Privacy Policy

1. Introduction

VOLIX Group (“VOLIX”, “we”, “us”, “our”) is committed to protecting the privacy of TikTok account owners whose data we access through the VOLIX Claudio TikTok Integration (the “App”). This Privacy Policy explains how we collect, use, store, and protect information accessed through the TikTok Developer API.

2. Scope

This Privacy Policy applies exclusively to data obtained through TikTok's official Developer API following user authorization via TikTok OAuth. The App is used internally by VOLIX Group to manage and analyze our owned and co-managed TikTok accounts (including @volix.media and @belumpulang.tv).

3. Information We Access

With explicit user authorization, the App may access the following data from authorized TikTok accounts:

• Basic profile information (display name, username, profile image)
• Account statistics (follower count, following count, video count, total likes)
• Video metadata (title, description, publish date, duration, thumbnail)
• Video analytics (views, watch time, engagement metrics)
• Account-level analytics where permitted by TikTok API

We do not access or store:

• Private messages
• TikTok account passwords or login credentials
• Payment or billing information
• Personal data of users who interact with our TikTok content (only aggregate metrics)

4. How We Use Information

We use accessed data exclusively for:

• Internal content strategy analysis
• Performance reporting to VOLIX team members
• Identifying content trends and optimization opportunities
• Improving operational efficiency of our content production

We do not:

• Sell or rent your data
• Use data for advertising targeting outside VOLIX-owned accounts
• Share with parties not involved in operating the App

5. Data Storage and Security

Data accessed via the App is:

• Transmitted over encrypted HTTPS connections
• Stored on infrastructure provided by Composio Inc. and on VOLIX-controlled servers with access controls
• Restricted to authorized VOLIX Group personnel
• Subject to industry-standard security practices including encryption at rest

6. Service Providers

We use the following third-party service providers to operate the App:

• Composio Inc. (composio.dev) — for OAuth token storage and API routing. Composio is SOC 2 Type 2 compliant.
• Anthropic PBC (anthropic.com) — for natural-language processing of analytics summaries.
• Google Cloud Platform — for incidental infrastructure services.

Each provider is bound by their own privacy policy and processes data under data processing agreements with VOLIX where applicable.

7. Data Retention

We retain accessed analytics data for as long as the App access is active. Upon revocation of TikTok OAuth access by the account owner, the App ceases to retrieve new data; cached analytics may be retained for up to 30 days for operational continuity, after which it is purged.

8. User Rights

TikTok account owners may at any time:

• Revoke App access via TikTok Settings → Privacy → Permissions
• Contact VOLIX at privacy@volix.co.id to request data deletion or review

9. Compliance

This App and VOLIX's data practices align with applicable Indonesian data protection law (Undang-Undang Perlindungan Data Pribadi / UU PDP No. 27/2022) and respect international privacy standards including GDPR principles where applicable.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to affected users at the email associated with their TikTok account where reasonably feasible. Continued authorization of the App constitutes acceptance of updates.

11. Contact

For privacy-related inquiries, contact:

PT. VOLIX Group
Email: privacy@volix.co.id
Web: volix.co.id