Privacy Policy

Last updated: March 25, 2026

Whoopy ("we", "our", or "us") operates the website whoopy.ru and provides business process automation services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

When you use Whoopy, we may collect the following types of information:

• Account Information: Email address, display name, and organization details you provide when creating an account.
• Third-Party Platform Data: When you connect external platforms (such as TikTok, social media accounts, CRMs, or other tools) via OAuth 2.0 or API keys, we receive access tokens and basic profile information. We do not store your platform passwords.
• TikTok Account Data (specific): When you connect your TikTok account via TikTok Login Kit (OAuth 2.0), we receive an access token and your basic TikTok profile information (display name, profile identifier). We use the TikTok Content Posting API to publish content on your behalf and TikTok Webhooks to receive real-time event notifications.
• Workflow & Content Data: Content, schedules, automation rules, and configuration data you provide for your workflows.
• Usage Data: Log data such as IP address, browser type, pages visited, and timestamps collected automatically when you interact with our Service.

2. How We Use Your Information

• To provide, operate, and maintain the Service, including executing your automated workflows.
• To authenticate your connected platform accounts and maintain sessions via OAuth tokens.
• To process and publish content on your behalf to connected platforms, including TikTok via the Content Posting API.
• To deliver webhook-based notifications and status updates about your workflows and posted content.
• To communicate with you, including sending service-related emails and support responses.
• To improve and optimize the Service based on usage analytics.
• To comply with legal obligations and enforce our Terms of Service.

3. TikTok Data Usage

Whoopy integrates with TikTok through official TikTok for Developers APIs. Specifically, we use:

• Login Kit: To securely authenticate users with their TikTok accounts using OAuth 2.0. We only request the scopes necessary for our Service to function.
• Content Posting API: To publish video content to your TikTok account on your behalf, based on your explicit instructions and scheduling preferences.
• Webhooks: To receive real-time notifications from TikTok about content status and account events.

We access TikTok data only with your explicit authorization. You may revoke access at any time by disconnecting your TikTok account in the Whoopy settings or by revoking permissions directly in your TikTok app settings.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With Connected Platforms: As required to perform API operations you have authorized (e.g., publishing content to TikTok, syncing data with your CRM).
• Service Providers: With trusted third-party service providers who assist us in operating the Service (e.g., hosting, infrastructure), bound by confidentiality agreements.
• Legal Requirements: When required by law, regulation, or legal process.
• Protection of Rights: To protect the rights, property, or safety of Whoopy, our users, or the public.

5. Data Retention

• Account information is retained while your account is active.
• OAuth tokens are stored securely and refreshed as needed. Tokens are deleted when you disconnect an account.
• Workflow and content data is retained until you delete it or close your account.
• Content submitted for posting is retained for up to 30 days after publication for troubleshooting purposes.
• Usage logs are retained for up to 90 days.

6. Data Security

We implement industry-standard security measures including encryption of data in transit (TLS/SSL) and at rest, secure storage of OAuth tokens, regular security audits, and access controls limiting data access to authorized personnel only.

7. Your Rights

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data. We will process deletion requests within 30 days.
• Portability: Request a portable copy of your data in a structured format.
• Withdraw Consent: Revoke your authorization at any time by disconnecting accounts or contacting us.

To exercise any of these rights, please contact us at whoopyaitiktok@gmail.com.

8. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside your country of residence. By using our Service, you consent to such transfers in accordance with this Privacy Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the updated policy on this page and updating the "Last updated" date.

11. Contact Us

Email: whoopyaitiktok@gmail.com
Website: https://whoopy.ru