Select Page

Privacy Policy

Effective Date: July 18, 2026

This Privacy Policy explains how  Perch & Sip (“Perch & Sip,” “we,” “us,” or “our”), collects, uses, stores, and discloses information when you use our website, social-media management dashboard, TikTok integration, and related services collectively referred to as the “Service.”

This policy applies to information processed through the Service. It does not replace the privacy policies of TikTok or any other third-party service you choose to connect.

1. Information we collect

The information we collect depends on how you use the Service and which permissions you grant.

A. Information you provide

We may collect information you provide directly, including:

  • Your name.

  • Email address.

  • Account credentials.

  • Company or organization name.

  • Support requests and correspondence.

  • Videos, photographs, captions, audio, text, and other content you upload.

  • Scheduled publication dates and times.

  • Privacy and interaction settings selected for a post.

  • Commercial-content or branded-content disclosures.

  • Billing information if paid services are offered.

Payment-card information may be processed directly by a payment processor rather than stored by us.

B. Information received from TikTok

When you connect a TikTok account, TikTok may provide information permitted by the scopes you approve.

Depending on the permissions granted, this information may include:

  • TikTok user or account identifier.

  • Display name or nickname.

  • Username or profile link.

  • Profile image or avatar.

  • Profile description.

  • Verification status.

  • Follower count.

  • Following count.

  • Like count.

  • Public video count.

  • Public videos and associated metadata.

  • Video descriptions or captions.

  • Publication dates.

  • View, like, comment, and share statistics.

  • TikTok account privacy options.

  • Available Comment, Duet, and Stitch settings.

  • Maximum allowed video duration.

  • Content-processing or publication status.

We receive only the information TikTok makes available under the permissions you approve and TikTok’s developer-platform rules.

C. Authorization credentials

When you connect a TikTok or other third-party account, we may receive and store:

  • Access tokens.

  • Refresh tokens.

  • Token expiration information.

  • Authorized scopes.

  • Connection status.

  • Third-party account identifiers.

These credentials allow the Service to perform actions you request without requiring you to repeatedly log in.

We do not receive your TikTok password.

D. Content-submission information

When you publish or upload content, we may process:

  • The selected social-media account.

  • Media files.

  • Captions and hashtags.

  • Privacy settings.

  • Comment, Duet, and Stitch selections.

  • Commercial-content disclosures.

  • Scheduling instructions.

  • Draft or direct-publish selection.

  • Submission identifiers.

  • Processing status.

  • Platform error messages.

E. Technical and usage information

We may automatically collect:

  • Internet Protocol address.

  • Browser type and version.

  • Device type.

  • Operating system.

  • Referring page.

  • Pages or features used.

  • Login and session information.

  • Dates and times of activity.

  • Error logs.

  • Security events.

  • Approximate location inferred from an IP address.

We use this information primarily to operate, troubleshoot, secure, and improve the Service.

F. Cookies and local storage

We may use cookies, browser storage, and similar technologies required for:

  • Authentication.

  • Session management.

  • Security.

  • Saving user preferences.

  • Preventing fraud.

  • Maintaining connected-account workflows.

We do not use advertising cookies or cross-site behavioral-advertising trackers unless this policy and any required consent controls are updated before their use.

2. How we use information

We may use information to:

  • Create and administer user accounts.

  • Authenticate users.

  • Connect authorized TikTok and other social-media accounts.

  • Display connected profile information.

  • Retrieve account statistics and public posts.

  • Generate content previews.

  • Store drafts and scheduled content.

  • Submit videos, photographs, captions, and settings to TikTok.

  • Publish content after user confirmation.

  • Upload content to TikTok as a draft.

  • Check content-processing and publication status.

  • Diagnose failed posts.

  • Provide customer support.

  • Send transactional and security communications.

  • Maintain logs needed to prevent abuse or investigate incidents.

  • Enforce our Terms of Service.

  • Comply with legal obligations.

  • Improve the reliability and usability of the Service.

We do not use connected TikTok data to create unrelated advertising profiles.

We do not publish content without a user instruction or previously configured scheduling instruction.

3. Legal bases for processing

Where laws such as the European Economic Area or United Kingdom data-protection laws require a legal basis, we process personal information under one or more of the following bases:

  • Contract: Processing necessary to provide the Service you requested.

  • Consent: Processing based on permission you provided, including authorization of a social-media integration.

