Privacy Policy
This Privacy Policy explains what data 9SPACE Ambassador Platform collects from TikTok and how we use it.
Effective date: April 23, 2026
1. Who We Are
9SPACE Ambassador Platform is operated by 9SPACE Agency, a digital marketing agency based in Vietnam. We are the data controller responsible for the personal information processed through the Service.
Contact: hi9space@gmail.com
2. What Data We Collect
2.1 Information you provide directly
- Name, email address, phone number, home address (for shipping campaign samples).
- Social handle on other platforms (Facebook, Instagram, Shopee) if you voluntarily provide them.
- Campaign-related submissions (review links, notes, screenshots).
2.2 Information collected via the TikTok API
When you connect your TikTok account, we use the official TikTok Login Kit and Display API to read the following fields under the scopes you approve:
| Field |
Scope |
Purpose |
open_id, union_id |
user.info.basic |
Uniquely identify your TikTok account inside our database. |
display_name, avatar_url, bio_description, profile_deep_link |
user.info.basic |
Show your TikTok profile inside the KOC admin console. |
video list metadata (video id, cover image, create time, share url, title, duration) |
video.list |
Match your submitted campaign video URLs to your account and retrieve performance metrics. |
view_count, like_count, comment_count, share_count |
video.list |
Calculate campaign performance reports and KOC payouts. |
We do not request access to your direct messages, follower list, private videos, or email address via TikTok.
2.3 Automatically collected information
- Basic server logs (IP address, user agent, timestamp) for security and debugging, retained for up to 30 days.
- Session cookies required to keep you logged in.
3. How We Use Your Data
- Verify that you are the rightful owner of a TikTok account invited to a campaign.
- Retrieve and display aggregated metrics of videos you post as part of an approved campaign.
- Compute affiliate payouts and campaign performance reports.
- Communicate with you about campaign briefs, payments, and operational updates.
- Comply with legal and regulatory obligations in Vietnam.
We do not use your data for advertising targeting and we do not sell your data to third parties.
4. Legal Basis (GDPR / similar)
- Consent — when you connect your TikTok account and grant scopes.
- Contract — performance of a campaign partnership agreement between you and 9SPACE Agency.
- Legitimate interest — security, fraud prevention, and internal analytics.
5. Data Sharing
We share data only in the following cases:
- Internally — with 9SPACE Agency employees and contractors on a need-to-know basis.
- Service providers — hosting (DigitalOcean / Vietnamese VPS), email delivery, and error monitoring. These providers act as data processors under written agreement.
- Brand clients — aggregated, anonymized campaign metrics may be shared with the brand sponsoring a specific campaign you participated in, but never raw TikTok credentials or tokens.
- Legal obligations — if required by law, court order, or to protect rights and safety.
6. Data Retention
- Account data is retained while your partnership with 9SPACE Agency is active.
- Campaign data is retained for up to 3 years after the campaign closes (for accounting and tax purposes).
- TikTok access tokens are stored encrypted and rotated per TikTok’s token lifetime; refresh tokens are deleted immediately when you disconnect.
- Server logs are deleted after 30 days.
7. Security
We protect your data using HTTPS-only transport, encrypted database storage for sensitive fields, role-based access control, and principle-of-least-privilege. No method of transmission over the Internet is 100% secure, but we follow industry-standard practices.
8. Your Rights
Depending on your jurisdiction, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectify — correct inaccurate information.
- Delete — request deletion of your account and associated data (subject to legal retention requirements).
- Revoke consent — disconnect your TikTok account at any time through the TikTok app settings or by emailing us. Revocation stops all new data collection immediately.
- Data portability — receive your data in a machine-readable format.
To exercise any of these rights, email hi9space@gmail.com. We will respond within 30 days.
9. Children's Privacy
The Service is not intended for users under 18. We do not knowingly collect data from minors. If you believe we have inadvertently done so, please contact us and we will delete it promptly.
10. International Data Transfers
Your data is stored on servers located in Vietnam. We do not transfer your personal data outside of Vietnam for processing. If this changes in the future, we will update this Policy and rely on appropriate safeguards (standard contractual clauses or equivalent).
11. Changes to This Policy
We may update this Policy from time to time. Material changes will be communicated via email at least 7 days before they take effect.
12. Contact
For any privacy-related questions, please contact: