This Privacy Policy explains how Savios ("we", "our", or "us") collects, uses, stores, and protects data within Savios App, an internal paid media management tool hosted at saviosdash.online.
Data obtained through TikTok APIs
1 Data We Access
When an authorized user connects a TikTok for Business account to Savios App via OAuth, our application accesses the following data through TikTok APIs:
- Access token of the authorized account
- Business Centers (IDs and names)
- Ad accounts (ID, name, currency, status, and time zone)
- Ad identities (display name and image)
- Pixels (IDs and codes)
- Catalogs, product sets, and products
- Campaigns, ad groups, and ads (IDs, names, budget, bid, and status)
- Performance metrics: spend, impressions, clicks, CTR, CPC, and CPM
2 User-Submitted Content and Conversion Attribution Data
In addition to data retrieved via TikTok APIs, the tool processes:
- Creative and catalog content uploaded by authorized users: videos and images stored on the tool's servers, as well as ad texts, product prices, and destination links.
- Transaction metadata for ad attribution: the tool receives via payment gateway webhooks the sale status, transaction value, payment method, and source parameters (UTMs). This information is used solely to attribute sales to advertising campaigns. We do not collect or store personal data of end consumers.
3 How We Use the Data
All data accessed through TikTok APIs and uploaded to Savios App is used exclusively to create, manage, and optimize the advertising campaigns and product catalogs of our agency's clients, as well as to generate performance and attribution reports for internal campaign management.
4 Data Storage and Security
We apply strict technical and organizational controls to protect all data processed by the application:
- All data is encrypted in transit (via HTTPS/TLS) and encrypted at rest.
- OAuth access tokens are stored securely in encrypted storage and are never exposed in client-side code or public logs.
- Access to the application and its database is strictly restricted to authorized team members of Savios.
5 Data Retention
Data obtained through TikTok APIs and associated campaign records are retained for as long as the account remains connected to the application, and for up to 90 days after disconnection, unless an earlier deletion is requested by the account holder.
6 No Sale or Third-Party Sharing
Data obtained through TikTok APIs is never sold, rented, licensed, or shared with third parties.
7 OAuth Authorization and Revocation
Access to TikTok accounts is granted voluntarily by the account holder through TikTok's official OAuth authorization flow. The account holder may revoke this authorization at any time directly within their TikTok for Business / TikTok Ads Manager settings or by sending a revocation request to privacy@saviosdash.online.
8 How to Request Data Deletion
Account holders may request the immediate deletion of all data associated with their TikTok Business Center or Ad Accounts by emailing privacy@saviosdash.online with the relevant Account ID or Business Center ID. Upon verification, all stored tokens and account records will be permanently deleted.
Contact Us
For any questions regarding this Privacy Policy or our data practices, please contact us at: privacy@saviosdash.online.