Privacy Policy

1. Information we handle

• Account and purchase information, such as your email, authentication records, payment status, subscription identifiers, credit usage and preferences.
• Content you provide or create, such as product details, images, scripts, voice selections, audio, videos and project settings.
• Usage and technical information, such as session identifiers, page visits, funnel events, campaign source, browser and device type, approximate location and logs. Our funnel analytics stores a masked IP address; hosting and security providers may separately process network information.
• Information from social accounts you choose to connect, subject to the permissions you authorize.

2. TikTok Login Kit authorization

Halden uses TikTok Login Kit to let you authorize a TikTok account connection from Halden. You approve access on TikTok; Halden does not receive your TikTok password.

The current integration requests the user.info.basic and video.list scopes. It retrieves your TikTok account identifier, display name and avatar, and stores the authorized scopes and connection details to associate that account with your Halden account. The video-list permission allows access to authorized video information; the current connection flow retrieves basic profile information, not your private messages or contacts.

We use connected-account information to provide and manage the connection and supported account features. TikTok authorization alone does not post content, manage your TikTok Shop orders or guarantee commissions. We do not send the TikTok authorization tokens to video-generation providers as creative inputs.

3. Token handling and disconnection

TikTok returns access tokens and, when provided, refresh tokens. Halden stores these tokens encrypted in its server-side database, together with access-token expiration information. Tokens authorize API access and must not be shared. No security measure can guarantee complete protection.

You can withdraw Halden’s authorization using TikTok’s connected-app permissions. To request removal of the stored Halden connection, including its stored tokens and profile information, email halden_01@hotmail.com from your Halden account email. Halden does not currently provide an in-app TikTok disconnect button. Revoking TikTok access does not automatically delete your Halden account, projects or billing records, or cancel a subscription.

4. How information is used and shared

We process information to authenticate accounts, create and deliver videos, store projects, manage payments and credits, provide connected-account features, understand service usage, respond to requests and investigate errors or misuse.

Relevant service providers include Vercel for hosting; Supabase for authentication, database and media storage; Stripe for payments and subscriptions; and email delivery providers used by our authentication service. Depending on the selected workflow, content may be processed by AI providers such as OpenAI, Anthropic, OpenRouter, Fish Audio and ElevenLabs. Those providers receive inputs needed for the requested production steps and handle them under their own policies. Do not upload sensitive information you do not want processed by these services.

If you connect other supported social platforms, their APIs and privacy policies also apply. We may disclose information when necessary to comply with legal obligations or protect the service and its users. Service providers may process information in countries other than your own.

Stripe collects payment details through its payment fields. Halden handles payment and subscription references; it does not store your full card number or CVC.

5. Cookies, local storage and analytics

Halden uses cookies and browser storage for sign-in sessions, preferences, funnel progress and attribution. When configured, Meta Pixel sends browsing and conversion events to Meta to measure advertising performance. You can manage cookies and storage through your browser; blocking them may affect sign-in, saved progress or other features. Meta’s processing is governed by its own privacy policy.

6. Retention and deletion requests

Account records, projects and connected-account data are stored to operate the service. Retention can also depend on payment, security, legal and operational requirements. Halden does not currently publish a fixed retention period or provide an automatic account-deletion control.

To request access, correction or deletion of your information, or deletion of TikTok-related data stored by Halden, email halden_01@hotmail.com from your account email and describe your request. Do not send passwords, payment-card details or authorization tokens. We may need to verify your identity before acting. Some records may need to be retained for legal, accounting, security or dispute-related reasons; deletion from backup systems may not be immediate. Disconnecting or deleting data does not by itself cancel subscription billing.

7. Updates and contact

Updates to this policy will be posted here with a revised effective date. For privacy questions or requests, contact halden_01@hotmail.com.