  • Legitimate interests: Processing necessary to secure, maintain, troubleshoot, and improve the Service, provided those interests are not overridden by your rights.

  • Legal obligation: Processing necessary to comply with applicable law.

  • Protection of rights: Processing necessary to establish, exercise, or defend legal claims.

You may withdraw consent by disconnecting the applicable account or contacting us. Withdrawal does not affect processing that occurred before consent was withdrawn.

4. How information is disclosed

We may disclose information in the following circumstances.

A. At your direction

We disclose information to TikTok or another platform when you direct us to connect an account, retrieve information, upload a draft, or publish content.

For example, when you publish a TikTok video, the selected video, caption, account identifier, privacy option, and interaction settings are transmitted to TikTok.

B. Service providers

We may use service providers to help operate the Service, such as:

  • Website and server hosting providers.

  • Cloud-storage providers.

  • Database providers.

  • Email-delivery providers.

  • Error-monitoring and security providers.

  • Customer-support providers.

  • Payment processors.

  • Backup providers.

These providers may process information only for the services they provide to us and subject to applicable contractual and legal restrictions.

The Service may use self-hosted Postiz software. Postiz is used as part of the Service’s application infrastructure and social-media integration workflow.

C. Legal and safety reasons

We may disclose information when reasonably necessary to:

  • Comply with applicable law, regulation, subpoena, court order, or lawful government request.

  • Investigate fraud, abuse, security incidents, or unauthorized access.

  • Protect the rights, property, or safety of users, third parties, or the public.

  • Enforce our Terms of Service.

  • Establish, exercise, or defend legal claims.

D. Business transactions

Information may be transferred as part of a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or transfer of the Service.

Where required, we will provide notice before personal information becomes subject to a materially different privacy policy.

E. Aggregated or de-identified information

We may use or disclose information that has been aggregated or de-identified so that it cannot reasonably be associated with an individual.

We will not attempt to re-identify properly de-identified information except to test whether our de-identification processes are effective.

5. Sale and sharing of personal information

We do not sell personal information for monetary consideration.

We do not share personal information for cross-context behavioral advertising.

We do not knowingly sell or share the personal information of individuals under 16 years old.

If our practices change, we will update this policy and provide legally required opt-out mechanisms before beginning the new activity.

6. TikTok data

Information obtained from TikTok is used only to provide and secure the TikTok-related features described in this policy.

We do not:

  • Ask for or store your TikTok password.

  • Use TikTok access tokens for an account you have not authorized.

  • Publish to TikTok without a user request or scheduling instruction.

  • Sell TikTok account information.

  • Use connected TikTok information to build unrelated advertising profiles.

  • Claim ownership of your TikTok account or TikTok content.

TikTok independently processes information according to its own terms and privacy policy. TikTok’s handling of information is outside our control.

You may revoke Perch & Sip’s access through the Service or your TikTok account settings.

7. Data retention

We retain personal information only for as long as reasonably necessary for:

  • Providing the Service.

  • Maintaining authorized account connections.

  • Completing scheduled or pending publications.

  • Resolving support requests.

  • Maintaining security and audit records.

  • Complying with legal obligations.

  • Resolving disputes.

  • Enforcing agreements.

Uploaded media and drafts may remain stored until you delete them, close your account, or request deletion.

Authorization tokens may remain stored while an account is connected. When you disconnect an account, the credentials will no longer be used except where temporary retention is necessary for security, backup recovery, fraud prevention, or legal compliance.

Platform submission identifiers, status information, and error logs may be retained after publication for troubleshooting, security, and recordkeeping.

Information in backups may remain for a limited period until the relevant backup is overwritten or securely retired.

We may retain aggregated or properly de-identified information for longer periods.

8. Disconnecting TikTok

You may disconnect TikTok from within the Service when that function is available.

You may also revoke access through TikTok’s account or security settings.

After access is revoked:

  • We will no longer be able to retrieve new TikTok information.

  • Scheduled TikTok posts may fail.

  • Existing information already stored in the Service may remain until deleted under our retention practices.

  • Content already published to TikTok will not automatically be removed from TikTok.

To remove published TikTok content, use TikTok’s own content-management controls.

9. Data deletion requests

You may request deletion of your account and associated personal information by contacting:

[CONTACT EMAIL]

Include enough information for us to identify the relevant account. We may need to verify your identity before completing the request.

