Privacy Policy
Last updated: 10 August 2026
This Privacy Policy explains how Appledot Studio (“Appledot”, “we”, “us”) collects, uses, stores, and protects your personal data when you use the Appledot Affiliate Hub (the “Platform”). We handle personal data in accordance with Malaysia’s Personal Data Protection Act 2010 (PDPA). By using the Platform you agree to this Policy.
1. Data we collect
We collect the following categories of data:
- Account data you provide — name, email address, phone number, role (creator, seller, or staff), and password (stored only in hashed form).
- TikTok account data — obtained only if you choose to connect your TikTok account (see Section 2).
- Campaign and performance data — samples requested, campaigns joined, content submitted, and commission or performance records associated with your account.
- Technical data — basic log information such as device, browser, and access times, used to operate and secure the Platform.
2. Data obtained through TikTok
Connecting your TikTok account is optional and is done through TikTok’s official Login. When you connect, you grant us read-only access to the following, based on the permissions (scopes) you approve:
| TikTok permission | What we receive and why |
|---|---|
| user.info.basic | Your TikTok open ID, avatar, and display name — used to identify your connected account and show it in your profile. |
| user.info.profile | Your profile information such as bio description, profile link, and verified status — used to display an accurate creator profile. |
| user.info.stats | Aggregate account statistics — follower count, following count, likes count, and video count — used to help match you with suitable campaigns and show your reach. |
| video.list | A list of your public videos, including titles, thumbnails, share URLs, and per-video view, like, comment, and share counts — used to display your content and its performance within the Platform. |
We access this data only to operate the features described above. We do not post, edit, or delete anything on your TikTok account, and we do not sell your TikTok data or use it for advertising. Our use and storage of TikTok data complies with the TikTok Developer Terms of Service and TikTok’s policies.
3. How we use your data
- to create and manage your account and provide the Platform’s features;
- to match creators with relevant campaigns and display creator profiles to sellers;
- to record and report campaign participation, content, and commissions;
- to communicate with you about your account and the service;
- to secure the Platform and comply with legal obligations.
4. How we share your data
We share the minimum data necessary to operate the Platform: a creator’s profile and content performance may be shown to sellers running campaigns the creator participates in. We use trusted service providers — including cloud hosting and infrastructure (Supabase, Vercel) and email delivery (Resend) — that process data on our behalf under confidentiality obligations. We do not sell your personal data. We may disclose data where required by law.
5. Data storage and security
Data is stored on secured cloud infrastructure with access controls and encryption of sensitive credentials. We apply row-level access rules so users can only access data they are authorised to see. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.
6. Data retention and deletion
We keep your data for as long as your account is active or as needed to provide the Platform. You can disconnect your TikTok account at any time, which revokes our future access and removes the associated TikTok data from your profile. You may request deletion of your account and personal data by contacting us at info@appledotstudio.com; we will delete data that we are not legally required to retain.
7. Your rights
Under the PDPA you have the right to access, correct, and request deletion of your personal data, and to withdraw consent for optional processing such as the TikTok connection. To exercise these rights, contact us at the address below.
8. Children
The Platform is not intended for anyone under 18, and we do not knowingly collect data from children.
9. Changes to this Policy
We may update this Policy from time to time. Material changes will be reflected by the “Last updated” date above.
10. Contact us
For any privacy question or request, contact Appledot Studio at info@appledotstudio.com.