KaminoStat
Privacy Policy
1. Who we are
KaminoStat is published and operated by Xavier Fabbro, entrepreneur individuel (EI), trading as Calantir Tech, SIREN 104 810 999, 4 place Patrick Devedjian, 92160 Antony, France ("Calantir Tech", "we"). Calantir Tech is the data controller for the processing described in this policy.
Contact for any privacy question or request: developer@calantirtech.com.
2. What this policy covers
It covers KaminoStat, a reporting tool that reads the organic statistics of a TikTok account with its owner's authorization, and the website calantirtech.com.
3. Data we receive from TikTok
When the owner of a TikTok account authorizes KaminoStat through TikTok's consent screen, we receive an access token and a refresh token, and we use them to read that account's own data through the TikTok API for Business:
| Category | Data |
|---|---|
| Account identity | Display name, username, account identifier |
| Account statistics | Followers count, profile views, video views, likes, comments, shares |
| Published videos | Video identifier, publication time, caption, share link, thumbnail link, views, likes, comments, shares |
| Video insights | Reach, video duration, total and average watch time, full-video watch rate, traffic (impression) sources |
We do not receive or request the TikTok password, private messages, the identity of followers or viewers, audience demographics, or any advertising data. KaminoStat does not publish or interact on TikTok.
4. Other data
- User accounts: name and email address of the people who sign in to KaminoStat to view reports.
- Reports: monthly reports generated from the statistics above.
- Website: calantirtech.com sets no cookies and uses no analytics. Our host processes technical logs (such as IP address) to deliver and secure the site.
- Emails: messages you send to our address.
5. Why we process this data
- To display the account's statistics and deliver its monthly performance report to the account owner. Legal basis: performance of the service requested by the account owner, who authorized access (GDPR art. 6(1)(b)).
- To keep the service secure and working. Legal basis: our legitimate interest (GDPR art. 6(1)(f)).
- To answer your messages and requests. Legal basis: our legitimate interest, or a legal obligation for rights requests.
We do not use TikTok data for advertising, profiling, or to train machine-learning models, and we never sell it.
6. How the data is protected
Access and refresh tokens are encrypted at rest and decrypted only inside server-side jobs that collect statistics or renew a token. Access to reports is limited to signed-in users who are authorized to see the account concerned.
7. Who receives the data
We share data only with the service providers that run KaminoStat on our behalf, under contract, and only as needed:
- Convex, Inc. (United States): application database and server-side processing.
- Cloudflare, Inc. (United States): hosting of this website and email forwarding.
- Resend, Inc. (United States): delivery of emails sent by the service.
- The AI model provider configured for the service: drafts the text of a monthly report from aggregated statistics, when that feature is used.
TikTok receives the API requests made with the tokens it issued. We may also disclose data when required by law.
8. Transfers outside the European Union
Some providers above process data in the United States. These transfers rely on the safeguards provided by those providers, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
9. How long we keep it
- Daily statistics: 365 days.
- Monthly snapshots and reports: until the account owner asks us to delete them or the service ends.
- Tokens: as long as the connection is active. They are deleted when the account is disconnected or on request.
- Emails: as long as needed to handle the request.
10. Your rights
Under the GDPR you can access, correct or erase your data, restrict or object to its processing, and receive it in a portable format. Write to developer@calantirtech.com; we answer within one month. You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
11. Revoking KaminoStat's access
The account owner can withdraw access at any time from the TikTok app (Settings and privacy → Security and permissions → Apps and services permissions), or by asking us by email. Collection then stops, and we delete the stored token and, on request, the collected statistics.
12. Children
KaminoStat is a professional tool. It is not directed at people under 18.
13. Changes
If this policy changes, we update this page and its date. Material changes are announced to users before they apply.