a limited time are described in section 6. Our database provider keeps a daily backup of the database for 7 days, so erased data is no longer in these backups at most 8 days after its erasure. Our email provider keeps the emails we send for up to 30 days and its backups for 7 more days, and the provider through which we read reviews from Tripadvisor, Trustpilot and Yelp keeps its results for up to 12 months; these periods can continue after your account is erased. In addition: server logs, which can contain your email address, are deleted after at most 30 days; support conversations are kept as long as your organisation exists and are deleted with it; sign-in sessions are deleted when they expire. Anonymised data may be retained for statistical purposes.
Per-item approval is the default: you approve the exact text before StarPresence sends it. That remains the case unless you have switched on automatic publishing in your settings; where you have switched it on, content that meets the conditions you set and passes StarPresence's safety checks is published without a separate approval from you. Some replies are still held for your approval, including where a safety check does not pass. Switching on automatic publishing is your own decision, and you stay responsible for the content of everything published on your behalf under it. Content published through StarPresence to your own platforms is your content and your responsibility. This does not change StarPresence's own obligations for how it operates and secures the service and how it processes your data. In data-protection terms, you are the controller of the content published on your instruction, and StarPresence processes it on that instruction. StarPresence's erasure obligation is limited to what StarPresence holds.
If StarPresence definitively confirms that a review was deleted or invalidated on Google before a reply was published, StarPresence marks the review as no longer visible and removes it from active approval and publishing queues. That status change does not delete StarPresence's stored copy of the review.
If you delete your StarPresence account, StarPresence deletes the personal data it holds, as described above. StarPresence does not, on its own initiative or as part of a data-erasure request, retract, delete or alter content already published to a provider with your approval. Erasing StarPresence's records does not unpublish that content; it remains your content in the provider's system. You may explicitly instruct StarPresence through the product to delete your own reply that was published through StarPresence to Google, and StarPresence carries out that instruction.
Social reply profiles and pasted social reply history are stored for the selected business location until you delete the history entry manually or the related business location or account is deleted. Pasted social review text is stored as history, not as reusable business knowledge.
A daily cleanup removes from StarPresence the text and attachments of each private message you receive once it has been stored for more than 30 days. During the daily cleanup, StarPresence shortens the sender's name to its first word or removes it only when the last message you received in the conversation is more than 30 days old, no received message was first stored within the last 30 days, and none still holds text or attachments; a conversation without any received message waits until it is more than 30 days old. When StarPresence finds that an X connection has ended, it deletes the stored conversations of that account and their messages, including your own replies. StarPresence keeps the sender's identifier on the platform (for WhatsApp, the phone number or an identifier Meta assigns), the times of the messages and your own replies until the conversation is deleted, at the latest with your account. The conversation itself stays on the platform, where you can still read it. Where Instagram tells StarPresence that a message was deleted, StarPresence removes its text and attachments as well.
Photos, videos and images stay in your media library until you delete them or close your account; when your account is erased, they are erased with it (section 4).
Records of Admin access are kept for 12 months. A record of switching Admin access on or off is deleted 12 months after it was made, except the record of the current switch-on, which is kept while access stays on and deleted 12 months after access is switched off. The record of a support session is deleted 12 months after the session ends. All of them are deleted earlier with your account, within 30 days after it is deleted. If only your own user account is deleted while your organisation continues, your name and identifiers are removed from its Admin access records within 30 days.
Decentralised networks. Content you publish to a decentralised network is stored by that network, publicly and permanently, together with the public address of your account. Where the network supports it, deleting the content in StarPresence asks the network to remove it, but copies can remain with the network and with others who have stored it. StarPresence cannot erase what the network holds.
5. Cookies
StarPresence sets as few cookies as possible. We do not use an analytics tool to track visits to our websites. (The statistics StarPresence shows you about your own channels come from the platforms you connect and are described in sections 1 and 7.) A session cookie is used solely for sign-in (strictly necessary). If you arrive via a marketing link, we set one cookie for 90 days to record which campaign brought you, but only after you consent in the cookie banner. If you decline, this cookie is not set.
