Privacy Policy

This Privacy Policy explains how Roasprint ("Roasprint", "we", "us", or "our") collects, uses, stores, and protects information when you use our TikTok advertising management dashboard and related services (the "Service").

Roasprint is a tool that lets businesses connect their own TikTok ad accounts and manage their advertising. We access TikTok data only on your behalf and only to provide the features you use. We do not sell your data.

The Service is operated by Roasprint, based in Germany. For any privacy-related question you can reach us at support@roasprint.com.

For the purposes of applicable data protection laws, Roasprint acts as a data controller for account information, and as a data processor for the advertising data we handle on your behalf when you connect a TikTok ad account.

We collect only what we need to operate the Service:

Account information

• Your username and email address.
• A hashed password used to sign in.
• Account status, plan, and basic profile preferences.

TikTok advertising data

When you connect a TikTok ad account, we access advertising data through the official TikTok Marketing API, including:

• Ad account identifiers, names, currency, and balance information.
• Campaigns, ad groups, ads, and their settings (objectives, budgets, schedules, targeting, placements).
• Creatives you upload or reference, and creative metadata.
• Identities, instant forms, instant pages, and pixels associated with your accounts.
• Performance and reporting metrics such as spend, impressions, clicks, and conversions.

Technical & usage data

• IP address, browser type, device information, and approximate location derived from IP.
• Log data such as pages viewed, actions taken in the dashboard, and timestamps.
• Diagnostic data needed to keep the Service secure and reliable.

We handle these tokens as follows:

• Purpose-limited. Tokens are used only to perform actions you initiate in Roasprint — for example, reading your campaigns or creating an ad — within the scopes you authorized during connection.
• Stored securely. Tokens are stored in our database and are never exposed in our front-end code, URLs, logs, or to other customers.
• Never sold or shared. We do not sell tokens or share them with third parties except infrastructure providers strictly necessary to run the Service.
• Revocable at any time. You can disconnect an ad account from within Roasprint, which removes the associated tokens from our systems. You may also revoke access directly from your TikTok account settings.

We request the minimum set of API permissions (scopes) needed for the features you use. If a feature requires additional scopes, you will be asked to re-authorize before it is enabled.

We use the data we collect to:

• Provide and operate the dashboard and its features.
• Authenticate you and keep your account secure.
• Display reporting and performance metrics for your connected accounts.
• Provide support and respond to your requests.
• Improve reliability, prevent abuse, and keep the Service safe.
• Meet legal obligations where applicable.

We do not use your advertising data to build advertising profiles of you, and we do not sell your data to anyone.

Your data is stored on our hosting infrastructure and protected with industry-standard measures, including encrypted connections (HTTPS/TLS), access controls limiting who can access production systems, and routine backups.

No method of transmission or storage is completely secure, but we work to protect your information and to limit the data we retain to what is necessary.

We share data only in these limited circumstances:

• With TikTok, through the Marketing API, to carry out the advertising actions you request.
• With service providers who help us operate the Service (for example, hosting), bound by confidentiality obligations and only for the purpose of providing their service to us.
• For legal reasons, where required by law, regulation, legal process, or to protect the rights, safety, and property of Roasprint, our users, or others.
• In a business transfer, if Roasprint is involved in a merger, acquisition, or sale of assets, in which case we will notify affected users.

We never sell your personal information or your advertising data.

We keep data only as long as needed for the purposes described in this policy:

• Account data is kept while your account is active.
• OAuth tokens are kept while the corresponding ad account is connected, and are removed when you disconnect the account or close your account.
• Advertising data cached for reporting is retained for a limited period and refreshed from TikTok; it is removed when you disconnect the account or on request.
• Logs and diagnostic data are retained for a short, rolling window for security and troubleshooting.

When you close your account, we delete or anonymize your data within a reasonable period, except where we are required to retain certain records by law.

On a verified deletion request we will:

• Disconnect any connected TikTok ad accounts and delete the associated OAuth tokens.
• Delete your account information and cached advertising data from our systems.
• Confirm completion to you within a reasonable period.

Deleting your data within Roasprint does not delete the underlying campaigns or assets in your TikTok ad account — those remain in TikTok and are managed under TikTok's own policies. You can also revoke Roasprint's access directly in your TikTok account settings.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact support@roasprint.com. You also have the right to lodge a complaint with your local data protection authority.

We use a small number of cookies and similar technologies that are necessary to keep you signed in, remember your preferences, and keep the Service secure. We do not use third-party advertising cookies on the dashboard. You can control cookies through your browser settings, though disabling essential cookies may affect functionality.

The Service is a business tool intended for users aged 18 and over. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service or by email. Continued use of the Service after changes take effect means you accept the updated policy.

If you have questions about this Privacy Policy or how we handle your data, contact us at:

• Email: support@roasprint.com
• Entity: Roasprint
• Location: Germany