Subject to applicable legal exceptions, we will delete or de-identify information associated with your request within the time required by applicable law.

Deletion may not immediately remove:

  • Content already published to a third-party platform.

  • Information retained for fraud prevention or security.

  • Information required to comply with law.

  • Records necessary to resolve disputes.

  • Information contained in backups awaiting scheduled deletion.

  • Properly aggregated or de-identified information.

Deleting information from Perch & Sip does not automatically delete information held by TikTok or another third party.

10. Your privacy rights

Depending on where you live, you may have rights to:

  • Request access to personal information.

  • Request correction of inaccurate information.

  • Request deletion.

  • Request a portable copy of certain information.

  • Object to or restrict certain processing.

  • Withdraw consent.

  • Opt out of certain sales, sharing, targeted advertising, or profiling.

  • Appeal a decision concerning a privacy request.

  • Complain to a data-protection authority.

These rights may be subject to legal exceptions.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

Requests may be submitted to [CONTACT EMAIL].

We may ask for information necessary to verify your identity and authority to make the request. An authorized agent may submit a request where applicable law permits, but we may require proof of authorization.

11. California privacy rights

California residents may have rights under the California Consumer Privacy Act, as amended, if that law applies to our processing.

These rights may include:

  • The right to know the categories and specific pieces of personal information collected.

  • The right to know the sources, purposes, and categories of recipients.

  • The right to request deletion.

  • The right to request correction.

  • The right to opt out of the sale or sharing of personal information.

  • The right to limit certain uses of sensitive personal information.

  • The right not to receive discriminatory treatment for exercising privacy rights.

During the preceding 12 months, we may have collected the categories described in Section 1, including identifiers, internet activity, account information, user-provided content, and approximate location inferred from an IP address.

We collect and use these categories for the purposes described in Section 2 and disclose them to the categories of recipients described in Section 4.

We do not sell personal information or share it for cross-context behavioral advertising.

Requests may be sent to [CONTACT EMAIL].

12. International users and transfers

The Service may be operated from the United States, and information may be processed in the United States or other countries where our service providers operate.

Those countries may have privacy laws that differ from the laws where you live.

Where required, we use appropriate legal mechanisms for international data transfers.

13. Data security

We use reasonable administrative, technical, and organizational safeguards intended to protect information against unauthorized access, alteration, disclosure, or destruction.

These measures may include:

  • Access controls.

  • Encrypted network connections.

  • Restricted access to production systems.

  • Credential and token protection.

  • Software updates.

  • Logging and security monitoring.

  • Backups.

  • Incident-response procedures.

No online service or storage system can guarantee complete security. You are responsible for protecting your own credentials and devices.

Do not send passwords, access tokens, or other sensitive credentials through ordinary support messages.

14. Data incidents

If we discover a security incident affecting personal information, we will investigate and take reasonable measures to contain and remediate it.

We will notify affected individuals and authorities when notification is required by applicable law.

15. Children’s privacy

The Service is intended for adults and is not directed to children under 13.

You must be at least 18 years old to create and operate a Perch & Sip account.

We do not knowingly collect personal information directly from children under 13. If we learn that we collected such information without legally required authorization, we will take reasonable steps to delete it.

Parents or guardians who believe a child submitted personal information may contact [CONTACT EMAIL].

16. Third-party websites and services

The Service may contain links to or integrations with third-party services, including TikTok.

We do not control those services’ privacy practices. Review their privacy policies before providing information or connecting an account.

This Privacy Policy applies only to information processed by Perch & Sip.

17. Automated decision-making

We do not use connected TikTok information to make decisions that produce legal or similarly significant effects about users.

The Service may automatically validate files, detect technical errors, schedule submissions, or display platform-provided restrictions. These operational processes do not independently determine your employment, credit, housing, insurance, or other legally significant eligibility.

18. Do Not Track and Global Privacy Control

Some browsers offer Do Not Track settings. There is currently no universal standard governing how websites must respond to every Do Not Track signal.

Because we do not sell personal information or share it for cross-context behavioral advertising, there may be no sale or advertising-sharing activity to opt out of.

Where legally required and technically applicable, we will treat a recognized Global Privacy Control signal as a valid opt-out request.

19. Changes to this Privacy Policy

We may update this Privacy Policy when our services, integrations, legal obligations, or data practices change.

The revised policy will be posted with an updated effective date. We will provide additional notice when required by law.

You should review this policy periodically.