Privacy Policy

PeakPoint TSP is a marketplace operated by PeakPoint Media that connects Sellers and brands with TikTok Creators for product promotion and collaboration opportunities. Using the platform necessarily involves handling information about you, and this document explains what we handle and why.

This policy covers the PeakPoint TSP website and the Seller and Creator workspaces. It should be read alongside our Terms of Service, which govern your use of the platform.

If you do not agree with how information is handled as described here, please do not use PeakPoint TSP.

We collect only what the platform needs to work. Some information you give us directly; some is created as a by-product of using the marketplace.

Account information

• Your email address
• If you register with an email address and password, your password, stored only in a hashed form we cannot read
• If you use Continue with Google, the basic Google account information described in the Google Sign-In section
• The full name or display name you provide during onboarding
• Your country and state or region
• For Creators only, your birth year

Profile information

• A profile image, if you upload one
• A profile banner or cover image, if you upload one
• Creator profile details such as a handle, headline, bio, languages, content styles, content categories, portfolio images and the services you offer
• Seller profile details such as a business name, business username, business email, website, industry, product categories, logo, headline and description
• For Sellers who submit them, a business registration number and a copy of the business registration document — see Seller Business Verification
• For Creators who choose to verify a TikTok account, the information described in TikTok Account Verification

Marketplace activity

• Products and opportunities created by Sellers, including drafts
• Applications submitted by Creators, including proposals and proposed rates
• Collaboration records created when an application is accepted
• Favourites, saved products and saved creators
• Messages you send through the platform, including any attachments
• Files you upload, such as product images, supporting documents and message attachments
• Notification and communication preferences you set

Enquiries

If you use our contact or support forms, we receive the name, email address, subject and message you enter. These are delivered to our team by email so that we can reply.

Technical information

We process the basic technical information needed to operate and secure the service, such as information handled by our hosting and authentication providers when your browser makes a request. We also record limited events such as when a signed-in user views a profile or a product, which supports the view counts shown to profile and product owners, and when a password was last changed, which supports account security.

You can create an account or sign in using Continue with Google. This section explains exactly what PeakPoint TSP receives from Google and what happens to it.

What we receive from Google

When you choose Continue with Google, you sign in on Google's own pages and Google asks whether to share basic information about your account with PeakPoint TSP. PeakPoint TSP requests only Google's standard email and profile permissions. With them, Google provides basic profile information, which includes:

• Your name
• Your email address, and whether Google has verified it
• Your Google profile picture
• A unique identifier for your Google account, which lets us recognise it the next time you sign in

We do not receive your Google password. You enter it only on Google's pages, never on PeakPoint TSP. We do not request access to your Gmail, Google Contacts, Google Drive, Google Calendar, YouTube or any other Google service, and PeakPoint TSP cannot read, send or change anything in your Google account.

How we use it

• To create your PeakPoint TSP account, or to sign you in to the account that belongs to that email address
• To pre-fill your name during onboarding, so you do not have to retype it — you can edit or replace it before continuing, and change it later
• To use your email address as your account email, for signing in and for the service emails described in this policy
• To use your Google profile picture as the default picture on your profile until you upload your own

We use Google user data only to provide and improve PeakPoint TSP's sign-in and profile features. We do not sell it, use it for advertising, use it to build advertising or marketing profiles, use it for credit or lending decisions, transfer it to data brokers, or use it to train artificial intelligence models.

Where it is stored

Google-provided information is stored in PeakPoint TSP's account and profile records, held by our authentication and database provider. So that your picture loads reliably, we also save a copy of your Google profile picture in PeakPoint TSP's own file storage. When you sign in with Google again, we may update that copy if your Google picture has changed — but we never replace a picture you uploaded yourself.

Who it is shared with

Your name and profile picture appear where your profile is shown, as described in Information Visible to Others. Your email address is not shown to other users. Beyond that, Google user data is shared only with the service providers that operate PeakPoint TSP — our hosting, authentication, database and email delivery providers — to the extent needed to run the service, or where required by law, as described in How Information May Be Shared.

