Privacy Policy

1. Who we are

The Service is operated by Royal Nation LLC, a limited liability company registered in the State of Wyoming, United States, together with its affiliate Krown Digital (Australia) (collectively, "the Company"), the data controller responsible for your personal information under this Policy. For any privacy question or request, contact us at support@krownmedia.online.

2. Information we collect

2.1 Information you provide

• Account information: name, email address, password (stored hashed), workspace name, and account preferences.
• Content you create: post captions, titles, scheduling times, uploaded or linked media (images and videos), tags, and campaign metadata.
• Support communications: messages, attachments, and correspondence you send to us.

2.2 Information from connected platforms (including TikTok)

When you connect a third-party account, we receive information from that platform via its official API only after you grant authorization through the platform's OAuth consent screen. From TikTok we may access, depending on the scopes you approve:

• Basic profile (user.info.basic): your TikTok open ID, display name, and avatar — used to identify the connected account in your dashboard.
• Profile details (user.info.profile): profile bio, profile link, and verification status.
• Account statistics (user.info.stats): your follower, following, like, and video counts — used to display analytics back to you.
• Content publishing (video.upload, video.publish): used to upload or publish the content you schedule to your own authorized TikTok account.
• OAuth tokens issued by the platform so we can act on your behalf within the scopes you granted.

2.3 Information collected automatically

• Technical and usage data: IP address, browser and device type, pages viewed, actions taken, timestamps, and error logs.
• Link activity: clicks on tracked short-links we generate for your posts (aggregate, for attribution).
• Cookies: strictly-necessary cookies to keep you signed in and operate the Service. We do not use advertising cookies.

3. How we use your information

• Provide, operate, secure, and maintain the Service and your account.
• Authenticate your connected TikTok and other social accounts and act within the scopes you authorized.
• Schedule and publish the content you create to your own connected accounts.
• Display analytics and engagement statistics for your own accounts back to you.
• Process post-status webhook updates from connected platforms.
• Provide customer support and respond to your requests.
• Detect, prevent, and address fraud, abuse, security incidents, and technical issues.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We do not use TikTok data for advertising, profiling unrelated to the Service, or any purpose beyond the workflows you authorize.

4. Legal bases for processing

Where the GDPR or similar laws apply, we process personal information on the bases of: performance of a contract (to provide the Service you request), your consent (e.g. connecting a TikTok account and granting scopes, which you may withdraw at any time), legitimate interests (securing and improving the Service), and legal obligation.

5. How we share information

We share personal information only as follows, and never sell it:

• Connected platforms: with TikTok and other platforms you connect, as necessary to publish your content and retrieve your data, in accordance with their developer terms.
• Service providers / sub-processors: infrastructure, hosting, and database providers that process data on our behalf under contractual confidentiality and security obligations, solely to operate the Service.
• Legal and safety: where required by law, regulation, legal process, or to protect the rights, property, or safety of users, the public, or the Company.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Data retention

We retain personal information only for as long as necessary to provide the Service and for the purposes described in this Policy, after which it is deleted or anonymized. Specifically: account and content data are retained while your account is active; OAuth tokens are retained until you disconnect the account or revoke access; technical logs are retained for a limited operational period. When you delete your account or disconnect a platform, the associated tokens and data are deleted within 30 days, except where we must retain limited information to meet legal, accounting, or security obligations.

7. Data security

We use technical and organizational measures appropriate to the risk, including encryption in transit (HTTPS/TLS), hashed credentials, access controls and least-privilege access to systems, isolated storage of OAuth tokens, and monitoring/logging. No method of transmission or storage is 100% secure, but we work to protect your information and will notify affected users and authorities of a breach where legally required.

8. Your rights and choices

Depending on your location, you may have the right to: access the personal information we hold about you; correct inaccurate information; delete your information; restrict or object to certain processing; request portability of your information; and withdraw consent at any time. To exercise any of these rights, email support@krownmedia.online; we will respond within the time required by applicable law. You will not be discriminated against for exercising your rights.

9. Revoking TikTok access and deleting your data

You are always in control of your connected accounts:

• Disconnect in Krown Media: open Settings → Channels, find the TikTok channel, and remove or pause it. This deletes the stored OAuth tokens for that account.
• Revoke at TikTok: in the TikTok app, go to Settings and privacy → Security & permissions → Manage app permissions, select Krown Media, and remove access.
• Delete your account/data: email support@krownmedia.online requesting deletion. We will delete your personal information and any TikTok data we hold within 30 days, subject to legal retention requirements.

10. International transfers

We may process and store information in countries other than where you reside. Where required, we use appropriate safeguards (such as standard contractual clauses) for international transfers of personal information.

11. Children's privacy

The Service is not directed to children and is intended only for users who meet the minimum age required by applicable law and by the connected platforms (at least 18, or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

12. Third-party services

The Service integrates with third-party platforms (including TikTok). Your use of those platforms is governed by their own terms and privacy policies, including TikTok's Privacy Policy. We are not responsible for the privacy practices of third parties.

13. Changes to this Policy

We may update this Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

14. Contact us

Royal Nation LLC (Wyoming, USA) and Krown Digital (Australia) — operators of Krown Media (krownmedia.online).
Privacy and data requests: support@krownmedia.online.