Privacy Policy

1. Who we are

BoomScale Technology ("we", "us", "our") is a software company that provides advertising operations tools for advertisers, agencies, and app developers. This Privacy Policy applies to our website and to the BoomScale platform (together, the "Services").

2. Information we collect

We collect the following categories of information:

• Account information — name, business email address, company name, role, and login credentials.
• Advertising platform data — information relating to TikTok ad accounts that you explicitly authorise us to access, such as campaign structure, ad account identifiers, Business Center membership, and performance metrics.
• Usage data — log data, device and browser type, IP address, pages viewed, and actions taken inside the platform.
• Communications — messages you send to us by email or through a contact form.

3. How we use information

We use the information described above to:

• Provide, operate, and maintain the Services, including connecting to advertising platforms on your instruction.
• Display reporting and analytics on advertising performance within your workspace.
• Authenticate users, enforce permissions, and maintain audit records.
• Respond to enquiries and provide customer support.
• Detect, prevent, and address technical issues, fraud, or misuse.
• Comply with legal obligations and enforce our agreements.

We do not sell personal data, and we do not use advertising platform data for any purpose other than delivering the Services to the advertiser that authorised access.

4. TikTok platform data

Where you connect a TikTok account or Business Center, we access data only through the official TikTok APIs and only for the permissions you grant during authorisation. Our use of that data is limited to the purposes described in this policy and is subject to TikTok's platform terms and developer policies.

You can revoke our access at any time from your TikTok Business Center or account settings. Once access is revoked, we stop retrieving new data and delete stored platform data in accordance with the retention section below.

5. Sharing and disclosure

We do not sell or rent personal data. We share information only with:

• Service providers that host our infrastructure, deliver email, or provide analytics, under written confidentiality obligations.
• Professional advisers, where necessary for legal, tax, or audit purposes.
• Authorities or third parties where required by law, or to protect our rights, users, or the public.
• A successor entity in connection with a merger, acquisition, or sale of assets, subject to this policy.

6. Data security

We use encryption in transit (TLS) and at rest, role-based access control, least-privilege scoping of platform credentials, and logging of administrative actions. No method of transmission or storage is completely secure, but we review our safeguards regularly and limit access to personnel who need it to operate the Services.

7. Data retention

We retain personal data for as long as your account is active or as needed to provide the Services. Advertising platform data is retained for the period required to deliver reporting and is deleted or anonymised within 90 days after authorisation is revoked or your account is closed, unless a longer period is required by law.

8. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us at contact@boomscale.tech. We respond to verified requests within 30 days.

9. Cookies

Our website uses strictly necessary cookies to keep you signed in and to remember language preferences. We do not use advertising cookies on this website. You can block cookies in your browser settings, although parts of the Services may then not function correctly.

10. International transfers

We may process data in countries other than your own. Where we transfer personal data across borders, we rely on appropriate safeguards such as standard contractual clauses.

11. Children

The Services are intended for business use and are not directed to individuals under 18. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced on this page with a revised update date. Continued use of the Services after a change constitutes acceptance of the revised policy.

13. Contact

Questions about this policy or our data practices can be sent to contact@boomscale.tech.