How it is protected

Sign-in takes place over encrypted connections, and access to account records is restricted at the database level so that other users cannot read your email address or account details. The wider safeguards are described in Data Security.

How long it is kept, and how to delete it

We keep Google-provided information for as long as your PeakPoint TSP account exists. You can delete your account at any time from your account settings, or ask us to delete it by emailing tsp@peakpointadvertising.com. Deleting your account deletes your Google-provided name, email address and account identifier from our records and removes the link between your Google account and PeakPoint TSP; the saved copy of your Google profile picture is removed from our file storage as part of the same deletion. See Account Deletion for details.

You can also remove PeakPoint TSP's access from your Google Account at any time through Google's third-party connections settings. That stops future sign-ins with Google, but it does not delete your PeakPoint TSP account or the information already stored in it — to remove that, delete your account. An account created with Google can also add a PeakPoint TSP password in its account settings, after which you can sign in either way.

PeakPoint TSP's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Your use of Google's sign-in service is also governed by Google's own terms and privacy policy.

We use the information described above to:

• Create, authenticate and manage your account
• Provide the marketplace and the features of your workspace
• Display your profile to other users and visitors where appropriate
• Help Sellers and Creators discover one another and communicate
• Process applications, collaborations and related activity
• Review the business registration details Sellers submit for verification
• Verify TikTok accounts that Creators choose to connect, and show the verified handle and follower count on their profile
• Send notifications and service-related messages you have not opted out of
• Respond to enquiries you send us
• Maintain, troubleshoot and improve the platform
• Protect against fraud, abuse, security incidents and misuse of the service
• Comply with applicable legal obligations and enforce our agreements

PeakPoint TSP is a marketplace, so parts of your profile are meant to be seen. Some of it can be seen by visitors without an account, through PeakPoint TSP's public creator and product listings; some only by signed-in users; and some never. The distinction matters, so it is set out plainly here.

Creator information that may be visible

On public creator listings, which anyone can view:

• Display name and handle
• Profile image and profile banner
• Headline and bio
• Country and state or region, where provided
• Content category and availability for campaigns
• Once you have verified a TikTok account, its TikTok handle, follower count and a verified badge

In addition, to signed-in Sellers:

• The rest of your creator profile, such as languages, content styles, services offered and portfolio images
• Applications you send, which are visible to the Seller who received them

Seller information that may be visible

On public product listings, which anyone can view:

• Published products and opportunities
• Your business name, logo and, once approved, a verified business badge

In addition, to signed-in Creators:

• Business or display name, and business username
• Logo, profile image and banner
• Headline, description, industry and website
• Country and state or region, where provided
• A business email address, only if you choose to publish one
• Your business registration number, only after it has been approved through Seller Business Verification

Information that stays private

• The email address you sign in with, and your password
• Authentication credentials and session information
• A Creator's birth year and exact age, which are never shown to Sellers or other users
• A Seller's business registration document, which is seen only by that Seller and by the PeakPoint TSP administrators who review it
• TikTok verification codes and the history of verification checks
• Private account settings and notification preferences
• Draft or archived products, which are visible only to the Seller who owns them
• Private message content, which is visible only to the people in that conversation

Creators are asked for a birth year only during onboarding. We do not ask for a birth month, a birth day or a full date of birth.

The birth year is used internally to calculate a Creator's current age so that Sellers can filter creators by age range when searching for campaign participants. Because age is calculated from the stored year rather than saved as a fixed number, it stays accurate over time.

A Creator's birth year and exact age are not shown to Sellers or to any other user. They are not part of a Creator's public profile and are not returned by the public marketplace listings. When a Seller filters by age range, the platform returns the creators who match without disclosing anyone's age or birth year.

Sellers are not asked for a birth year or any age information, and no such field exists for Seller accounts.

Creators can choose to verify a TikTok account from their profile. Verification is optional and is not required to use PeakPoint TSP. It lets Sellers see that a Creator controls the TikTok account shown on their profile, and shows that account's follower count as read from TikTok rather than as typed in by hand.

