Privacy Policy

Effective date: 25 October 2026

1. Controller

The controller responsible for personal data processing associated with JARVIS TikTok Automation is:

Kenny’s Lab

Gerard Kennedy De Jesus Valdez

c/o POSTFLEX PFX-336-601

Emsdettener Straße 10

48268 Greven

Germany

Email: anfrage@kennyslab.de

Telephone: +49 155 69236392

Contact form: kennyslab.de/kontakt

For access, deletion, objection or other data protection requests, contact us using the email address above.

2. Scope of this policy

This policy describes personal data processing associated with the public JARVIS TikTok Automation website and the intended integration with TikTok Login Kit and the Content Posting API.

The TikTok integration is being developed. References to future integration functions describe processing that may occur when those functions become operational and a user authorizes them.

TikTok independently processes personal data in accordance with its own privacy notices and platform terms.

3. Website access and technical logs

When you visit this website, technical information may be processed by the server and its infrastructure, including your IP address, date and time of requests, requested URLs, browser-related information and security or diagnostic events.

This information is used to deliver the website, maintain technical operation, detect misuse and investigate security incidents.

The legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in operating a secure and functional website.

Technical logs are retained only as long as necessary for their purposes, subject to applicable retention obligations. The actual log retention settings of the hosting infrastructure determine the operational retention period.

4. TikTok account connection

When the TikTok integration is available and you choose to connect your account, TikTok may provide an authorization code, access token, refresh token, TikTok-specific account identifier and profile information within the permissions you grant.

Depending on the approved permissions, this may include an account display name or avatar.

Access and refresh tokens are credentials used to communicate with TikTok on your behalf. They must be handled as confidential data and are not intended for publication.

The purpose is to establish and maintain the connection you request and to perform explicitly authorized functions.

The legal basis is Article 6(1)(b) GDPR where processing is necessary to provide the service requested under a contract. Where access is based on a separately optional choice, Article 6(1)(a) GDPR may also apply to the relevant consent-based processing.

TikTok authorization and GDPR consent are legally distinct. Authorizing API permissions does not by itself replace a valid GDPR legal basis.

5. Video content and publication information

If video-management functionality is enabled, the service may process content you provide or authorize, including video files, images, captions, hashtags, descriptions, posting preferences, visibility settings and publication status.

Content may contain personal data of identifiable individuals. You are responsible for ensuring you have an appropriate basis for providing such material.

The data is processed to prepare content, carry out user-selected publishing actions, transmit content to TikTok and report the results.

The legal basis is Article 6(1)(b) GDPR where processing is necessary to provide the requested service, or another applicable legal basis depending on the specific processing activity.

Following authorized submission, TikTok processes uploaded data under its own applicable rules and privacy framework.

6. AI-assisted processing

The service is designed to support AI-assisted workflows. If an AI function is activated, user-provided prompts, descriptions or content may be processed to generate or improve material.

Depending on the selected configuration, processing may occur using self-hosted systems or an external AI service provider.

The specific provider, processing location and data-transfer arrangements depend on the functionality and configuration actually used. Users must be informed of relevant external processing before their content is sent to such a provider where legally required.

We do not claim that all AI processing necessarily takes place in Germany or within the European Union.

7. Recipients and service providers

Personal data may be processed by the technical hosting infrastructure, authorized service operators, TikTok when authorized API features are used, and any processors necessary for the enabled functionality.

External AI providers or additional infrastructure providers may be involved only where configured for the relevant functionality.

Data is not made available to advertisers merely because you connect your TikTok account through this service.

Where a service provider acts as a processor, an applicable data processing agreement must be concluded where required by Article 28 GDPR.

8. International data transfers

Use of TikTok or external service providers may involve processing or access outside the European Economic Area.

Where the GDPR requires safeguards for transfers to countries without an adequacy decision, applicable transfer mechanisms and supplementary protections must be assessed and implemented.

The specific destinations and transfer mechanisms must reflect the actual TikTok integration and any other external processors used.

You can request further information about applicable transfer safeguards using the contact details above.

9. Storage and deletion

Personal data is retained only for as long as necessary for the relevant processing purpose, unless legal obligations require longer retention.

Connection credentials should be removed or invalidated when an account is disconnected, subject to the technical implementation and applicable record-keeping requirements.

Uploaded content, temporary files, processing records and technical logs are subject to operational deletion procedures appropriate to their purpose.

Deletion from this service does not automatically delete material that has already been published on TikTok. Removal of TikTok publications may require separate action on TikTok.

A request for erasure can be submitted to anfrage@kennyslab.de.

10. Security

Appropriate technical and organizational measures are used or must be implemented to protect personal data, including access restrictions, encrypted transmission, confidential handling of authentication credentials and measures against unauthorized use.

No online service can guarantee absolute security.

If you suspect unauthorized access to a connected TikTok account, revoke the authorization in TikTok and contact us promptly.

11. Cookies and tracking

The public informational website is designed to function without advertising trackers or analytics cookies.

If optional login, session-management, analytics or other cookie-based functionality is added in the future, this policy and any legally required consent mechanism must be updated before deployment.

The actual website implementation determines which cookies or similar technologies are used.

12. Your GDPR rights

Subject to applicable legal requirements, you may have the following rights:

To exercise your rights, email anfrage@kennyslab.de.

We may request reasonable evidence of identity where necessary to protect against unauthorized disclosure or deletion.

13. Automated decision-making

AI-assisted content generation or preparation does not by itself imply automated decision-making within the meaning of Article 22 GDPR.

Any introduction of automated decisions producing legal or similarly significant effects would require separate assessment and the corresponding information and safeguards.

14. Children

The service is not intended to circumvent TikTok's age restrictions or the legal requirements applicable to minors.

Users must comply with applicable minimum-age and parental authorization requirements.

15. External links

This website may link to TikTok and other external websites. Those services have their own data protection practices.

We do not control the independent processing performed by those third-party websites.

16. Changes to this policy

We may update this policy to reflect new functionality, technical changes, service providers or legal requirements.

The current version and its effective date will be made available on this website.

Questions can be directed to anfrage@kennyslab.de.