6. Data Processing Location & International Transfer
Our database and file storage, which hold your account and review data, are in data centres in Ireland. Some of our providers process data in other countries, and our affiliated company administers the platform from the UAE. The list below shows, for each kind of provider, where it processes data and the safeguard for the transfer. You can ask us for information about these safeguards, and for a copy of them, at [email protected].
- Database, sign-in and file storage: Ireland; Standard Contractual Clauses, as the provider is established in Singapore.
- Hosting of the application: the Netherlands, and the provider states that its main processing takes place in the USA; Standard Contractual Clauses.
- Sending of emails: Ireland, and the provider states that its main processing takes place in the USA; Standard Contractual Clauses.
- AI providers for texts, photo descriptions and images: USA; Standard Contractual Clauses.
- Reading reviews from Booking.com: Czech Republic, and the provider may transfer data to the USA; Standard Contractual Clauses where it does.
- Reading reviews from Tripadvisor, Trustpilot and Yelp: Estonia; within the EU.
- Reading public reviews and websites: Germany; within the EU.
- Administration by our affiliated company: UAE; Standard Contractual Clauses.
- Payments: USA and Ireland; EU-U.S. Data Privacy Framework and Standard Contractual Clauses.
- Mailboxes for support and legal correspondence: Switzerland; adequacy decision of the European Commission.
- Hosting of our websites and DNS: the USA, where the provider is established, and the data centres of its worldwide network, which it lists at cloudflare.com/network; a request can be served from any of them; EU-U.S. Data Privacy Framework and Standard Contractual Clauses.
- Publishing and reading on a decentralised network: USA; none (see below).
Our AI providers process in the USA the review texts and business context from which they draft replies, posts and analyses, up to two photos of a Google review, which one of them describes for the reply, a document you upload for a fact import together with the facts proposed from it, and the prompts of images you request. The Standard Contractual Clauses are those of the European Commission (Art. 46(2)(c) GDPR); the EU-U.S. Data Privacy Framework applies to recipients certified under it. For Switzerland, the Standard Contractual Clauses apply with the adaptations recognised by the Federal Data Protection and Information Commissioner, and the Swiss-U.S. Data Privacy Framework applies to recipients certified under it. These safeguards do not cover one provider: the provider in the USA through which we publish and read content on a decentralised network, for customers who connect an account there. It has not concluded a data processing agreement or the Standard Contractual Clauses with us; it receives only the content you ask us to publish there, your account identifiers on that network and the public content there that mentions you. Our search provider receives only search terms, such as a business name, category and city, and no other data from your account. Our AI providers do not use our API inputs or outputs to train their models. They keep those inputs and outputs for a limited time to provide the service and to monitor for abuse and misuse, as a rule for up to 30 days. They keep them longer only where the law requires it, where it is needed to protect their services or others from harm, or to enforce their usage policies (up to 2 years for flagged inputs and outputs, and up to 7 years for safety classification scores).
7. YouTube API Services
StarPresence uses YouTube API Services when you connect a YouTube channel. By using StarPresence's YouTube features you also agree to be bound by the YouTube Terms of Service. The Google Privacy Policy describes how Google handles data.
What we access
When you connect a channel, Google shows you a consent screen. StarPresence asks for these permissions:
- Managing your channel (required): to read the channel and its comments and, only when you approve an action, to publish a reply, to delete a comment or to upload a video. We read the channel's identifier, name and handle; the identifiers and titles of its newest videos; and the comments on those videos, including comments that YouTube holds for your review: the text, the commenter's public display name and channel identifier, and the identifier and time of the comment.
- Your channel's figures (optional): to show you your channel's figures. We read its daily totals of views, engaged views, minutes watched, likes, comments, shares, and subscribers gained and lost, for the last 90 days. We do not read figures of single videos or of single viewers.
