Privacy Policy
This Privacy Policy explains how Boqin Technology Co., Ltd. (“we”, “us”, “our”) collects, accesses, uses, stores, shares and deletes information in connection with the Ad Data Insights application and this website (together, the “Service”).
Ad Data Insights is a reporting and analytics tool for advertising accounts. It connects to TikTok Ads through TikTok's official Marketing API (also called the TikTok API for Business) only after an authorized user grants permission, and it uses that access to retrieve, organize and analyze advertising performance data for the connected advertiser account.
1. Who we are
The Service is operated by Boqin Technology Co., Ltd.
For the account and contact information described in section 3.1, we act as the data controller. For advertising data that belongs to a customer's advertiser account, the customer (the advertiser or the agency acting for the advertiser) is the controller and we act as a processor, processing that data only on the customer's documented instructions and for the purposes described in this policy.
Privacy contact: daizhenghui@boqin-tech.com.
2. Scope of this policy
This policy applies to:
- this website and any pages under it;
- the Ad Data Insights application, including its authorization flow and reporting features;
- communications you send to us about the Service.
It does not apply to TikTok, Google, Meta or any other third-party platform. Those platforms process information under their own privacy policies and terms, and we do not control their practices.
3. Information we collect
3.1 Information you give us
- Contact details — name, work email address, company name and any message content when you contact us, request a demo or ask for support.
- Account details — the name and email address of the person who creates a workspace and the users they invite, where the Service provides user accounts.
- Billing details — where a paid plan is purchased, billing contact and tax information. Card payments are processed by our payment provider; we do not store full card numbers.
3.2 TikTok authorization and account data
When you connect an advertiser account, TikTok's authorization flow returns:
- the advertiser account ID and account name, and the Business Center ID where applicable;
- the TikTok user ID of the person who authorized the connection;
- OAuth 2.0 access and refresh tokens, the permission scopes granted, and the authorization and expiry times.
We never receive or store your TikTok password, and we do not ask for it. Authorization takes place on TikTok's own domain.
3.3 Advertising performance data
For each authorized advertiser account, and only within the scopes granted, we retrieve:
- campaign, ad group and ad identifiers, names, status and settings;
- creative metadata associated with those campaigns and ads;
- performance metrics such as impressions, reach, clicks, spend, conversions, video views and the reporting dates and dimensions attached to them;
- currency, time zone and attribution settings needed to interpret the metrics correctly.
We do not access TikTok user profiles, direct messages, organic content, follower lists or audience identity data. The Service is a reporting tool, not a TikTok account management or content tool.
3.4 Technical and log data
When you use the website or the application, our hosting and infrastructure providers record standard technical information: IP address, browser type and user agent, request timestamps, the pages or endpoints requested, response status and error details. We use this information for security, abuse prevention and troubleshooting.
3.5 Information we do not collect
- Special category data such as health, biometric or political opinions.
- TikTok user personal data, direct messages or organic content.
- Payment card numbers — these are handled by the payment processor.
- Precise location data from your device.
4. How we use information
| Purpose | Information used |
|---|---|
| Authorize and maintain the connection to your advertiser account | 3.2 |
| Retrieve advertising data and generate reports, analyses and exports | 3.2, 3.3 |
| Provide support and respond to enquiries | 3.1, 3.2, 3.4 |
| Secure the Service, detect abuse and investigate incidents | 3.1, 3.2, 3.4 |
| Bill and administer paid plans | 3.1 |
| Comply with legal, tax and regulatory obligations | 3.1, 3.2, 3.4 |
| Improve features using aggregated, de-identified usage information | 3.3, 3.4 |
We do not sell personal information or advertising data. We do not use TikTok advertising data for cross-context behavioural advertising, audience building, profiling or resale, and we do not combine it with data from other advertisers.
5. Legal bases
Where the GDPR or comparable legislation applies, we rely on:
- Performance of a contract — to provide the Service you or your organization have engaged us for.
- Legitimate interests — to secure the Service, prevent abuse, troubleshoot, and improve our product, balanced against your rights.
- Legal obligation — to keep records required by tax, accounting and other laws.
- Consent — where we ask for it explicitly, for example for optional product communications. You may withdraw consent at any time.
6. Cookies and tracking
This website does not set advertising cookies and does not include third-party analytics, tracking pixels or social media embeds. The application uses only the cookies or local storage strictly necessary to keep a signed-in session working and to protect against request forgery. If we introduce optional analytics in the future, we will update this policy and, where required, ask for consent first.
