Privacy Policy

This Privacy Policy explains how Arthur Werts, a sole trader registered in Boulogne-Billancourt, France ("we", "us"), handles personal data through Revveal (revveal.net). We are the data controller for the processing described here.

01Who this covers

This policy covers three different groups of people, and their situations are not the same:

• Visitors — you browse this site. We collect nothing about you: no cookies, no analytics (Section 9), and the waitlist form keeps nothing (Section 2).
• Users — you have an account and run campaigns.
• Creators — your public TikTok data appears in our creator database. You are not our user, you have no account with us, and you never agreed to our Terms. Section 11 is written for you.

02The waitlist form

The waitlist form on this site does not currently store your address or send it anywhere. It checks that the address is well-formed, then shows a confirmation page; the address never leaves your browser. We therefore hold no waitlist data about you, and nothing you type there will be used to contact you.

If we start collecting waitlist addresses again, this section will be updated before the first address is collected.

03Data we collect about you (the user)

• Account data — your email address and password. The password is stored hashed by our authentication provider, Supabase; we never see it in plain text.
• Project data — the company name, website, sectors, country, language and category you enter when creating a project, used to match relevant creators.
• Campaign and favourites data — the campaigns you run and the creators you mark as saved, contacted, signed or declined, so you can track your own outreach.
• Free-plan usage — a record of your free trials (which project and campaign, and when), at most three entries, older ones being reused. It is kept even if you delete that campaign or project, so the free-plan limits — one trial per project, three per 30 days — can be enforced. If you delete your account, the record is detached from it and only an irreversible fingerprint (hash) of your email address remains, so that signing up again with the same address does not reset those limits.
• Payment data — handled entirely by Lemon Squeezy, our payment provider and merchant of record. We receive confirmation that a payment succeeded and which plan was bought; we never receive your card details.

04Data we collect about creators

To power creator search, we maintain a database built from publicly available TikTok profile and post information, collected on our behalf by a third-party data provider (Bright Data). It consists of:

• Username, display name, profile picture, biography, country and language;
• Public counts — followers, likes, views — and statistics derived from them;
• Recent public posts: captions, hashtags, engagement figures and thumbnail images;
• Scores we compute ourselves from the above — engagement rate, audience quality, fake-follower risk, a reliability score, and a comparison between sponsored and organic posts.

To be explicit about a claim this site used to make and no longer does: this data is not obtained through the TikTok Research API. It is public profile and post information collected by our data provider.

05Legal basis

• Account and campaign data — performance of our contract with you (the Terms of Service), and our legal obligations for invoicing and accounting.
• Free-plan record — our legitimate interest in preventing abuse of the free plan.
• Creator data — our legitimate interest, and that of our users, in enabling creator discovery from information the creator has already published publicly on TikTok. We have weighed that against creators' interests, which is why the database is limited to public professional-facing information, why it holds no contact details, and why Section 11 gives an unconditional removal route.

06Retention

• Account, project and campaign data — for as long as your account exists. Deleting your account deletes them.
• Free-plan record — at most three entries while your account exists. Once it is deleted, only the fingerprint of your email address and the trial dates remain, and they are erased 30 days after the trial they relate to.
• Invoices — retained by Lemon Squeezy and by us for the period French accounting law requires, which overrides a deletion request for those records alone.
• Creator records — kept in a shared pool and refreshed from time to time from the same public sources. To be precise rather than flattering: a record is not deleted merely because it has aged; an older record simply carries older statistics until its next update. Creators are removed on request, under Section 11.

07Exported data

When a user exports campaign results as CSV or JSON, the file contains creator data as described in Section 4, plus a link to each creator's public TikTok profile. That export leaves our systems once downloaded: we do not track what happens to it, and the user becomes responsible for it under Section 7 of the Terms of Service.

08Sub-processors

These providers process data on our behalf. We do not sell personal data to anyone.

09Cookies and analytics

This website sets no cookies and runs no analytics or advertising scripts. There is nothing here to consent to, which is why you are not being asked. The only third party your browser contacts on these pages is Google Fonts, to load two typefaces.

Inside the application, a session token is stored in your browser so that you stay signed in between visits. It is strictly necessary for the Service to function and is not used to track you across other sites. If we ever add product analytics, this section will be updated before, not after.

10Your rights as a user

Under the GDPR you have the right to access your personal data, correct it, erase it, restrict or object to its processing, and receive it in a portable format. You may also withdraw consent where processing rests on consent.

• You can delete your account yourself from Settings. Doing so removes your account, projects, campaigns and favourites.
• For anything else, write to contact@revveal.net. We answer within one month.
• If you are unhappy with our answer, you may complain to your national supervisory authority — in France, the CNIL.

11Your rights as a creator

If your public TikTok data appears in our creator database and you want it removed, you do not have to justify the request.

You have the same GDPR rights as anyone else in the database — access, rectification, erasure, restriction, objection — exercised through the same address.

12Security

Data is stored with Supabase in the European Union and protected by row-level access controls, so each user can only read their own projects, campaigns and favourites. Passwords are hashed and never visible to us. All traffic is encrypted in transit. No method of transmission or storage is perfectly secure, and we do not claim absolute security.

13International transfers

Our database is hosted in the European Union. Some sub-processors listed in Section 8 process data outside the EU — notably Lemon Squeezy in the United States. Where that happens we rely on the appropriate safeguards, such as the European Commission's standard contractual clauses, offered by those providers.

14Changes

We may update this Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page. If a change materially affects how we handle data about you and we hold your email address, we will tell you directly.

Revveal · Arthur Werts, sole trader, France · contact@revveal.net · See also the Terms of Service.