Privacy Policy
Last updated: 21 April 2026
This Privacy Policy explains how Doublewiklich Ltd (“Wikreel”, “we”, “us” or “our”), a company registered in England and Wales, collects, uses and protects personal information in connection with the Wikreel service available at wikreel.site (the “Service”).
We are the data controller of personal data collected through the Service for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information we collect
We collect the following categories of information:
- Account information: email address, password (stored as a one-way hash) and organisation name provided when you sign up.
- TikTok account information: when you connect a TikTok account through the TikTok Login Kit, we receive your TikTok open_id, union_id, avatar, display name and an access token scoped to the permissions you authorise (currently
user.info.basicandvideo.upload). - Content you upload: the video files and captions you submit for publishing to TikTok. Files are transmitted to TikTok and are not permanently stored on our servers.
- Usage data: log events, IP address, browser type and pages visited, used for security and analytics.
2. How we use your information
We process personal information to:
- Operate the Service, including authenticating you and rendering your dashboard;
- Transmit the video creatives you upload to TikTok on your behalf through the official TikTok Content Posting API;
- Keep a log of uploads so your team can see publishing history;
- Detect fraud, abuse and security incidents;
- Comply with legal obligations.
Our lawful bases under UK GDPR are: performance of a contract (to provide the Service you signed up for), legitimate interests (securing the Service and improving it) and consent (where you explicitly authorise TikTok scopes through the Login Kit).
3. How we handle TikTok data
When you connect a TikTok account, you grant Wikreel permission to act on your behalf through scopes displayed on the TikTok authorisation screen. We:
- Store TikTok access tokens encrypted at rest. Refresh tokens are used only to maintain the connection you authorised;
- Never use TikTok data for purposes other than those you have authorised, and never sell or share it with third parties except as required to operate the Service;
- Delete TikTok tokens and associated data within 30 days of you disconnecting the account or closing your Wikreel account.
Our use of TikTok data is also governed by the TikTok API Terms of Service and the TikTok Privacy Policy.
4. Data retention
We keep account information for as long as your Wikreel account is active. When you close your account we delete personal data within 30 days, except where we are required to keep records for tax, legal or security reasons.
5. Data sharing
We do not sell your personal information. We share data only with:
- TikTok — to deliver creatives you choose to publish;
- Infrastructure providers such as Vercel Inc. (hosting) and Upstash (encrypted session storage), acting as our processors under contractual data-protection terms;
- Authorities, when required by law or to protect our legal rights.
6. International transfers
Wikreel is operated from the United Kingdom. Some of our processors are located in the European Economic Area and the United States. Where data is transferred outside the UK, we rely on UK International Data Transfer Addendum or Standard Contractual Clauses.
7. Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- request correction or deletion of your data;
- restrict or object to certain processing;
- request data portability;
- withdraw consent at any time (for processing based on consent);
- lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any of these rights, contact us at privacy@wikreel.app.
8. Security
We use industry-standard security controls, including TLS encryption in transit, encryption of secrets at rest, and access controls on all production systems. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Cookies
Wikreel uses a single HTTP-only session cookie to keep you signed in. We do not use advertising cookies or cross-site trackers.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be announced in the Wikreel dashboard and by email.
11. Contact
Doublewiklich Ltd — a company registered in England and Wales.
Email: privacy@wikreel.app