TisRadar
Privacy Policy
Last updated: 3 August 2026
This policy explains what data the TisRadar application collects, why it collects it, who else may process it, how long it is kept and what rights you have. It applies to the TisRadar web application at https://tisradar.pl and to this website.
1. Who is responsible for your data
The data controller is TiS AI sp. z o.o., a limited liability company with its registered office at Kłębowo 242, 11-100 Kłębowo, Poland, entered in the Polish National Court Register kept by the District Court in Olsztyn, 8th Commercial Division of the National Court Register, under number 0001082897, NIP 5833499345, REGON 527518453. You can reach us at tisaispzoo@gmail.com for any privacy question or request; we answer in Polish and English.
2. Who uses TisRadar
TisRadar is used by people who manage social media accounts — creators, brand owners and social media managers. An account is created for a named person on request; that person then connects their own social media profiles and sees only their own data.
3. What data we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Sign-in data | Email address and display name from Google Sign-In | You, when signing in to TisRadar |
| Connected account profile | Platform user id, display name, avatar and — where the platform provides it — the username | Facebook, Instagram, Threads, TikTok APIs, after you authorise the connection |
| Account statistics | Follower count, total likes, number of videos, audience age and country breakdowns where the platform provides them | The same platform APIs |
| Your content and its performance | Your posts, reels, stories and videos, their captions and thumbnails, plus views, reach, likes, comments, saves, shares and watch time | The same platform APIs |
| Comments and messages on your posts | Comment text, author display name, timestamp; private replies you send | Facebook, Instagram and Threads only. Not collected from TikTok. |
| Access tokens | OAuth access and refresh tokens for the accounts you connected | Issued by the platform when you authorise the connection |
| Technical data | A single session cookie that keeps you signed in; server logs of application errors | Your browser and our server |
We do not collect payment data, we do not buy data about you from third parties, and we do not build advertising profiles.
4. What we do with it
- Show you how your own accounts and posts are performing, over time and against your own history.
- Suggest topics and publication times, based on your past results, calendar events and public trend data.
- Publish content to the accounts you connected, when you click publish.
- Collect comments on your posts into one inbox and propose replies for your approval.
- Keep you signed in, keep the application secure and diagnose technical problems.
We do not use your data to train machine-learning models, and we do not sell or rent it to anyone.
5. Legal basis
Where the General Data Protection Regulation (EU) 2016/679 applies, we process this data on the basis of the contract with the user of the application (Article 6(1)(b)) and our legitimate interest in operating and securing the service (Article 6(1)(f)). Connecting a social account is always a voluntary, explicit act performed by the user in the platform's own authorisation screen.
6. What TisRadar accesses on TikTok
When you connect a TikTok account, TisRadar can, with the permissions you grant:
- read your basic profile information and your public profile fields, to identify the connected account;
- read your account statistics (followers, likes, video count);
- list your own videos together with their view counts, so performance can be reviewed;
- publish a video to your own TikTok profile — only at the moment you click publish, with the privacy level, interaction settings and commercial-content disclosure that you chose on that screen.
TisRadar does not read TikTok comments, does not access TikTok direct messages, does not access other people's accounts, and never publishes automatically. Data obtained from TikTok is used solely to provide these features to you and is not sold, rented or used for advertising.
7. Who else processes the data
We keep the circle as small as possible. Besides the social platforms themselves, data may be processed by:
- Our hosting provider — the server on which the application and its database run, located in the European Union, and a content delivery and security provider that serves this website.
- Public authorities — only where we are legally required to disclose information.
- The service providers named below, each for one clearly defined task.
| Provider | Country | What it is used for, and what it receives |
|---|---|---|
| OVH | France (EU) | The server on which the application and its database run. All stored data lives here. |
| Cloudflare | USA | Delivery and protection of this website and of the application's address. Sees connection metadata (IP address, requested page), not the contents of your database. |
| USA | Sign-in to the application (email address and display name). Separately, its Gemini model is used to recognise objects in photographs that you upload while composing a post. | |
| Anthropic | USA | Classifying comments received on your Facebook, Instagram and Threads posts and drafting reply suggestions. This is the only provider that receives the original text of those comments. |
| DeepSeek | China | The assistant panel, content suggestions and trend curation. Comment text reaches this provider only after pseudonymisation: personal names are replaced with stable substitutes and the original names are restored solely on your screen. |
| ElevenLabs | USA | Converting a voice-over script that you wrote into audio, when you use that feature. |
We do not authorise any of these providers to use your content for their own purposes. Where a provider's free tier is used, that provider's own terms may nevertheless allow it to use submitted content to improve its services, and we cannot override those terms on your behalf. None of these providers receives your access tokens.
8. How long we keep it
- Performance measurements and your own content records: for as long as the account is connected and the application is in use, because their value lies in long-term comparison.
- Comments received on your posts and the private replies sent to them: for as long as the account is connected and the application is in use, because together they form the record of your conversations with your audience. They are deleted on request — see section 11.
- Access tokens: until you disconnect the account in the application, at which point they are deleted. Revoking access at the platform makes them useless immediately.
- Server error logs: roughly a month, then overwritten by newer entries.
9. Security
The application is served only over encrypted connections (HTTPS). Access requires signing in with Google, and only e-mail addresses with an existing TisRadar account are accepted. Access tokens are stored on the server, never sent to the browser and never shared with third parties. The database is not exposed to the public internet.
10. Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. You also have the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO). To exercise any of these rights, write to tisaispzoo@gmail.com.
11. Data deletion
To request deletion of the data associated with your account, send an email to tisaispzoo@gmail.com with the subject Data deletion and the name of the account concerned. We will permanently delete the stored data (access tokens, collected statistics, content records and comments) within 30 days and confirm the deletion by reply to the same address.
You can also revoke our access yourself at any time in the platform's settings — on Facebook and Instagram under Settings → Apps and websites, and on TikTok under Settings and privacy → Security and permissions → Manage app permissions. Revoking access immediately invalidates the tokens we hold.
12. Cookies
This website uses no tracking or advertising cookies and no analytics scripts. The application itself sets a single cookie, which holds a signed session identifier and exists only to keep you signed in. It is removed when you sign out.
13. Children
TisRadar is a professional tool for managing social media accounts and is not directed at children. We do not knowingly collect data from anyone under 16 years of age.
14. International transfers
Our servers are located in the European Union. Some service providers listed in section 7 may process data outside the European Economic Area; where that happens, the transfer is covered by the European Commission's standard contractual clauses or another legal transfer mechanism.
15. Changes to this policy
If we change this policy we will update the date at the top of this page. Material changes affecting users of the application will additionally be communicated to them directly.
16. Contact
TiS AI sp. z o.o., Kłębowo 242, 11-100 Kłębowo, Poland — tisaispzoo@gmail.com