GYC Marketing Reporting Privacy Policy

About this app
GYC Marketing Reporting is an internal reporting tool operated by GYC. This policy covers its TikTok integration, rather than the entire gycweb.org website.

Information we collect
When an authorized GYC account administrator connects a TikTok account, the app requests access to basic account information, account statistics, and public videos. This may include the account identifier and display name; follower, following, like, and video totals; and public video identifiers, titles, posting dates, durations, views, likes, comments totals, and shares totals. We collect comment counts, not individual comments.

The app also receives access and refresh tokens from TikTok to maintain the authorized connection. It does not receive your TikTok password. We do not request access to private videos, direct messages, or permission to publish videos.

How we use information
We use this information to measure GYC’s account and video performance, create internal marketing reports, and compare statistics over time. Daily snapshots record cumulative totals when collected; they do not reconstruct historical daily performance before collection began.

Storage and access
Reporting data is stored in GYC’s Google Cloud reporting environment. Authentication credentials are stored separately in Google Cloud Secret Manager. Access is limited to authorized administrators, reporting users, and service accounts needed to operate the app. Google Cloud processes data on our behalf as a hosting provider. We do not sell TikTok account data or use this integration to build advertising audiences.

Retention and deletion
We retain account and video reporting data while needed for GYC’s internal reporting. Revoking authorization stops future authorized collection but does not automatically delete previously stored reports. To request deletion of a connected account’s credentials and identifiable TikTok reporting records, email info@gycweb.org. We may need to verify that you control the account before acting. Any legally required retention will be explained when applicable.

Your choices
Connecting an account is voluntary. You can decline permissions or revoke the app’s access through TikTok’s connected-app settings. Revoked or expired access may prevent reports from updating. You can also contact us to disconnect an account or ask about stored information.

Changes and contact
We will update this page when the integration’s data practices change. For privacy questions, access requests, or deletion requests, contact info@gycweb.org.