- Viewing your channel (optional): Google requires this permission for the figures above. We use it only for those figures: it lets us view the channel they belong to.
How we use it
We use YouTube data only to show you your comments and figures in StarPresence, to publish, delete or upload what you have approved, and to keep the connection working. A reply, a deletion or an upload happens only after you have approved that exact action. StarPresence does not send the comments, the names of the commenters or your channel's figures to its AI providers, and you write the replies yourself. If you ask StarPresence for thumbnail suggestions for a video, it sends the video's title and description, and its captions if you choose, to our AI provider, which proposes short texts for the thumbnail. Should that change, we will update this policy before it does.
Who sees it
In StarPresence, YouTube data is visible to the members of your organisation who have access to that channel in StarPresence. If you authorise your own AI agent to use StarPresence for you, that agent can read your channel's videos and figures and its list of comments, but not the comments' text or the commenters' names and identifiers. StarPresence's administrators access it only to fix a technical problem, to investigate a security incident or to answer your support request. Access through our internal administration tools is recorded; direct database access is not recorded individually. Apart from Google, our AI provider for the thumbnail suggestions you request and an AI agent you authorise, the only parties that handle YouTube data are the hosting providers that run StarPresence for us (section 3). We do not sell it, we do not use it for advertising, and we do not allow third parties to show content or advertisements based on it.
How long we keep it
- Comments: once a comment by someone else has been stored for 29 days, a daily job removes the text of the comment, the name of the commenter and the commenter's channel identifier. Technical identifiers, the time of the comment and the title and web address of the video remain.
- Daily figures: StarPresence refreshes them every day and deletes each stored day 25 days after it was last refreshed.
- Access tokens: stored encrypted, and only while the channel is connected.
- Uploads: StarPresence sends the video file from your library to YouTube when you approve the upload, and keeps the record of the upload (the video's identifier, title and status).
- What you did: your own replies and the records of what you published, deleted or uploaded are kept as part of your account's history until the account is deleted.
Deleting your data
You can have the YouTube data that StarPresence stores about your channel deleted at any time. When you disconnect the channel in StarPresence, it deletes at once the stored text of comments, the names and channel identifiers of the commenters, the video titles stored with comments, the stored daily figures and its stored access tokens. It keeps the channel's name and identifier, the technical identifiers and times of comments, your own replies and the record of what you published, deleted or uploaded, so that you can connect the same channel again and keep your history. If you cannot disconnect the channel, write to [email protected] and we will delete the data as soon as possible and within 7 days. If you delete your StarPresence account, the YouTube data is erased with your account, at the end of the 30-day restoration period (section 4). Deleting the data StarPresence stores does not affect any data stored by YouTube. To delete data on YouTube, use YouTube Studio or another YouTube application, or an authorised API client that supports deleting it.
Revoking access
In addition to disconnecting a channel in StarPresence, you can revoke StarPresence's access to your Google data at any time on the Google security settings page. When you disconnect a channel, StarPresence deletes its stored tokens and asks Google to end the permission, unless another YouTube channel is still connected to StarPresence: ending the permission at Google can end it for every channel of the same Google account, and StarPresence cannot tell whether two connected channels belong to the same Google account. In that case, or when Google cannot be reached, Google keeps listing the permission on that page until you remove it. If you revoke access there, StarPresence can no longer read your channel; a daily job removes the text, names and channel identifiers of the comments by other people it already holds once they have been stored for 29 days, and the stored daily figures once 25 days have passed since their last refresh.
Cookies and similar technologies
StarPresence's YouTube features set no cookies and store or read nothing on your device beyond what section 5 describes. StarPresence does not embed YouTube players.
Questions and complaints
If you have a question or a complaint about how StarPresence handles YouTube data, write to [email protected].
