Privacy policy
Nightini TikTok App Privacy Policy
Effective date: 22 June 2026
This Privacy Policy explains how Nightini UG (haftungsbeschränkt) (“Nightini”, “we”, “us”) processes information when you use the Nightini TikTok Content Tool at https://nightini.com/pages/tiktok-callback.
1. Controller and contact
Nightini UG (haftungsbeschränkt)
Kolonnenstr. 8, 10827 Berlin, Germany
Email: info@nightini.com
Commercial register: HRB 273965 B, Amtsgericht Charlottenburg
VAT ID: DE454295243
2. Information received from TikTok
When you choose to connect a TikTok account, TikTok may provide:
- an authorization code and access credentials required for the authorized connection;
- your TikTok open ID and basic profile information made available through the
user.info.basicscope, such as display name and avatar; - authorization status, token expiry, and revocation information.
Nightini does not receive your TikTok password.
3. Content and technical information
When you use the Content Posting API, we process the product images or videos, captions, and related metadata that you select for transfer to TikTok. We may also process limited technical logs such as timestamps, request status, error messages, browser type, and IP address for security and troubleshooting.
4. How we use information
- to connect the TikTok account you authorize;
- to identify the connected account and display the connection status;
- to transfer creator-selected Nightini media to TikTok as a draft using
video.upload; - to prevent fraud, secure the service, troubleshoot errors, and comply with law;
- to respond to privacy and support requests.
The tool does not automatically publish content. You review, edit, select music, and publish inside TikTok.
5. Legal bases
Where the GDPR applies, processing is based on your consent and authorization (Article 6(1)(a)), performance of the requested service (Article 6(1)(b)), compliance with legal obligations (Article 6(1)(c)), and our legitimate interests in security and service operation (Article 6(1)(f)). You may withdraw authorization at any time.
6. Sharing and service providers
We share information only as necessary with TikTok to provide Login Kit and Content Posting API functionality, with Shopify for website hosting, and with technical service providers acting under our instructions. We may disclose information where required by law or to protect users, Nightini, or the public. We do not sell TikTok user data or use it for third-party advertising.
7. Retention and deletion
- OAuth credentials are retained only while the connection is active or as technically necessary, and are deleted or invalidated after revocation, expiry, or a verified deletion request.
- Media selected for upload is retained only for the time needed to transfer it to TikTok and for short-term error recovery, normally no longer than 30 days.
- Security and diagnostic logs are normally retained for no longer than 90 days unless a longer period is required by law or to investigate abuse.
8. Your choices and rights
You can revoke Nightini's access through your TikTok account settings. You may also request access, correction, deletion, restriction, portability, or object to processing by emailing info@nightini.com. We may need to verify your identity. You may lodge a complaint with your competent data protection authority.
9. International transfers
TikTok, Shopify, or other service providers may process information outside your country. Where required, we use recognized safeguards such as adequacy decisions or standard contractual clauses.
10. Security
We use reasonable technical and organizational safeguards designed to protect information. No internet service can guarantee absolute security.
11. Children
The tool is not directed to children. Users must meet TikTok's minimum age requirements and be authorized to use the connected account.
12. Third-party service
TikTok is an independent third-party platform. TikTok's processing is governed by TikTok's own privacy policy and terms. Nightini is not sponsored or endorsed by TikTok.
13. Changes
We may update this policy to reflect operational, legal, or platform changes. The effective date above will be updated when changes are made.