7. Sharing and service providers
We share information only as needed to run the Service, and only with providers bound by confidentiality and data protection terms:
| Recipient | Purpose |
|---|---|
| Cloud hosting and infrastructure provider (GitHub, Inc.) | Hosting the website and application, storing encrypted data |
| Email and support provider | Receiving and answering your messages |
| Payment processor | Processing subscription payments, where a paid plan is used |
| Professional advisers and auditors | Legal, accounting and compliance advice, under confidentiality |
| Authorities and courts | Where required by law or to establish, exercise or defend legal claims |
We do not share advertising data with other advertisers, and we do not provide it to data brokers. If we engage a new subprocessor that processes customer advertising data, we will update this policy before that processing begins. Where we process personal data on your behalf, a data processing agreement is available on request at daizhenghui@boqin-tech.com.
8. International transfers
We may process information in countries other than the one where you are located, including where our hosting and support providers operate. Where information protected by the GDPR is transferred outside the European Economic Area, we rely on an adequacy decision or on Standard Contractual Clauses together with supplementary technical and organizational measures. You can ask us for a copy of the relevant safeguards at daizhenghui@boqin-tech.com.
9. Retention
| Information | Retention period |
|---|---|
| Advertiser connection and account identifiers | Until you disconnect the account, then 30 days |
| OAuth access and refresh tokens | Until you revoke access, then 30 days |
| Campaign structure and performance data | Up to 12 months from retrieval, unless you delete it earlier |
| Reports and exports generated by you | Up to 12 months, or until you delete them |
| Service and security logs | 90 days |
| Support correspondence | 24 months from the last message |
| Billing and tax records | As required by applicable law (typically 7 years) |
When a retention period ends, we delete or irreversibly anonymize the information. Residual copies may remain in encrypted backups for up to 90 days before being overwritten in the normal backup cycle.
10. Security
- TLS 1.2 or higher for all data in transit between your browser, our servers and the TikTok API.
- Encryption at rest for stored tokens and reporting data; tokens are held in a dedicated secrets store, not in application logs.
- Access limited to personnel who need it, protected by multi-factor authentication and reviewed periodically.
- Customer data is logically separated, and API calls are scoped to the advertiser account that granted access.
- Logging and monitoring of administrative actions and authentication events.
No system is perfectly secure. If we become aware of a personal data breach that is likely to result in a risk to your rights, we will notify affected customers and, where required, the competent supervisory authority without undue delay.
11. Your rights
Subject to applicable law, you may:
- request access to the personal information we hold about you;
- ask us to correct inaccurate information;
- ask us to delete information;
- ask us to restrict or object to processing;
- request a portable copy of information you provided;
- withdraw consent where processing is based on consent;
- lodge a complaint with your local data protection authority.
Send requests to daizhenghui@boqin-tech.com. We will acknowledge within 5 business days and respond within 30 days, unless the request is complex, in which case we will tell you why an extension is needed. We may ask for information to verify that you are entitled to make the request. Where we act as a processor, we will refer the request to the advertiser that controls the data.
12. Revoking access and deleting data
You can stop our access to a TikTok advertiser account at any time:
- In TikTok Ads Manager or TikTok Business Center, open the settings for the advertiser account and remove Ad Data Insights from the connected applications or authorized apps.
- Or disconnect the account inside Ad Data Insights, where that option is available.
- Or email daizhenghui@boqin-tech.com with the advertiser ID and the account email used to authorize the connection.
Once access is revoked, we stop making API calls for that account. We delete the associated tokens within 30 days and the stored reporting data within 30 days, except for records we must keep to comply with law. Step-by-step instructions are on our data deletion page.
Deleting data in Ad Data Insights does not delete anything inside TikTok Ads Manager. Data held by TikTok is governed by TikTok's own privacy policy.
13. Children
The Service is a business tool intended for users aged 18 or over. It is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us and we will delete it.
14. Changes to this policy
We may update this policy when the Service, our providers or the law change. The effective date at the top of the page will be revised, and material changes will be communicated by email to account administrators or by a notice on this website before they take effect. Continued use of the Service after the effective date means you accept the updated policy.
15. Contact
Boqin Technology Co., Ltd.
Email: daizhenghui@boqin-tech.com
If you are in the European Economic Area, the United Kingdom or Switzerland and believe we have not resolved your concern, you may contact the supervisory authority in your country of residence.