Privacy Policy
Last updated 28 July 2026
This policy explains what data Rilievo Analytics collects when a
creator connects their TikTok account, what we do with it, who we share it
with, and how a creator can get it deleted.
In short. We read the posts on a connected TikTok account and
their view, like, comment and share counts, and we report those numbers to the
brand running the campaign the creator agreed to work on. We cannot post,
change or delete anything on a creator's account. We never see a TikTok
password. A creator can disconnect at any time, and we then delete their data.
1. Who we are
Rilievo Analytics is operated by
RILIEVO ANALYTICS, Via Annibale Rosato 244, Milano, 22444
("we", "us"). We are the data controller for the personal data described
in this policy.
For any privacy question or request, contact
privacy@rilievo-analytics.com.
2. Who this policy covers
-
Creators who connect their TikTok account to
Rilievo Analytics so that their campaign post performance can be
reported to a brand.
-
Brand and agency users who receive campaign performance
reports from us.
3. What we collect from TikTok
When a creator authorizes Rilievo Analytics, TikTok grants us
read-only access to the following, and nothing else.
Account information
- The account's TikTok identifiers (open_id and,
where provided, union_id)
- The account's username
- The account's display name and avatar image URL
-
The account's audience figures: follower count, following count, total
likes received, and number of posts. These are used to express campaign
performance relative to audience size — for example, how far a post
travelled compared with the creator's own following.
Post information
- Post identifier, publish time, and public link
- Post caption or title, duration, and thumbnail image URL
- View count, like count, comment count and share count
Access credentials
-
The access token and refresh token TikTok issues for the connection. These
are encrypted at rest and are used only to read the data
listed above.
What we do not collect. We do not receive or store a creator's
TikTok password. We do not collect direct messages, drafts, private or unpublished
posts, comment contents, follower lists, or the identities of people who
interact with a post. We do not have permission to publish, edit or delete
content, and we do not request it.
4. Why we use it, and on what basis
We use this data for one purpose: to produce a performance report for the
marketing campaign the creator has agreed to take part in, and to make that
report available to the brand running it.
Where the GDPR applies, our legal basis is the creator's
consent, given at the moment they authorize the connection on
TikTok's own screen. Consent can be withdrawn at any time (see section 8),
which does not affect processing carried out before withdrawal.
We do not use this data for advertising, do not build
behavioural profiles, do not use it to train machine-learning models, and do
not sell it.
5. Who we share it with
-
The brand running the campaign. Each brand receives a report
containing only the creators and posts associated with its own campaign.
Brands do not see other brands' campaigns.
-
Our hosting provider, which stores the application database
on our behalf.
We do not use any third-party analytics, advertising or tracking service, and
creator data is not transferred to any other processor. We disclose data
outside the cases above only where legally required.
6. How long we keep it
-
Account information and tokens — for as long as the account
remains connected. Deleted within 30 days of disconnection.
-
Post metrics — for the duration of the campaign and up to
12 months afterwards, so that brands can review completed campaigns.
-
Where a creator asks for deletion, we delete on request rather than waiting
for these periods to elapse.
7. How we protect it
- TikTok access and refresh tokens are encrypted at rest.
- All traffic to and from this service is encrypted in transit (HTTPS).
-
Access to the operator dashboard is restricted to authorised staff of
RILIEVO ANALYTICS.
-
We request the narrowest TikTok permissions that make the product work, so a
compromise of our systems cannot be used to alter a creator's account.
8. A creator's choices and rights
Disconnecting
A creator can disconnect at any time, in either of two ways:
- on our disconnect page; or
-
in the TikTok app, under Settings and privacy → Security and permissions
→ Manage app permissions.
Disconnecting stops all further collection immediately. We then delete the
stored account information and tokens.
Rights
Subject to applicable law, a creator may ask us to: confirm what data we hold
about them; provide a copy of it; correct it; delete it; restrict or object to
our use of it; or provide it in a portable format. Write to
privacy@rilievo-analytics.com
and we will respond within 30 days.
Creators in the EU/EEA also have the right to lodge a complaint with their
local data protection authority.
9. International transfers
Our processors may store data outside the country where a creator lives. Where
data leaves the EEA, we rely on the European Commission's Standard Contractual
Clauses or an equivalent transfer mechanism.
10. Children
Rilievo Analytics is a business tool and is not directed at children.
We do not knowingly connect accounts belonging to anyone under 18. If we learn
that we have, we delete the connection and its data.
11. TikTok's own handling of data
Rilievo Analytics uses TikTok's official APIs. TikTok's own processing
of a creator's data is governed by
TikTok's
Privacy Policy, which is separate from this one.
12. Changes
If we change this policy we will update the date at the top of this page. If a
change materially affects how we use creator data, we will notify connected
creators by email before it takes effect.
13. Contact
RILIEVO ANALYTICS
Via Annibale Rosato 244, Milano, 22444
privacy@rilievo-analytics.com
Rilievo Analytics