8. Your Rights
Under the EU GDPR, the Swiss Federal Act on Data Protection (FADP) and the data protection law applicable to you, you have the right to:
- Access your stored data
- Rectify inaccurate data
- Delete your data
- Data portability
- Withdraw your consent
- Restrict processing
- Object to processing based on our legitimate interests, on grounds relating to your particular situation, and to direct marketing at any time
- Lodge a complaint with the competent data protection authority, in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in EU member states, the relevant national supervisory authority
Withdrawing your consent does not affect the lawfulness of the processing carried out before the withdrawal. To create an account, we need your email address or a sign-in through a provider you choose; to make a purchase, we need the name and email address for the invoice, and our payment provider needs your billing address and payment details. Without them we cannot open the account or carry out the purchase. Everything else, such as connecting platforms or adding content, is voluntary; without it, the corresponding features do not work.
If you are a customer of a business that uses StarPresence (for example the author of a review), that business is the controller of your data on the platform and your request is addressed to it. StarPresence does not respond on the merits to such requests; it forwards them to the business concerned without undue delay and acts only on its instruction, unless the law requires otherwise.
The right to deletion applies to personal data StarPresence holds. It does not require StarPresence to retract content already published to a third-party platform.
9. Legal Basis
We process platform data on these bases under Article 6(1) GDPR: to perform our contract with you (b), for your account, subscriptions, the features you use and support; to meet legal obligations (c), for example keeping invoices; our legitimate interests (f), the security of the platform and our websites, preventing abuse and improving the service; and your consent (a), for the campaign cookie. Business data we process on your behalf under the Data Processing Agreement, on your legal basis as its controller. The Swiss FADP and the data protection law applicable to you apply as the case may be.
10. Automated Decision-Making
Reply suggestions are generated algorithmically. With automatic publishing enabled, replies are published without renewed manual review in each individual case, but always based on your explicit setting per star rating or per content category you have explicitly enabled (for example short, clearly positive reviews in a specific language). By default, every reply requires your manual approval. So that StarPresence only suggests such an automation when it matches your approval behaviour, StarPresence continuously performs automated checks on which reviews and reply drafts meet the criteria of a content category; only limited check results, without the review texts, are stored. This is not a decision producing legal or similarly significant effects within the meaning of Art. 22 GDPR or Art. 21 nFADP, but the publication of content you have explicitly authorised in advance. You can deactivate auto-publishing at any time.
12. Businesses We Contact
This section is for businesses that do not use StarPresence and that we contact to offer our service, and for the people named in their data. StarPresence LLC is the controller of this data.
What we collect
From public sources: the business's name, address, telephone number, website, category, Google rating and number of reviews; a selection of its public Google reviews with their authors' names; and facts from its website. From its website, for example its contact page or legal notice: the e-mail addresses it publishes. The name of the owner or a contact person, with the public source where we found it. When we write to you: the e-mail we sent, whether you clicked a link in it, your reply, and whether the e-mail bounced or you unsubscribed.
How we use it
To find businesses that StarPresence could help, to prepare an analysis of their reviews and website with an example reply written by AI to one of their reviews, and to send an e-mail offering our service, with up to two follow-up e-mails. If you later sign up and Google confirms that you manage the business, we use the facts from your website to set up your account.
Who receives it
Search providers receive search terms, such as a category and a postcode, and website addresses. Our AI provider in the USA processes the review texts with their authors' names and the website text to prepare the analysis and the example reply. An e-mail delivery provider in the USA delivers our e-mails. Our hosting providers store the data (section 6).
Legal basis
Our legitimate interest in offering our service to businesses (Article 6(1)(f) GDPR) and, under the Swiss FADP, our overriding private interest. You can object at any time.
How long we keep it
A business we have not contacted is deleted after 180 days. A business we have contacted is kept until you object or ask us to delete it.
Unsubscribing and deletion
Every e-mail we send has an unsubscribe link. To have your business's data deleted, write to [email protected].
13. TikTok
StarPresence uses TikTok's developer services when you connect a TikTok account. TikTok's own privacy policy describes how TikTok handles data.
