Privacy Policy
This Privacy Policy explains how Devign LLC, Beirut, Lebanon (“Devign”, “we”, “us”) handles personal information in the TCN Agent mobile app (the “App”) on the App Store and Google Play (iOS bundle ID and Android package: com.devignlb.tcnagent).
The App connects to an agency's own TikTok Backstage account and shows the agency's roster, performance and estimated incentives and bonuses. Each agency uses the App with its own data; agencies never see one another's creators or numbers. The agency subscription is bought through the App Store or Google Play; we never receive your card details.
On this page
- 1. Definitions
- 2. Who uses the App
- 3. Information we collect
- 4. Creator data shown in the App
- 5. How we use information
- 6. Sub-processors and sharing
- 7. Security
- 8. How long we keep data
- 9. Your rights
- 10. Apple App Tracking Transparency
- 11. International transfers
- 12. Deleting your account
- 13. Children
- 14. Push notifications
- 15. Cookies and tracking
- 16. Other services
- 17. Change of control
- 18. Changes to this Policy
- 19. Contact
1. Definitions
- Personal information or personal data: information that identifies, relates to or can reasonably be linked with a person, as defined by the GDPR, the CCPA/CPRA and similar laws.
- Process: any operation on personal data, including collecting, storing, using, sharing and deleting it.
- Sub-processor: a service provider that processes personal data for us under contract.
- User: a person with a TCN Agent account, either an agency owner or an agent.
- Agency: a TikTok creator agency that manages a roster of creators.
2. Who uses the App
The App is open to anyone who runs a TikTok creator agency and to the agents they invite. The owner subscribes for the agency in the App and connects the agency's own TikTok Backstage. Agents join with the owner's invite code and see only the creators assigned to them.
3. Information we collect
These categories follow Apple's App Privacy labels and match what we declare in the stores:
| Data | What we collect | Linked to you? |
|---|---|---|
| Email address | Your sign-in email | Yes |
| Name | Your name, shown in the App and in audit-log entries | Yes |
| User ID | Your internal account ID, which links you to your agency's data | Yes |
| Purchases | Subscription status from Apple or Google: product, number of agents, renewal and expiry dates, and store transaction IDs. No card details. | Yes |
| Messages and media | Messages, photos and voice messages you send in team chats | Yes |
| Product interaction | Screens viewed and features used, to run and improve the App | Yes |
| Crash data | Crash reports | No |
| Performance data | Performance traces | No |
| TikTok Backstage sign-in details | Your own Backstage email and password, only if you connect Backstage; encrypted at rest (see section 7) | Yes |
| Push notification token | Your device's push token, used to send alerts | Yes |
We do not use this data to track you across other companies' apps or websites, and we do not collect advertising identifiers.
We do not collect:
- location data;
- contacts, calendar entries or browsing history;
- health, fitness or biometric data;
- sensitive demographic data such as race, religion, political opinion or sexual orientation;
- payment card or bank details (the stores handle payment).
The App uses your camera roll or microphone only when you choose to send a photo or a voice message in a chat, and only with your permission.
4. Creator data shown in the App
The App shows data about the TikTok creators on your agency's roster, such as handles, tiers, diamond totals, LIVE days and hours and PK counts. This data comes from your agency's own TikTok Backstage, fetched with the sign-in details you provide, or from Backstage export files you upload. The App does not show anything beyond what your agency can already see in Backstage. Each agency is responsible for its own relationship with its creators and for the notices it gives them.
5. How we use information
We use personal information only to:
- sign you in and limit every request to your own agency's data;
- run the App: daily actions, rank-up maths, bonus estimates, alerts and chats;
- sync your agency's roster, performance and incentive data from your own Backstage in the background;
- check your subscription status with Apple or Google and give the right access to your agency;
- keep an audit log of who did what in the App;
- fix bugs and improve the App;
- send push notifications about your creators, and tell you when the Backstage connection needs renewing.
What we do not do: we do not post, message, change or delete anything in your TikTok Backstage. The connection is read-only. We do not use your data for advertising, profiling or automated decisions with legal effects, and we do not sell it.
