Privacy policy

1. Who we are

CoraMisa ("we", "us") operates the CoraMisa Partner Portal, an invitation-only service for TikTok creators who take part in the CoraMisa partner program. We are the data controller for the information described in this policy. You can reach us at contact@coramisa.com.

2. Information we collect

Account information: the email address used to sign in, your password in hashed form, and sign-in timestamps. Partner profile: your agreed rate and the payment details you choose to save, such as account holder name and IBAN. Content data: for each post we track, the post identifier, caption, publish date, format and view count. Technical data: security and error logs required to keep the service running safely.

3. Information we receive from TikTok

When you connect a TikTok account, you are redirected to TikTok's own login and consent screen. After you approve, TikTok gives us read-only access to your basic public profile (open ID, display name, avatar image) and the list of posts published on that account, including caption, create time and public view count. We store an access token so that view counts can be refreshed.

We never post, comment, message or upload anything on your behalf. We do not access your direct messages, followers, contact lists, drafts, private posts or analytics beyond the public metrics listed above.

4. How we use information

We use the information to operate and secure the portal, to identify posts that carry the #coramisa hashtag, to total the views for each calendar month, to calculate and pay partner earnings, and to communicate with you about the program. We do not use TikTok data for advertising, profiling or automated decision-making, and we do not combine it with data from third-party data brokers.

5. Legal basis

We process the data to perform our agreement with you as a partner, on the basis of your explicit consent when connecting a TikTok account, and to meet accounting and legal obligations relating to payouts.

6. Sharing

We do not sell personal information and we do not share TikTok data with advertisers. Data is shared only with the service providers we need to run the portal — hosting, database, authentication and payment processing — and only to the extent required. We may disclose information when legally required to do so.

7. Retention

Account and content data is kept while your partner account is active. Payout records are kept as long as accounting law requires. TikTok access tokens are deleted immediately when you disconnect an account or when you revoke access from your TikTok settings; no new posts are synced after that point.

8. Your rights and deleting your data

You can disconnect any TikTok account from the partner portal at any time, and you can also revoke our access directly in your TikTok account settings. To request access to your data, correction of it, a copy of it, or full deletion of your partner account and all associated data, email contact@coramisa.com. We respond to requests within 30 days. You may also lodge a complaint with your local data protection authority.

9. Security

Data is stored on access-controlled infrastructure, protected by row-level security so that each partner can only read their own records. Tokens and credentials are stored encrypted and are never exposed in the browser.

10. Children

The partner program is only open to people aged 18 or older. We do not knowingly collect information about children. If we learn that we hold such information, we delete it.

11. International transfers

Our providers may process data outside your country. Where that happens, transfers are covered by standard contractual clauses or an equivalent safeguard.

12. Changes to this policy

If we change this policy we update the date at the top of this page and, for significant changes, notify partners by email before the change takes effect.

13. Contact

Privacy questions, data requests and deletion requests: contact@coramisa.com.