TikTok Reporting Integration: Privacy Policy

Last updated: 2 September 2026

1. About this policy

This policy covers the TikTok reporting integration operated by The Thoughtful Agency (Aust) Pty Ltd (ABN 86 630 992 657), trading as The Thoughtful Agency (“we”, “us”, “our”). It explains what data our TikTok developer application reads, why we read it, who we share it with, how long we keep it, and how to have it removed.

It sits alongside our Terms and Conditions for the same integration, and alongside TikTok’s own privacy policy, which continues to govern your TikTok For Business account.

2. What the integration reads

We are a marketing agency. We buy and manage paid media for our clients, and we report on how that media performs. Our TikTok developer application reads advertising performance data from the TikTok ad accounts we manage. It is read only.

Through the TikTok Marketing API we read:

• Ad account information, including which accounts our authorisation covers, their currency and their time zone.
• Campaign, ad group and ad records, so that the identifiers in performance data can be matched to their names.
• Advertising performance metrics, including spend, impressions, clicks, conversions and conversion value, at campaign, ad group and ad level.

3. Personal information

The integration reads aggregated advertising performance figures. It does not read personal information about TikTok users. We do not receive names, contact details, device identifiers, location data or any other information that identifies an individual TikTok user, and we do not attempt to re-identify individuals from the aggregated figures we do receive.

The only personal information involved is the business contact details of the person at an advertiser who authorises the application, which we hold so that we can administer the authorisation and contact them about it.

4. Why we use the data

• To report to our clients on the performance of the advertising we run for them.
• To compare performance across the accounts we manage, so that our reporting has a point of reference.

We do not use TikTok data to build or improve user profiles or audience segments, we do not use one client’s account data to identify or single out another client, and we do not sell TikTok data.

5. Who we share it with

We use a third party reporting supplier, Beam AI, to help produce our client reports. Beam AI receives the reporting data described in section 2 and uses it only to produce reports for us. They act on our behalf, under a written agreement that requires them to keep the data confidential and secure, to use it for no other purpose, and to delete all of it when we stop working with them. Beam AI have separately accepted TikTok’s developer terms, and we remain responsible to TikTok for their handling of this data.

Beyond that, we do not disclose TikTok data to anyone other than the advertiser the data belongs to, or where we are required to by law.

6. How we hold it

Reporting data is held in our managed cloud data warehouse, access to which is restricted to the people who need it to produce reports. Access credentials for the integration are held in a managed password vault and shared only with Beam AI, the supplier described in section 5. We revoke credentials when they are no longer needed, and when a working relationship ends.

7. How long we keep it

We keep reporting data for 36 months, so that we can produce reports covering prior periods and show performance over time. After that it is deleted.

8. Your choices

An authorised user of the ad account can withdraw our access at any time, without our agreement:

• In your TikTok For Business authorisation settings, remove the authorisation you granted to our application.
• Or contact us at privacy@thethoughtfulagency.com and we will revoke the access token at our end.

Withdrawing authorisation stops all further access immediately. You can also ask us at any time what data we hold for your accounts, ask us to correct it, or ask us to delete it, by writing to privacy@thethoughtfulagency.com. We will respond within a reasonable period, and in any case within the time required by law.

9. Complaints

If you are not satisfied with how we have handled your data or your request, contact us first at privacy@thethoughtfulagency.com so we can try to resolve it. If you remain unsatisfied, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.

10. Changes

We may update this policy as the integration changes. The date at the top shows when it was last updated. If a change materially affects how we handle your data, we will tell the advertisers whose accounts are authorised.

11. Contact

Questions about the integration, or about the data we hold, can go to privacy@thethoughtfulagency.com.

The Thoughtful Agency
Sydney | Melbourne | Los Angeles