Privacy Policy

Last updated 28 July 2026

This policy explains what data Rilievo Analytics collects when a creator connects their TikTok account, what we do with it, who we share it with, and how a creator can get it deleted.

In short. We read the posts on a connected TikTok account and their view, like, comment and share counts, and we report those numbers to the brand running the campaign the creator agreed to work on. We cannot post, change or delete anything on a creator's account. We never see a TikTok password. A creator can disconnect at any time, and we then delete their data.

1. Who we are

Rilievo Analytics is operated by RILIEVO ANALYTICS # Public HTTPS origin the site is served from. No trailing slash. # Must match the redirect URI you register in the TikTok developer portal. RILIEVO_BASE_URL=https://rilievo-analytics.com", Via Annibale Rosato 244, Milano, 22444 ("we", "us"). We are the data controller for the personal data described in this policy.

For any privacy question or request, contact privacy@rilievo-analytics.com.

2. Who this policy covers

Creators who connect their TikTok account to Rilievo Analytics so that their campaign post performance can be reported to a brand.
Brand and agency users who receive campaign performance reports from us.

3. What we collect from TikTok

When a creator authorizes Rilievo Analytics, TikTok grants us read-only access to the following, and nothing else.

Account information

The account's TikTok identifiers (open_id and, where provided, union_id)
The account's username
The account's display name and avatar image URL

Post information

Post identifier, publish time, and public link
Post caption or title, duration, and thumbnail image URL
View count, like count, comment count and share count

Access credentials

The access token and refresh token TikTok issues for the connection. These are encrypted at rest and are used only to read the data listed above.

What we do not collect. We do not receive or store a creator's TikTok password. We do not collect direct messages, drafts, private or unpublished posts, comment contents, follower lists, or the identities of people who interact with a post. We do not have permission to publish, edit or delete content, and we do not request it.

4. Why we use it, and on what basis

We use this data for one purpose: to produce a performance report for the marketing campaign the creator has agreed to take part in, and to make that report available to the brand running it.

Where the GDPR applies, our legal basis is the creator's consent, given at the moment they authorize the connection on TikTok's own screen. Consent can be withdrawn at any time (see section 8), which does not affect processing carried out before withdrawal.

We do not use this data for advertising, do not build behavioural profiles, do not use it to train machine-learning models, and do not sell it.

5. Who we share it with

The brand running the campaign. Each brand receives a report containing only the creators and posts associated with its own campaign. Brands do not see other brands' campaigns.
Our hosting provider, which stores the application database on our behalf.

We do not use any third-party analytics, advertising or tracking service, and creator data is not transferred to any other processor. We disclose data outside the cases above only where legally required.

6. How long we keep it

Account information and tokens — for as long as the account remains connected. Deleted within 30 days of disconnection.
Post metrics — for the duration of the campaign and up to 12 months afterwards, so that brands can review completed campaigns.
Where a creator asks for deletion, we delete on request rather than waiting for these periods to elapse.

7. How we protect it

TikTok access and refresh tokens are encrypted at rest.
All traffic to and from this service is encrypted in transit (HTTPS).
Access to the operator dashboard is restricted to authorised staff of RILIEVO ANALYTICS # Public HTTPS origin the site is served from. No trailing slash. # Must match the redirect URI you register in the TikTok developer portal. RILIEVO_BASE_URL=https://rilievo-analytics.com".
We request the narrowest TikTok permissions that make the product work, so a compromise of our systems cannot be used to alter a creator's account.

8. A creator's choices and rights

Disconnecting

A creator can disconnect at any time, in either of two ways:

on our disconnect page; or
in the TikTok app, under Settings and privacy → Security and permissions → Manage app permissions.

Disconnecting stops all further collection immediately. We then delete the stored account information and tokens.

Rights

Subject to applicable law, a creator may ask us to: confirm what data we hold about them; provide a copy of it; correct it; delete it; restrict or object to our use of it; or provide it in a portable format. Write to privacy@rilievo-analytics.com and we will respond within 30 days.

Creators in the EU/EEA also have the right to lodge a complaint with their local data protection authority.

9. International transfers

Our processors may store data outside the country where a creator lives. Where data leaves the EEA, we rely on the European Commission's Standard Contractual Clauses or an equivalent transfer mechanism.

10. Children

Rilievo Analytics is a business tool and is not directed at children. We do not knowingly connect accounts belonging to anyone under 18. If we learn that we have, we delete the connection and its data.

11. TikTok's own handling of data

Rilievo Analytics uses TikTok's official APIs. TikTok's own processing of a creator's data is governed by TikTok's Privacy Policy, which is separate from this one.

12. Changes

If we change this policy we will update the date at the top of this page. If a change materially affects how we use creator data, we will notify connected creators by email before it takes effect.

13. Contact

RILIEVO ANALYTICS # Public HTTPS origin the site is served from. No trailing slash. # Must match the redirect URI you register in the TikTok developer portal. RILIEVO_BASE_URL=https://rilievo-analytics.com"
Via Annibale Rosato 244, Milano, 22444
privacy@rilievo-analytics.com