Brandproved
Brandproved

Privacy Policy

Last updated: August 18, 2026

1. Controller

The controller responsible for processing personal data is:

GbR Mika Jens Ramsl and Mats Ramsl
An der Ehmsenkoppel 28
24376 Rabel, Germany
Email: contact@mehrbytes.com

2. Data We Process

Depending on how you use Brandproved, we may process the following data:

  • Login and contact details such as email address, username, and name;
  • Creator data such as status, country, notes, assignments, and creation dates;
  • TikTok account data such as TikTok Open ID, display name, profile image, and, where provided by TikTok, follower count;
  • Video and performance data such as video ID, publication date, views, likes, comments, shares, and, where available, bookmarks;
  • Technical data required for security, session management, and operation of the website.

3. Purposes of Processing

We process this data to provide and secure the platform, manage authentication and permissions, connect TikTok accounts, store and display creator and video metrics, and support project-based analysis.

4. Legal Bases

Depending on the relationship, processing is based on Article 6(1)(b) GDPR for performing the user relationship, Article 6(1)(f) GDPR based on our legitimate interest in providing a secure and functional analytics tool, and, where required, Article 6(1)(a) GDPR based on consent.

5. TikTok

When a TikTok account is connected, we use TikTok's official OAuth process. We may retrieve the account data and video metrics required for the TikTok API scopes that have been authorized. TikTok also processes data independently as a separate controller. TikTok's Privacy Policy applies.

6. Hosting and Processors

We use Supabase for authentication, database services, and storage. Hosting and deployment services such as Vercel may be used to operate the platform and, where enabled, scheduled updates. Where legally required, data processing agreements are concluded with service providers. Depending on the service and server location, data may also be processed outside the European Union; legally required safeguards will be applied in such cases.

7. Cookies and Sessions

Brandproved uses technically necessary cookies, including partially HTTP-only session cookies for access and refresh tokens, session management, and role management. These cookies support login and security. We currently do not use analytics or marketing cookies.

8. Retention

We generally retain personal data only for as long as necessary for the stated purposes or as required by law. TikTok and analytics data are deleted when the associated account is removed or retention is no longer necessary, subject to statutory obligations and legitimate interests in maintaining records.

9. Your Rights

Subject to the applicable legal requirements, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. Where processing is based on consent, you may withdraw that consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.

10. Contact and Changes

For privacy-related questions, contact us at contact@mehrbytes.com. We may update this Privacy Policy when processing activities or legal requirements change.

Notice: This text is a working draft. Before public use, service providers, server locations, retention periods, and the specific TikTok data processing should be reviewed and finalized from a legal and technical perspective.