What we access
When you connect an account, TikTok shows you a consent screen. StarPresence asks for these permissions. You can decline the three marked optional: StarPresence needs the first three to connect, and each optional one only switches on what it is listed for:
user.info.basic(required): to identify the account and show its name. TikTok sends the account's identifiers, display name and profile picture; StarPresence stores one identifier and the display name, not the picture.video.publish(required): to publish a video or photo post you approved directly to the account. Before each post, StarPresence reads the posting options TikTok offers for the account (who may view the post, whether comments, duets and stitches are allowed, the longest video allowed, and the account's nickname and username), so that you can choose among them.video.upload(required): to send a post you approved to your TikTok inbox as a draft, which you finish and publish in the TikTok app.user.info.profile(optional): to show you your username, bio, profile link and verified mark; StarPresence shows them and does not store them.user.info.stats(optional): to show you your account's figures; we read its follower, following, like and video counts once a day.video.list(optional): to show you the figures of your newest videos; we read the identifiers and publication times of up to 20 of them and their view, like, comment and share counts. StarPresence does not store your videos, their captions or their comments.
How we use it
We use TikTok data only to show you your account and its figures in StarPresence, to publish what you have approved, and to keep the connection working. A post goes to TikTok only after a person in your organisation has approved it, together with the options TikTok asks for. StarPresence does not send your TikTok profile, figures or video identifiers to its AI providers. An AI agent you authorise receives the TikTok data you let it read, as described below. Should that change, we will update this policy before it does.
Who sees it
In StarPresence, TikTok data is visible to the members of your organisation who have access to it. If you authorise your own AI agent to use StarPresence for you, that agent can read your TikTok profile and figures. StarPresence's administrators access the data only to fix a technical problem, to investigate a security incident or to answer your support request. Access through our internal administration tools is recorded; direct database access is not recorded individually. Apart from TikTok and an AI agent you authorise, the only parties that handle TikTok data are the hosting providers that run StarPresence for us (section 3); TikTok fetches the media files you post from our storage. We do not sell TikTok data, we do not use it for advertising or to build profiles of people, and we do not allow third parties to show content or advertisements based on it.
How long we keep it
- Figures: StarPresence deletes each stored day of figures 25 days after it was last updated.
- Access tokens: stored encrypted, until you disconnect the account in StarPresence.
- The account's identifier and name: kept so that you can connect the same account again and keep your history, until your StarPresence account is deleted.
- Posts: the record of each post (TikTok's publish identifier, its status and, if it failed, TikTok's reason) and the options you chose are kept as part of your account's history until the account is deleted.
- Notifications TikTok sends us, for example about the status of a post or about the removal of access: 30 days.
Deleting your data
When you disconnect the account in StarPresence, it deletes at once the stored figures and its stored access tokens. It keeps the account's identifier and name and the records of your posts, so that you can connect the same account again and keep your history. If you cannot disconnect the account, write to [email protected] and we will delete the data as soon as possible and within 7 days. If you delete your StarPresence account, the TikTok data we store is erased with the account, once the 30 days in which it can be restored have passed (section 4). Deleting the data StarPresence stores does not affect any data stored by TikTok; to delete a post or other data on TikTok, use the TikTok app.
Revoking access
In addition to disconnecting the account in StarPresence, you can remove StarPresence's access at any time in your TikTok account's settings, where TikTok lists the apps you have given access. StarPresence does not currently ask TikTok to end the permission when you disconnect, so TikTok keeps listing it there until you remove it. If you remove access there, StarPresence can no longer read your account or post to it. It keeps its stored tokens, which no longer work, until you disconnect the account in StarPresence, and the figures it already holds are deleted 25 days after their last update.
Cookies and similar technologies
StarPresence's TikTok features set no cookies and store or read nothing on your device beyond what section 5 describes. StarPresence does not embed TikTok videos or players.
Questions and complaints
If you have a question or a complaint about how StarPresence handles TikTok data, write to [email protected].