Privacy Policy
Last Updated: October 6, 2026
1. Who We Are
TikLiveAPI (www.tikliveapi.com) is responsible for the personal data described in this policy. You can reach us at tikliveapi@gmail.com or through the contact page.
2. Data We Collect
- Account data: your name, email address, a bcrypt hash of your password (we never store the password itself), your API key and the date you signed up. If you regenerate your API key, the keys it replaced stay on record with your account so your usage history stays attached.
- Credits: your credit balance.
- Billing details (optional): the billing name, address, city, country and tax ID you choose to enter under Profile > Billing Information. They appear on your receipts.
- Purchases: for each order, the package, amount, credits, payment method, order ID, status and date.
- Support messages: what you send through the contact form or a support ticket (name, email address, subject and message) and our replies.
- API usage: the number of requests made with your API key per day, used to show your usage history and to run the credit system.
- Security tokens: one-time links for email verification and password resets.
TikTok data returned by the API is never stored. Each request is fetched from TikTok in real time and passed straight back to you; for each API key we keep only request counts.
3. Cookies
We set the cookies the site needs to work, and Google Analytics cookies only if you allow them.
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
PHPSESSID |
Keeps you logged in while you use the site (PHP session). | Essential | Until you close your browser |
tla_consent |
Remembers your cookie choice. | Essential | 180 days |
_ga, _ga_<ID> |
Google Analytics: tells visits and sessions apart. Set only after you accept analytics cookies. | Analytics | Up to 2 years |
| Google reCAPTCHA | Blocks bots on the sign-up, login, password and contact forms. Google may set its own cookies when the check loads. | Security (Google) | Set by Google |
You can change your choice at any time with the "Cookie settings" link in the footer of every page, or here: . If you withdraw consent, Google Analytics stops loading and we remove its cookies from this site.
4. Analytics and Bot Protection
Google Analytics 4 runs only if you choose "Accept analytics" in the cookie banner; until then it is not loaded at all. It helps us understand how the site is used: pages viewed, device and approximate location, and steps such as signing up or buying credits. We do not send your name, email address or API key to Google Analytics.
Google reCAPTCHA v2 protects the sign-up, login, password reset and contact forms against bots. It runs on those forms only; to check a submission, Google receives your IP address and information about your browser.
5. Payments
Payments are made in cryptocurrency and processed by Cryptomus. Card payments are temporarily unavailable. Your wallet details are entered on Cryptomus's pages and never touch our servers. We only receive a confirmation of the payment status together with the order reference.
6. Email
We send account emails (account verification, password resets, API key change notices, receipts and support replies) through our email delivery provider. Your email address is used for these messages and for replies to inquiries you send us; we do not sell it or share it for marketing.
7. Who Processes Your Data
- Google: Google Analytics, only with your consent, and reCAPTCHA on the sign-up, login, password and contact forms.
- Cryptomus: cryptocurrency payments.
- Our email delivery provider: sends the account emails listed above.
- Our hosting provider: runs the website and its database.
Google may process data outside your country, for example in the United States. We do not sell your personal data.
8. Data Retention
We keep your account data for as long as your account exists. API usage statistics are kept to show your usage history and for billing transparency. What we keep after you delete your account is described in the next section.
9. Deleting Your Account
You can delete your account from Profile > Settings. Deleting is permanent: you can no longer log in, your API key stops working and any remaining credits are removed, and the email address can't be used to register again. To prevent repeat sign-ups and for accounting, we keep the account record, including the email address, together with purchase and usage records. If you want a refund for an unused package, request it before deleting your account.
10. Your Rights
Depending on where you live (for example under the GDPR, or the KVKK in Turkey), you can:
- ask for a copy of the personal data we hold about you (access);
- have inaccurate data corrected. You can change your name and password under Profile > Settings and your billing details under Profile > Billing Information;
- ask for deletion. You can delete your account yourself; what we keep afterwards is described in Deleting Your Account;
- object to how we process your data;
- receive your data in a portable format (data portability);
- withdraw your analytics consent at any time with "Cookie settings";
- complain to your data protection authority. In Turkey this is the Personal Data Protection Board (KVKK Board).
To exercise these rights, email tikliveapi@gmail.com or reach us through the contact page.
11. Changes to This Policy
We may update this policy from time to time. The "Last Updated" date at the top of this page shows the current version.