Privacy Policy

Your account. Your email address, how you sign in (email and password, or Google), when the account was created and your plan. Passwords are handled by our sign-in provider, Amazon Cognito; ControlTok never sees or stores them. If you sign in with Google, we receive your Google account's email address, whether it is verified, and your name; we keep only the email address.

Your TikTok LIVE. The TikTok @handle you connect, its display name and avatar, and per-stream totals (start and end time, peak viewers, likes, follows, shares, gifts and diamonds). If a country is recorded for your account, it is shown in the public “Live Now” showcase.

Your viewers. To run features you turn on, ControlTok stores some of your viewers' public TikTok identifiers (username, nickname and, for some games, avatar) together with what they did: points balances and history, giveaway entries and winners, song requests, wheel spins and game results. We do not keep a log of your chat messages.

Settings and content you create. Overlays, alerts, rules, hotkeys, chat commands, sounds you upload, layouts, profiles and similar configuration.

Connected services (optional). When you connect one, we store what it needs to work: Spotify, YouTube or Apple Music access tokens; a Discord webhook; and, only for the chatbot feature, your TikTok web session so replies can be posted in your own chat. The TikTok session and the Discord webhook are encrypted at rest. Disconnecting a service deletes what we stored for it. Passwords for OBS, VoiceMod, Streamer.bot and Stream Deck stay on your computer, in your operating system's credential store.

Payments. Stripe processes payments. We receive and store your Stripe customer and subscription identifiers and the subscription status, never your card details.

Technical data. Our servers keep standard request logs (such as IP address, time and the request made) for security and troubleshooting, and may report application errors to an error-tracking service.

• To provide ControlTok: connect to your LIVE, run your overlays, alerts, games, points and integrations, and sync your settings between the app and overlays.
• To run your account and subscription, including billing through Stripe.
• To keep the service secure, prevent abuse and fix problems.
• To contact you about your account or important changes to the service.

We do not sell personal information, do not use it for advertising and do not use analytics or advertising cookies.

Only with the services ControlTok runs on or that you choose to use:

• Amazon Web Services (hosting, database, file storage and sign-in through Amazon Cognito), in the United States.
• Stripe (payments).
• Google, if you sign in with Google or connect YouTube.
• EulerStream, which ControlTok uses to connect to TikTok LIVE; it receives your TikTok handle and an internal ControlTok account identifier for that purpose, and the session you provide if you use the chatbot.
• TikTok, to read your LIVE and, if you use the chatbot, to post replies in your chat.
• The services you connect: Spotify, YouTube, Apple Music, Discord, and Roblox for the Roblox profile overlay.
• Text-to-speech: if you pick a Google or TikTok-style voice, the text being read (for example a chat message) is sent to that voice service to be spoken. The default system voice runs on your computer.
• An error-tracking service, for diagnosing crashes.

We may also disclose information when required by law or to protect the rights and safety of users and the service.

• The “Live Now” showcase on ControlTok lists creators who are currently live with their @handle, live stats and country. It is on by default; to be hidden, email us and we will turn it off for your account. Hidden creators only count toward totals.
• Each overlay has a private link. Anyone you give that link to (for example, your streaming software) can see what the overlay shows, including your viewers' names and gifts. Treat overlay links like passwords; if one leaks, delete that overlay and create a new one, which gets a new link.
• Layouts you choose to publish show your TikTok @handle (or a display name) as the author.

ControlTok's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google sign-in is used only to sign you in (we keep your email address). YouTube access, if you connect it, is used only to search and play song requests in your overlays, and is never used for advertising or shared except as described above.

Data is stored on Amazon Web Services in the United States, transmitted over encrypted connections, and access is limited to what operating the service needs. No system is perfectly secure, so we cannot guarantee absolute security.

We keep your information while your account exists. You can disconnect integrations at any time, which deletes their stored credentials. To delete your account, email mskorhan@gmail.com from the address on the account; we delete the account and the data linked to it, including viewer and event records created through it. Copies in backups expire on their normal schedule.

The website uses only the cookies it needs: secure, HttpOnly sign-in cookies, a short-lived cookie that protects the sign-in process, and a small flag that tells the page whether to show “Sign in” or “Your account”. Your light/dark theme choice is saved in your browser. Overlays may cache recent events in your streaming software's browser. The desktop app keeps its sign-in in your operating system's credential store.

You can ask to access, correct, export or delete your information, or object to how it is used, by emailing mskorhan@gmail.com. Depending on where you live you may have additional rights under local law, including the right to complain to a data-protection authority.

ControlTok is for TikTok LIVE creators and is not directed to children. Do not use ControlTok if you are under 13, or under the minimum age TikTok requires to go LIVE where you live.

We will update this page when our practices change and change the date above; for significant changes we will also tell account holders. See also our Terms of Service.