How it works

You enter your TikTok username, and PeakPoint TSP gives you a one-time code that is valid for 60 minutes. You place the code in your TikTok bio, and we then use a third-party data provider to read the publicly available profile of that TikTok account and check that the code is there.

What is read and what we keep

The check reads the account's public profile: its username, display name, profile picture, bio, follower and following counts, TikTok's identifier for the account, and whether the account is private. The bio is read only to look for your code and is not stored. Once verification succeeds, we keep:

• The TikTok username, a link to the profile and TikTok's account identifier
• The account's display name and a link to its profile picture
• Its follower and following counts, and whether the account is private
• When the account was verified and when its figures were last refreshed

The verification code is deleted once verification succeeds. You can refresh your follower count later, which reads the public profile again.

What we do not do

We do not ask for your TikTok password, sign in to your TikTok account, or access private content such as your messages or unpublished videos, and PeakPoint TSP cannot post, comment or act on TikTok on your behalf.

Visibility and disconnecting

Your verified TikTok handle, follower count and verified badge are shown on your profile and on public creator listings. You can disconnect TikTok from your profile at any time; disconnecting deletes the stored TikTok account record together with any pending verification code and check.

Sellers can submit their business registration number (for example, an SSM registration number) and a copy of the business registration document so that PeakPoint TSP can confirm the business is registered.

• The registration document is kept in private storage. It is never published, and only you and the PeakPoint TSP administrators who review it can open it.
• Your registration number is shown to Creators on your business profile only after an administrator has approved it. A number that has not been approved is not published.
• Each submission is kept as a verification record, together with the administrator's decision and any reason given, so that the history of a review remains available to you and to our administrators.

PeakPoint TSP relies on third-party providers to operate. They process information on our behalf, only as needed to provide their service to us:

• Hosting, which serves the website and handles each request your browser makes
• Authentication, database and file storage, which hold your account, profile and marketplace records and the files you upload
• Email delivery, which sends service emails such as account confirmation, password reset and application notifications, and delivers enquiries sent through our contact forms to our team
• Google, when you choose Continue with Google, as described in Google Sign-In
• A TikTok profile data provider, which reads public TikTok profiles when a Creator verifies a TikTok account, as described in TikTok Account Verification

PeakPoint TSP does not use advertising networks or third-party analytics or tracking services.

Third-party services are operated by their own companies and are governed by their own terms and privacy policies. We encourage you to read them.

We do not sell personal information. Information may be shared in the following circumstances:

• With other users and visitors, where information is intentionally displayed on a marketplace profile, a public listing, a published product, an application you submit or a conversation you take part in
• With service providers that help us operate the platform, as described above, and only to the extent needed to perform that work
• When required by law, such as in response to a valid legal request or to comply with an applicable legal obligation
• To protect the platform, its users and PeakPoint Media, including to investigate suspected fraud, abuse or security incidents, or to enforce our Terms of Service
• In connection with a business transaction, such as a merger, acquisition or transfer of assets, where information may be transferred as part of that transaction

We share information only in the circumstances described above. If our practices change, this policy will be updated and the “Last updated” date revised.

Conversations, applications and collaboration records are stored so the platform can work as expected: so a Seller can review an application, so both parties can return to a conversation, and so the history of a collaboration remains available to the people involved.

Message content is visible to the participants in that conversation. Attachments you send — images, PDF documents and voice notes — are stored privately and can be opened only by the participants, through short-lived links.

We may also access this information where reasonably necessary to investigate suspected fraud or abuse, to respond to a report, to comply with a legal obligation, or to protect the safety and integrity of the platform and its users.

PeakPoint TSP uses a small number of cookies and browser storage entries, all of which the service needs to work or to remember your own preferences:

• Sign-in session cookies, which keep you signed in while you use the platform
• A preference cookie that remembers whether you collapsed the navigation sidebar
• Entries in your browser's local storage that remember your light or dark theme and how you arranged filter panels

We do not use advertising cookies or third-party analytics cookies. When you use Continue with Google, Google may set its own cookies on its own pages, under Google's policies.

