Privacy policy
Last updated: 6 November 2026
Who we are
Tikle (tikleapp.com) is a trading name of Culture Clash Family Ltd, a company registered in England and Wales (company no. 15931404), 19 Charles Street, Newport, Wales, NP20 1JU. We are the data controller for the personal data described here. Contact us about anything in this policy at hello@tikleapp.com.
Tikle is a marketplace where UK TikTok Shop creators license their existing TikTok videos to brands. This policy explains what we collect, why, who we share it with and your rights. Tikle is for people aged 18 and over.
What we collect
Creators: from TikTok, when you choose “Continue with TikTok”
We use TikTok’s official Login Kit. TikTok asks you to approve each permission before anything is shared with us. With your permission we receive:
- Basic profile (
user.info.basic): your TikTok account ID, display name and profile picture, so you can sign in and we can show who you are. - Profile details (
user.info.profile): your username and profile link, so brands can see which account the videos come from and we can verify that the videos are yours. - Account stats (
user.info.stats): follower and like counts, shown on your profile and used to suggest a fair licence price. - Your public videos (
video.list): for each video, its ID, caption, cover image, view count, length, link and posting date. We use these to show your library, suggest brands that appear in your videos, set suggested prices and show the videos you choose to list to brands.
We never receive your TikTok password. Tikle can’t post, edit, comment, message or delete anything on your TikTok account. We only show videos to brands after you choose to list them.
Creators: what you give us
- The brands you match your videos with, your prices and the Tikles you list.
- The original video files you upload when you deliver a deal.
- Business email addresses you enter when you use “Send direct” to tell a brand about a Tikle.
- Messages and offers you exchange with brands on Tikle.
Brands
- Your name, work email address and company name, when you sign in with an email link.
- Offers, questions, retainer proposals and reports you send, and the licences you buy.
Payments
Card payments, creator payouts and Tikle Pro subscriptions are handled by Stripe. Stripe collects the card, bank and identity details it needs. We don’t see or store your full card or bank details; we keep a record of each payment, refund and payout.
Cookies and technical data
We use one essential cookie to keep you signed in. We don’t use advertising or analytics cookies. Our hosting provider records standard server logs (such as IP address, time and page requested) to keep the service secure and working.
Why we use it, and our lawful basis
- To provide Tikle (your account, library, brand search, offers, licences, deliveries and payouts): to perform our contract with you.
- To keep Tikle safe (checking that accounts are genuine, spotting reposted or duplicate videos, holding first payouts, handling reports): our legitimate interest in preventing fraud and protecting creators and brands.
- To send “Send direct” emails to a business address a creator enters: our and the creator’s legitimate interest in telling a brand about content that features it. We send each address one email per Tikle, say who it’s from, include a one-click unsubscribe and never email an address again after it unsubscribes.
- To send service emails (sign-in links, offers, deal updates, receipts): to perform our contract with you.
- To keep financial records: to meet our legal obligations.
Brand suggestions. We suggest brands for your videos by matching brand names in captions against our brand list. For captions where that’s unclear, we may send the caption text (not the video or your profile) to an AI service, Anthropic, to suggest a brand. Suggestions are only suggestions: you choose whether to match and list a video, and nothing is decided about you automatically.
Who we share it with
- Brands see the Tikles you list: your display name, username, profile picture, follower count, the listed videos with their stats and the price. They never see your email address.
- Creators see a brand’s name, offers and messages. Brand email addresses are never shown to creators.
- Service providers who process data for us under contract:
- Render (hosting and database; servers in Frankfurt, Germany)
- Stripe (payments, payouts and identity checks)
- Postmark (sending emails)
- Cloudflare (domain and email forwarding)
- Anthropic (optional brand suggestions from caption text)
- TikTok, when you sign in with TikTok, under TikTok’s own privacy policy.
- Authorities, if the law requires it.
Some providers are based in the United States. Where data leaves the UK, we rely on UK adequacy regulations (including the UK–US data bridge) or the UK’s approved international data transfer agreement or addendum.
We don’t sell personal data.
How long we keep it
- Account and TikTok data: while your account is open. If you close your account or disconnect TikTok, we delete your TikTok profile data and video data within 30 days. Videos already licensed stay on the brand’s licence record (see below).
- Delivered video files: for the licence period plus 30 days, so the brand can download them.
- Deals, licences, payments and payouts: 6 years, for tax and legal records.
- Unsubscribed email addresses: kept on a do-not-email list for as long as Tikle runs, so we never email them again.
- Server logs: up to 30 days.
Your rights
You can ask to see, correct, delete or export your data, or object to or restrict how we use it. Email hello@tikleapp.com and we’ll reply within one month.
You can remove Tikle’s access to your TikTok account at any time in the TikTok app: Settings and privacy → Security → Apps and services permissions (the exact wording may change). Then email us if you’d also like your Tikle account deleted.
If you’re unhappy with how we’ve handled your data, please tell us first. You can also complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, 0303 123 1113.
Security
Tikle runs over HTTPS, keeps sign-in tokens and API keys out of the browser, and limits who on our team can access personal data. No system is perfectly secure, but we’ll tell you and the ICO if a breach puts your data at risk, as the law requires.
Changes
If we change this policy, we’ll update the date at the top. If a change affects you significantly, we’ll tell you by email or in the app.