6. Sub-processors and sharing
We do not sell, rent or trade personal information. These sub-processors handle limited data for us under contract:
| Sub-processor | Country | Data | Purpose |
|---|---|---|---|
| Contabo GmbH | Germany (data centre in France) | All App data at rest | Server hosting and storage |
| Apple Inc. (App Store, Push Notification service) | United States | Subscription status and transaction IDs; device push token and notification content | In-app subscriptions on iOS; notifications on iOS |
| Google LLC (Google Play, Firebase Cloud Messaging) | United States | Subscription status and purchase tokens; device push token and notification content | In-app subscriptions on Android; notifications on Android |
| TikTok Pte. Ltd. | Singapore | Your own Backstage sign-in details, sent to TikTok only when fetching your agency's data | Read-only data fetch from your own Backstage |
| Auth0 (Okta, Inc.) | United States | Email address | Sign-in for accounts created before September 2026 only; newer accounts never reach Auth0 |
We do not share data with advertising networks, data brokers or marketing platforms.
7. Security
- All traffic between the App and our servers is encrypted with TLS 1.2 or higher.
- Backstage sign-in details are encrypted at rest with authenticated AES-based encryption. The key stays on the server and is never sent to devices.
- Sign-in tokens are stored in the iOS Keychain or the Android Keystore.
- Every request is checked against your account, and accounts can never read another agency's data.
- Passwords are hashed with Argon2id, and database queries use parameterised statements.
- Servers run with restricted access, automatic security updates and firewalls.
No system is completely secure. If a personal-data breach happens, we will notify affected users and the relevant authority as the law requires, including within 72 hours under the GDPR where it applies.
8. How long we keep data
- Account data (email, name, account ID, settings): while your account is active, and deleted within 30 days after you delete your account.
- Agency data after a subscription ends: readable for 30 days, then locked; deleted 90 days after the lock.
- Audit-log records: up to 7 years for accounting, tax and legal reasons, pseudonymised after the account closes.
- Backstage sign-in details: only while the connection is on; deleted within 24 hours after you disconnect, sign out or delete your account.
- Push tokens: deleted when you sign out or uninstall the App.
- Crash and performance data: anonymous, kept up to 12 months by the platform providers.
9. Your rights
Everyone can ask us to access, correct, delete or export their personal data (in JSON or CSV).
EEA, UK and Switzerland. We process data to perform our contract with you (the Terms of Use), for our legitimate interests in running the App securely, preventing abuse and improving it, and to meet legal obligations such as keeping accounting records. You can also object to processing based on legitimate interests, ask us to restrict processing, withdraw consent where we rely on it, and complain to your data protection authority. We do not make solely automated decisions with legal or similar effects.
California. You have the right to know, delete and correct personal information, and to non-discrimination for using these rights. We do not sell or share personal information for cross-context behavioural advertising.
To use any of these rights, email support@devignlb.com. We reply within the time the law requires (45 days at most for California requests) and may need to verify your identity first.
10. Apple App Tracking Transparency
The App does not track you as Apple defines it. We do not link App data with other companies' data for advertising or measurement, so the App never shows a tracking prompt.
11. International transfers
Personal data may be processed outside your country, including in France (hosting), the United States (Apple, Google, Auth0) and Singapore (TikTok, for the Backstage connection you authorise). Where the law requires it, we use the European Commission's Standard Contractual Clauses or an equivalent safeguard.
12. Deleting your account
In the App, go to Settings and tap Delete account, or email support@devignlb.com from your account's email address. We close the account straight away and delete personal data within 30 days, except the records described in section 8. Deleting your account does not cancel an App Store or Google Play subscription. See Delete your account.
13. Children
The App is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you think a minor has an account, email support@devignlb.com and we will delete it.
14. Push notifications
If you allow notifications, your device is registered with Apple or Google and we store the push token. We use it only for App alerts, such as creator alerts, rank-up eligibility changes and messages. You can turn notifications off in the App or in your device settings.
15. Cookies and tracking
The App does not use cookies, tracking pixels, advertising SDKs or fingerprinting. This website does not use cookies or analytics either.
16. Other services
The App links to TikTok Backstage and to the App Store and Google Play. Their own privacy policies apply to them.
17. Change of control
If Devign is part of a merger, acquisition, asset sale or insolvency, personal data may pass to the successor. We will tell you in advance in the App or by email, and this Policy will continue to apply.
18. Changes to this Policy
We may update this Policy. When we make material changes, we update the date at the top, publish the new version at this address and tell you in the App.
19. Contact
Devign LLC, Beirut, Lebanon. Email: support@devignlb.com. Website: devignlb.com. We aim to answer privacy questions within 30 days.