We use reasonable technical and organisational measures designed to protect information against unauthorised access, disclosure, alteration and loss. Access to data is restricted at the database level so that each account can reach only its own information and the marketplace information intended to be public. Passwords are stored in hashed form, and connections to the platform are encrypted in transit.

Private files — business registration documents, product supporting documents and message attachments — are kept in private storage and opened only through short-lived links. Administrator access is limited to authorised PeakPoint TSP staff, and administrative actions are recorded in an audit log. Credentials for the services we rely on are kept on our servers and are never sent to your browser.

However, no online service or method of electronic storage can be guaranteed to be completely secure. We cannot promise absolute security, and you share information with the platform on that understanding.

You can help protect your account by using a strong, unique password, keeping it confidential, and contacting us promptly if you believe your account has been accessed without your authorisation.

We retain information for as long as is reasonably necessary to provide the platform, maintain accurate records, comply with our legal obligations, resolve disputes and enforce our agreements. Retention periods vary depending on the type of information and the reason we hold it:

• Account, profile and Google sign-in information is kept for as long as your account exists.
• Products, applications, collaborations and messages are kept for as long as the accounts involved exist, so that both parties can refer back to them.
• TikTok verification information is kept while the TikTok account remains connected. Verification codes expire after 60 minutes and are deleted once verification succeeds.
• Seller verification records are kept for as long as the Seller account exists, as the record of what was reviewed and decided.
• Enquiries sent through our contact forms are kept in our email for as long as needed to respond and to keep a record of the conversation.

When information is no longer needed for these purposes, we take steps to delete it or otherwise remove its association with you. What happens when you delete your account is described in Account Deletion.

Depending on where you live and the laws that apply to you, you may have rights in relation to your personal information, including the right to:

• Access certain personal information we hold about you
• Correct or update information that is inaccurate or incomplete
• Request deletion of your information in certain circumstances
• Object to or restrict certain processing

Within the platform itself you can, at any time:

• Edit your profile information, including name, location and imagery
• Set or change your password from your account settings
• Manage which notifications you receive
• Disconnect a verified TikTok account
• Delete your account

To exercise a right that is not available directly in the platform, contact us at tsp@peakpointadvertising.com. We may need to verify your identity before acting on a request, and some requests may be limited by applicable law or by information we are required to retain.

You can delete your PeakPoint TSP account yourself from your account settings. To prevent accidental deletion, you are asked to confirm by typing a confirmation: your business name for a Seller account, or the word DELETE for a Creator account. You can also ask us to delete your account by emailing tsp@peakpointadvertising.com from the email address linked to it.

What is deleted

Deletion takes effect immediately and cannot be undone. It deletes:

• Your sign-in record, including your email address, your password if you set one, and any linked Google sign-in
• Your account and profile records, including any name, email address and profile picture information received from Google
• Your Seller or Creator profile, including business verification submissions and any connected TikTok account record
• Your products, applications, collaborations, favourites and notification settings
• Messages you sent, and conversations you started, which are removed for the other participants too

Files you uploaded — such as profile images, the saved copy of your Google profile picture, product images and documents, business registration documents and message attachments — are no longer linked to any account once it is deleted, and are then removed from our file storage.

What may remain

• View counts on other users' profiles and products, which are kept without any link to your account
• Notifications other users already received about your earlier activity, and records of administrative actions taken on your account, which are kept for accountability
• Copies held for a limited period in our infrastructure providers' routine backups, or information we must keep to meet a legal obligation, resolve a dispute, or prevent fraud or abuse

If you have a question about what remains after deletion, or want confirmation that a deletion has been completed, contact us at tsp@peakpointadvertising.com.

We may update this Privacy Policy from time to time to reflect changes to the platform, our practices, or legal requirements. When we do, we will revise the “Last updated” date shown at the top of this page. Where changes are significant, we will take reasonable steps to inform you. Continuing to use PeakPoint TSP after an update means you accept the revised policy.

If you have questions about this Privacy Policy or about how your information is handled, contact us at tsp@peakpointadvertising.com or through the contact page.

PeakPoint TSP is operated by PeakPoint Media.