Privacy Policy

Effective August 7, 2026

TalentStream (“we”, “us”) provides a recruiting CRM for TikTok LIVE Creator Network agencies, consisting of a web dashboard and a companion Chrome extension. This policy explains what we collect, how we use it, and the choices you have.

What we collect

• Account data: your name (optional), email address, and a securely hashed password. We never store passwords in plain text.
• Agency & team data: your agency name, team membership, roles, and invitations.
• Lead data: the public TikTok @usernames you choose to capture, the recruiting eligibility status you check, pipeline stage, assignments, notes, and follow-up dates you set.
• Billing data: if you subscribe, payments are processed by Stripe. We store your plan, subscription status, and Stripe customer identifiers. We do not store your card numbers; Stripe does.
• Technical data: a session token used to keep you signed in, and standard server logs.

How the Chrome extension works

The extension reads only publicly visible information on tiktok.com (creator usernames shown in the LIVE feed) and the eligibility results that TikTok itself displays inside your own authenticated LIVE Backstage session. It sends that information only to your TalentStream account.

The extension does not intercept, read, or transmit TikTok internal API responses, CSRF tokens, or session cookies, and it never sends invitations or messages on your behalf. It acts only when you browse; you remain in control of your TikTok account.

Optional server-side Backstage connection

If your deployment enables server-side checks, you can sign in directly to TikTok through a temporary remote browser in the dashboard. Login input, MFA input, and browser images are processed transiently to provide this connection. We do not save your TikTok password, export your session cookies, or record the remote browser. Authenticated browser state and the TalentStream token used by the worker remain in memory for that recruiting session.

Disconnecting ends the temporary connection. It also expires after 20 minutes without recruiting interaction, after 8 hours at most, or when the worker restarts. An unfinished initial sign-in expires after 10 minutes. You must sign in again to reconnect. Saved creator eligibility results remain part of your agency's CRM data. Disconnect requests also store an opaque revocation identifier for up to 9 hours to prevent an interrupted request from leaving the browser authorized. This identifier contains no TikTok password, cookie, or account token.

How we use your data

• To provide the CRM: saving leads, tracking eligibility, and managing your pipeline.
• To operate your agency workspace and team collaboration features.
• To process subscriptions and enforce seat limits (when billing is enabled).
• To secure, maintain, and improve the service.

How we share data

Your leads and CRM data are scoped to your agency and are visible only to members of your agency workspace. We do not sell your data. We share data only with service providers that run the product on our behalf (for example, our database host and Stripe for payments), and when required by law.

Data retention & your choices

We keep your data for as long as your account is active. You can request access, correction, or deletion of your data, or deletion of your account, by contacting us at the address below.

Contact

Questions or requests: christsona0@gmail.com.