Privacy Policy
1. Data controller
The data controller is Hugo Stawiarski, sole trader registered in France under company number (SIREN) 934 360 868, operator of the Deklip service at deklip.com. For any question about your data, or to exercise your rights, write to deklip.com@gmail.com. No Data Protection Officer has been appointed, as appointment is not mandatory given the nature of the activity. This English version is provided for information; the French version prevails in case of discrepancy.
2. Data you provide
Account: email address, password (stored hashed, never in clear text), and the qualification profile you select at sign-up. If you sign in with Google: your Google identifier, email address and display name. Content: product briefs, website addresses you ask us to analyse, scripts, angles, edits, and the images, videos and audio files you upload. Billing: billing name and payment history. Card details are entered directly with Stripe and never pass through our servers. Correspondence: the content of messages sent through the contact form or by email.
3. Data collected automatically
Technical logs: IP address, browser type, timestamps and pages visited, kept for security and troubleshooting. Service usage: credits consumed, generation history, task status. Audience measurement: aggregated statistics collected without cookies and without advertising identifiers (Rybbit), and, only if you consent through the banner, Google Analytics with IP anonymisation.
4. Data obtained from your TikTok account
If, and only if, you choose to connect your TikTok account, we access, through TikTok's official API, the data covered by the permissions you grant: the account's technical identifier (open_id), display name and profile picture (user.info.basic, user.info.profile), public account statistics such as follower count (user.info.stats), and the list of your recent posts including their identifier, title, thumbnail, share link, duration, creation date, view count, like count, comment count and share count (video.list). The video.upload and video.publish permissions allow us to send videos you created in Deklip to your account, at your request. We never access your direct messages, your named follower list, or the content of any other account.
5. How TikTok data is used
This data is used for three purposes only: displaying your connected account in the interface so you know which account you are publishing to, publishing the videos you explicitly ask us to publish, and showing the performance of your posts in your dashboard so you can compare your creative angles. It is never sold, rented, licensed, transferred, used for advertising purposes, used to train any artificial intelligence model, or combined with data belonging to other users. No content is ever published without an explicit action from you.
6. Retention and deletion of TikTok data
Access and refresh tokens are encrypted at rest (AES) on our servers and are never exposed in the interface or in logs. TikTok account data is retained only while the connection remains active. It is deleted from our databases immediately and permanently in three cases: when you disconnect the account from the Connections page of your account area, when you revoke the authorisation from your TikTok account settings, in which case TikTok notifies us and deletion is automatic, and when you delete your Deklip account. No backup copy is retained beyond 30 days after deletion.
7. Purposes and legal bases
Providing the service, managing your account, credits and generations: performance of the contract. Invoicing, accounting and tax obligations: legal obligation. Connecting third-party platforms and publishing content: performance of the contract, on the basis of the explicit authorisation you grant. Security, fraud and abuse prevention, service improvement: legitimate interest. Non-essential audience measurement cookies and the newsletter: your consent, which you may withdraw at any time.
8. Retention periods
Account and associated content: for the lifetime of the account, then 30 days after deletion, after which erasure is permanent. Videos and media you produce: for the lifetime of the account, unless you delete them manually, in which case deletion is immediate. Connected account data: see section 6. Technical logs: 12 months. Invoices and accounting records: 10 years, as required by the French Commercial Code. Contact messages: 3 years from the last exchange. Newsletter subscriptions: until you unsubscribe, then 3 years at most.
9. Recipients and processors
Your data is accessible only to the operator and to the providers strictly necessary to run the service, each bound by a data processing agreement. Hosting and storage: OVH SAS, France. Payments: Stripe Payments Europe Ltd, Ireland. Transactional email: Brevo, France. Text, image, voice and transcription generation: fal.ai, which runs the models used by the service. Analysis of product pages you submit: Apify. Media libraries queried at your request: Pexels, Pixabay, Openverse, Jamendo. Audience measurement: Rybbit, self-hosted on our own infrastructure, and Google Analytics only after consent. No data is sold or passed to data brokers.
10. International transfers
Hosting, storage and the database are located within the European Union. Some inference and measurement providers may process data from the United States. Such transfers are governed by the European Commission's Standard Contractual Clauses or by an adequacy decision, and are limited to the data strictly necessary to perform the relevant service.
11. Security
Traffic to and from the service is encrypted in transit (TLS). Passwords are hashed. Third-party platform access tokens are encrypted at rest. Server access is restricted and logged, and database backups are encrypted. In the event of a data breach likely to result in a high risk to your rights, you will be informed without undue delay and the French supervisory authority (CNIL) will be notified within 72 hours.
12. Your rights
You have the right to access, rectify, erase, restrict and object to the processing of your data, and the right to data portability. You may withdraw your consent at any time for processing that relies on it, without affecting the lawfulness of processing already carried out. To exercise these rights, write to deklip.com@gmail.com: you will receive a reply within one month at the latest. If you believe your rights are not being respected, you may lodge a complaint with the CNIL, 3 place de Fontenoy, 75007 Paris, France, cnil.fr.
13. Deleting your data
To disconnect a social account: go to your account area, Connections page, and use the disconnect button. The associated data is deleted immediately. To delete your entire Deklip account and all related data: write to deklip.com@gmail.com from the account's email address. Deletion is completed within 30 days, except for accounting records that the law requires us to keep.
14. Cookies
A strictly necessary session cookie keeps you signed in: it cannot be refused without preventing the service from working. Google Analytics cookies are set only after your explicit consent through the banner. You can change your choice at any time through the Cookies link in the footer. Rybbit audience measurement works without cookies and without persistent identifiers.
15. Minors
The service is not intended for anyone under 18, and no data is knowingly collected from a minor. If you become aware that a minor has created an account, report it to deklip.com@gmail.com and the account and its data will be deleted.
16. Automated decision-making
The service generates content automatically, but makes no automated decision producing legal effects concerning you, and performs no profiling intended to evaluate your personality or creditworthiness.
17. Changes to this policy
This policy may change to reflect changes to the service or to applicable regulation. Any substantial change is notified by email at least 30 days before it takes effect. The date of the latest update appears at the bottom of this page.
Last updated: 30 July 2026. Terms of Service