01Who we are
This policy covers elkiya.com and the apps and integrations Elkiya builds, including apps that connect to TikTok through TikTok for Developers ("our services"). They are run by Elkiya Group ("Elkiya", "we", "us"), founded by Aqilla Abdurrahman Jundiy, based in Indonesia. Elkiya Digital, the agency that ran this site from 2019 to 2026, is now part of Elkiya Group.
For anything privacy-related, write to [email protected].
02What we collect
We collect only what a feature needs:
- What you send us. Your name, email, phone (optional), business or website and message when you use the contact form or email us.
- Account data from TikTok. When you sign in with TikTok or connect your TikTok account, we receive what you approve on TikTok's consent screen, such as your open ID, display name and profile picture, and, only if you grant those permissions, your public videos and their statistics, or permission to publish content you choose.
- Access tokens. The tokens TikTok issues so the app can act for you within the permissions you granted.
- Technical data. Standard server logs (IP address, browser, pages requested, time) kept for security and troubleshooting.
We never receive your TikTok password, and we do not collect payment details, government IDs or data about children.
03How we use it
- To provide the feature you asked for, for example showing your TikTok profile and video performance inside our app, or publishing a video you have chosen to post.
- To answer your messages and arrange classes, events or 1:1 mentoring.
- To keep our services secure, prevent abuse and fix problems.
- To meet legal obligations.
We do not sell your data, use TikTok data for advertising or profiling, or share it with data brokers. TikTok data is used only to provide the features you connected it for, in line with the TikTok Developer Terms of Service.
05How long we keep it
- TikTok data and tokens: while your account is connected. When you disconnect, revoke access in TikTok, or ask us to delete it, we delete it within 30 days.
- Contact messages: up to 24 months, then deleted.
- Server logs: up to 90 days.
06How we protect it
Everything travels over HTTPS. Access tokens are stored encrypted, access to data is limited to the people who need it, and our servers are patched and monitored. No system is perfectly secure, but if a breach ever affects you, we will tell you without undue delay.
07Your choices and rights
Wherever you live, you can ask us to:
- see the data we hold about you, or get a copy;
- correct it;
- delete it;
- stop using it for a purpose, or withdraw a consent you gave.
Email [email protected] from the address we know you by, or tell us your TikTok username. We answer within 30 days. You can also disconnect our app at any time in TikTok under Settings and privacy → Security → Apps and services; this stops our access immediately.
If you are in the EU, UK or another place with data protection law (including Indonesia's Personal Data Protection Law), you may also complain to your local data protection authority.
09International transfers
We are based in Indonesia, and our servers and service providers may be in other countries. By using our services your data may be processed outside the country you live in. We protect it the same way wherever it is.
10Children
Our services are not meant for anyone under 18, and we do not knowingly collect data from children. If you think a child has given us data, tell us and we will delete it.
11Changes to this policy
If we change this policy, we update the date at the top of this page. If a change is significant, we will tell connected users before it takes effect.