Data processing addendum

This DPA forms part of the Terms of Service between you and TikTok Scout. It applies when we process personal data on your behalf.

Subject matter

We process publicly accessible TikTok post metadata, creator profile metadata, and (when you opt in) followers and following lists, at your direction. You are the data controller; we are a data processor acting on your documented instructions.

Subprocessors

• Stripe — payment processing
• Neon — application database
• Amazon Web Services (S3, us-east-1) — encrypted storage of scrape outputs
• Vercel — application hosting
• Apify — upstream scrape compute (clockworks/tiktok-scraper actor)

Data security

Data at rest is encrypted with AES-256 (SSE-S3 for S3 objects; Neon's encrypted volumes for Postgres). Data in transit uses TLS 1.2+. Access to production data is limited to operations engineers under role-based controls and logged in our audit trail.

Contact

For DPA requests, open a DPA ticket. Routed to 0p@agentmail.to.