Privacy Policy

Volume is a tool for short-form creators. It monitors public posts from TikTok accounts you nominate, identifies which content formats are performing, and drafts posts in those formats for you to review and publish. We are the data controller for the information described below.

When you connect TikTok, you are sent to TikTok’s own consent screen and you choose whether to grant access. We never see or store your TikTok password. We request these permissions and no others:

• —user.info.basic and user.info.stats — your open ID, username, display name, avatar and follower count, so the app can show you which account is connected.
• —video.list — your own posts and their view, like, comment and share counts. This is the complete set of metrics TikTok makes available to us. We do not receive watch time, retention, audience demographics, or any per-slide data, because TikTok does not expose them.
• —video.upload — permission to place a draft post into your TikTok inbox. Nothing is ever published to your profile by us; you publish it yourself from the TikTok app.

If we later add direct publishing, that requires an additional permission which TikTok will ask you to approve separately, and each post will still require your explicit confirmation.

You tell us which accounts you want watched. For those accounts we collect only information that is publicly visible on TikTok — post captions, publish dates, and public counts such as views, likes, comments and shares. We obtain this through a third-party public-data provider rather than scraping TikTok ourselves.

We analyse the structure of those posts — how many slides, what kind of opening line, where the call to action sits. We do not republish anyone’s content, and drafts we generate for you are written from structural patterns, never copied from another creator’s words.

• —We do not sell your data, and we do not share it with advertisers or data brokers.
• —We do not post to your profile. Drafts land in your TikTok inbox and you decide.
• —We do not access your TikTok direct messages, followers list, or private analytics — we do not request those permissions.
• —We do not use your content to train general-purpose AI models.

We analyse structural features across our customer base — how often a numbered-list opening outperforms a question, for instance — so that a format working in your niche is spotted sooner. This pooling uses derived attributes only: slide counts, opening types, pacing.

We never pool the look, voice, or persona of your content, and pooled data is never traceable back to an individual account. If you would rather be excluded entirely, email us and we will opt you out.

We use a small number of processors, each contractually limited to providing their service to us: a cloud database and file storage provider, a public-data provider for competitor posts, an email delivery provider for digests, and an AI provider that generates draft text and reads post imagery. Providers are not permitted to use your data for their own purposes.

You can disconnect TikTok at any time from Settings, which immediately deletes the stored tokens and stops all access. You can also revoke access from within TikTok’s own settings, which has the same effect.

To delete your account and everything associated with it, use the delete option in Settings or email [email protected]. We remove your data within 30 days, except where we are legally required to retain records such as invoices. Backups are purged on a rolling 35-day cycle.

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, object to processing, or receive it in a portable format. Email us and we will action it within 30 days, free of charge. If you are unhappy with our response you may complain to your local data protection authority.

Access tokens are encrypted at rest and the encryption key is stored separately from the database, so a copy of the database alone does not grant access to any TikTok account. Data is encrypted in transit. Access to production systems is limited to those who need it.

Volume is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

If we make a material change we will email account holders before it takes effect. The date at the top of this page always reflects the current version.