Privacy Policy
Last updated: October 14, 2026
This Privacy Policy explains how TTNinja ("TTNinja", "we") collects, uses, shares, stores and deletes information when you use the website ttninja.com.br and the application app.ttninja.com.br (the "Service"), including data obtained from your TikTok account through the official TikTok for Developers APIs. It complies with Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018).
TTNinja is a product developed and operated by Empower360 Ltda., Brazil. Contact: contato@ttninja.com.br — ttninja.com.br
1. Who we are
TTNinja is a web platform that helps creators and businesses automatically reply to comments and direct messages received on their own TikTok account, using rules and texts defined by the user.
TTNinja is the controller of the personal data processed in the Service. Data protection officer (DPO) contact: contato@ttninja.com.br.
2. Data we collect
Account data: name, email and, when you subscribe to a plan, billing data processed by our payment provider (we do not store full card numbers).
TikTok data (only after you authorize it through TikTok Login Kit): account identifier (open_id), display name and profile picture; the list of your videos and their comments; and direct messages, only when needed to run the automations you enabled. We only collect the scopes you approve on TikTok's authorization screen.
Access tokens: TikTok provides us with access and refresh tokens to act on your behalf within the permissions you granted.
Usage and technical data: access logs, IP address, browser and device type, and logs of executed automations.
3. How we use TikTok data
To display your connected account (name and picture) in the TTNinja dashboard.
To read incoming comments and messages and check whether they match the rules and keywords you configured.
To post, on your behalf, the comment replies and direct messages that you wrote and enabled.
To show you reports of the automations executed on your own account.
We do not sell, rent or share TikTok data with third parties for advertising. We do not use this data to build user profiles, for targeted advertising or to train artificial intelligence models. We never access accounts that were not connected by their owners.
4. Legal bases
Performance of a contract: to provide the Service you signed up for.
Consent: to connect your TikTok account and access the authorized scopes, which you can revoke at any time.
Legitimate interest: for security, fraud prevention and Service improvement.
Legal obligation: to keep records required by law.
5. Sharing
We only share data with processors required to run the Service — hosting, database and payment processing providers — under contract and confidentiality obligations.
Replies and messages are sent to TikTok through the official APIs, according to your configuration.
We may disclose data when required by law or court order.
6. Data retention and deletion
We keep your data only while your TTNinja account is active and TikTok is connected.
When you disconnect TikTok in the TTNinja dashboard or revoke access in TikTok, access tokens are deleted immediately and other data obtained from TikTok is deleted within 30 days.
When you delete your TTNinja account, all your personal data is deleted within 30 days, except records we are legally required to keep.
You can also request deletion of your data at any time by emailing contato@ttninja.com.br with the subject "Data deletion". We reply within 15 days.
7. How to revoke TikTok access
In TTNinja: go to app.ttninja.com.br, open Settings and click Disconnect TikTok.
In TikTok: open the app, go to Profile > Menu > Settings and privacy > Security and permissions > Apps and services, select TTNinja and remove access.
8. Security
All traffic is encrypted with HTTPS (TLS). Access tokens are stored encrypted and internal access to data is restricted to the minimum necessary.
9. Your rights
You may request confirmation of processing, access, correction, anonymization, portability, deletion, information about sharing, and withdrawal of consent.
Send your request to contato@ttninja.com.br. You may also file a complaint with Brazil's National Data Protection Authority (ANPD).
10. Cookies
We use strictly necessary cookies for login and operation of the Service and, with your consent, analytics cookies to understand site usage.
11. Children
The Service is intended for users aged 18 and over. We do not knowingly collect data from minors. If we identify such data, it will be deleted.
12. International transfers
Some providers may store data outside Brazil. In such cases, we apply the safeguards required by the LGPD.
13. Changes to this Policy
We may update this Policy. The current version is always on this page with its last-updated date. Material changes will be notified by email or in the dashboard.
14. Contact
TTNinja — ttninja.com.br — contato@ttninja.com.br