← Back to AdsOverflow

Privacy Policy

Last updated: July 3, 2026

This Privacy Policy describes how Lurinth Inc ("Lurinth," "AdsOverflow," "we," "us," or "our") collects, uses, stores, and protects information in connection with the AdsOverflow campaign management and automation platform (the "Service"), available at adsoverflow.com. AdsOverflow is a product of Lurinth Inc.

The Service helps advertisers manage and automate their advertising campaigns on TikTok through the TikTok Marketing API. By using the Service, you ("the advertiser" or "you") agree to the practices described in this policy.

1. Who This Policy Applies To

This policy applies to advertisers who connect their TikTok advertising accounts to the Service. We act as a data processor on behalf of the advertiser with respect to the TikTok advertising data we access; the advertiser is the data controller of their own campaign and account data.

2. Information We Collect

2.1 Account and contact information

When you create an account with the Service, we collect basic information such as your name, email address, and login credentials.

2.2 TikTok authorization and tokens

When you connect a TikTok advertising account, you authorize the Service through TikTok's OAuth flow. TikTok provides us with:

• An access token and refresh token that allow the Service to call the TikTok Marketing API on your behalf;
• The list of advertiser account identifiers you have granted us permission to manage.

We do not receive or store your TikTok password.

2.3 Advertising data accessed via the TikTok Marketing API

With your authorization, and limited to the advertiser accounts you have granted, we access:

• Campaign, ad group, and ad structure and settings (names, objectives, budgets, status);
• Performance and reporting metrics, such as spend, impressions, clicks, and conversions;
• Advertiser account metadata (such as account name and currency).

2.4 Data we generate

The Service generates and stores data derived from the above, including performance snapshots over time, automation rules you configure, and an audit log of actions the Service takes on your accounts.

2.5 Technical and usage data

We may collect standard technical information such as IP address, browser type, device information, and log data when you use the Service.

3. How We Use Information

We use the information we collect solely to provide and improve the Service, specifically to:

• Authenticate you and maintain your account;
• Display your campaigns and performance metrics in a consolidated dashboard;
• Create, update, and enable or pause campaigns on the advertiser accounts you authorize;
• Evaluate the automation rules you configure (for example, thresholds based on cost-per-conversion or return on ad spend) and automatically enable or pause campaigns accordingly;
• Maintain an audit log of automated and manual actions;
• Refresh and manage TikTok access tokens so the Service continues to function;
• Respond to support requests, maintain security, and comply with legal obligations.

We do not use TikTok advertising data for any purpose other than providing these features to the advertiser who authorized access. We do not sell your data, and we do not use TikTok data to build advertising profiles for unrelated purposes.

4. How We Store and Protect Information

• Token encryption. TikTok access and refresh tokens are stored encrypted at rest using industry-standard encryption (AES-256-GCM) and are only decrypted server-side when a TikTok API call is made on your behalf. Tokens are never exposed to the browser or to other advertisers.
• Access controls. Data belonging to one advertiser is logically isolated and is only accessible to that advertiser and to authorized Service operations performed on their behalf.
• Transport security. All communication between you, the Service, and TikTok occurs over encrypted HTTPS connections.
• Operational safeguards. We restrict internal access to data and apply reasonable administrative, technical, and physical safeguards.

No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

5. How We Share Information

We do not sell your personal information or your TikTok advertising data. We share information only in these limited circumstances:

• With TikTok, as necessary to operate the Service through the TikTok Marketing API, in accordance with TikTok's own terms and policies;
• With service providers who help us operate the Service (for example, hosting and database providers), bound by confidentiality and data-protection obligations and permitted to use the data only to provide services to us;
• For legal reasons, where required by law, regulation, legal process, or to protect the rights, property, or safety of AdsOverflow, our users, or others.

6. Data Retention and Deletion

We retain your data for as long as your account is active or as needed to provide the Service.

• On disconnection. When you revoke the Service's access to a TikTok advertiser account (through TikTok or within the Service), we stop accessing that account's data and delete or de-activate the associated tokens.
• On account closure. When you close your account, we delete your account data and associated TikTok data within a reasonable period, except where retention is required by law.
• On request. You may request deletion of your data as described in Section 7.

We respond to TikTok authorization-removal events to keep account state accurate and to cease access promptly when authorization is withdrawn.

7. Your Rights and Choices

Depending on your location, you may have rights regarding your personal information, including the right to access, correct, delete, or port your data, and to withdraw consent.

• You can disconnect any TikTok advertiser account at any time, which stops further access to that account's data.
• You can request access to, correction of, or deletion of your personal data by contacting us at privacy@adsoverflow.com.

We will respond to verifiable requests within the timeframe required by applicable law.

7.1 GDPR (EEA/UK users)

If you are in the European Economic Area or the United Kingdom, we process personal data on the legal bases of performing our contract with you, your consent, and our legitimate interests in operating and securing the Service. You have the right to lodge a complaint with your local data protection authority.

7.2 CCPA (California users)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.

8. International Data Transfers

We may process and store information in countries other than the one in which you reside. Where required, we implement appropriate safeguards for cross-border transfers of personal data.

9. Children's Privacy

The Service is intended for businesses and advertisers and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: