Privacy Policy

Affiliate BRKOUT by CHAANL (“BRKOUT,” “we,” “us,” or “our”) provides creator analytics, commerce intelligence, market research and Creative Intelligence tools for TikTok Shop affiliates, and runs a community on Discord. This Privacy Policy explains the information BRKOUT collects, the sources of that information, how we use and disclose it, how long we keep it, and the privacy choices available to you when you use our websites, applications, Discord community and services (the “Service”). It also explains the limited market information BRKOUT holds about TikTok Shop creators, sellers and products that are not BRKOUT customers (Section 5).

We collect information you choose to provide, such as your name, email address, account and workspace information, settings, notification preferences, support messages and other communications. If you join the waitlist, BRKOUT records your email address, the TikTok handle and experience level you give us and any referral that brought you, together with a salted one-way hash of your IP address and your browser’s user-agent string, which are used to prevent duplicate and automated signups. Newsletter, launch-update and support forms record the name, email address, topic and message you enter. If you apply to the Refer & Earn affiliate program, BRKOUT records the details on the application, such as your name, email address, TikTok handle and profile link, audience size, the channels you promote on and your answers. If you participate in a referral, affiliate or promotional program, we also process referral codes, conversion status, commission and payout information. If you add a payout method, BRKOUT stores a reference supplied by the payout provider and a masked identifier, not full bank-account or card numbers. BRKOUT records whether required tax paperwork has been completed; it does not store your tax identification number in its application database. Payments are handled by payment providers (Section 8). BRKOUT may receive billing status, plan, invoice, transaction and payment-method reference information needed to administer your subscription. BRKOUT does not store full payment-card numbers in its application database.

When you authorize a TikTok or TikTok Shop creator account, BRKOUT may receive and sync information made available through the permissions you approve and the APIs or services available to BRKOUT. Depending on the connection and supported fields, this may include creator/account identifiers, profile metadata, video identifiers and metadata, captions, covers or playable media, product and shop information, performance metrics, orders, GMV, commissions, marketplace signals and related commerce information. If you choose to connect watch-time and retention reporting, BRKOUT also receives, through TikTok’s business APIs, per-video audience-retention curves, average and total watch time, the share of views watched in full, traffic sources, audience countries, reach, new followers and profile views, and keeps them as a history for your account. BRKOUT also processes authorization metadata and access/refresh tokens needed to maintain the connection. BRKOUT does not need your TikTok password and will never ask you to provide it. If you sign in with TikTok and no email address is available, BRKOUT creates an internal placeholder address for your account that contains your TikTok account identifier; it is never used to email you.

Creative Intelligence compares the performance of your authorized videos against your own history. From the metrics and video metadata a connected platform makes available, BRKOUT calculates checkpoints, baselines, signals, scores, recommendations and alerts that are specific to your account. Video analysis is an optional feature. When it is available and you choose to use it, you upload a video or a screenshot of your analytics. BRKOUT stores the upload privately, gives a transcription provider (Deepgram) the video, or a short-lived private link to it, to produce a transcript, and sends the transcript, the metrics you provide and, for a screenshot, the image to an AI provider (Anthropic or OpenAI) to produce a critique and read the numbers. The uploaded file is deleted once the analysis finishes, when you delete the analysis, or after 24 hours if it is never analyzed; if an analysis fails, the file is kept so you can retry until you delete it. The transcript, critique and extracted numbers stay with the analysis until you delete it or your workspace is deleted. BRKOUT uses these providers through their business APIs, which do not use your uploads to train their models; where a provider offers an opt-out from model training, BRKOUT uses it. BRKOUT does not use your private creator content, private analytics or creator-specific intelligence to train a general-purpose or shared AI model for other customers. BRKOUT’s systems record where each piece of information came from. Information received from your connected TikTok accounts, together with anything BRKOUT derives from it, is used only for your own account: it is blocked from being combined with other customers’ data, from benchmarking, from research and from model training. The market benchmarks described in Section 5 are built from market data BRKOUT collects itself, not from customers’ connected accounts.

To show which products are rising and what is working across TikTok Shop, BRKOUT collects market data using BRKOUT’s own TikTok Shop authorization, never a customer’s. This includes TikTok’s daily bestselling lists of products, videos, creators and LIVE sessions, which contain public TikTok handles and the sales ranges TikTok publishes; products listed in TikTok Shop’s affiliate marketplace, with their shop, price, commission and units sold; and TikTok’s creator marketplace search. BRKOUT may also read public TikTok Shop product pages, reviews and related public videos through a data provider (ScrapeCreators). Creator marketplace information is used only to build aggregate benchmarks, such as the typical views of creators in a follower range and sales tier. Individual creators are read, reduced to group statistics and discarded: BRKOUT does not store the handle, identity or individual numbers of any creator from that search, and does not publish a figure unless at least 25 creators stand behind it. Those benchmarks are kept for 12 months. Bestselling-list and marketplace history is kept to measure how products and creators move over time and is not currently deleted on a fixed schedule. BRKOUT uses this information to show market trends, rankings, product signals and benchmarks to its customers. It is not sold. If you are a creator or seller and want records that name you removed from BRKOUT’s market data, contact BRKOUT Support with your TikTok handle and BRKOUT will remove them.

If you link your Discord account, BRKOUT stores your Discord user ID and username and uses them to give you the Discord roles that match your BRKOUT plan, and to add you to the BRKOUT server when you ask it to. Your use of Discord itself is governed by Discord’s terms and privacy policy. If you ask a question with the community’s /ask command, BRKOUT stores your Discord user ID, username, question and the answer, sends your question to an AI provider (Anthropic) to draft the answer, delivers it to you by direct message, and shares it with BRKOUT staff in a private channel so they can review answer quality and misuse. These records are kept until you ask BRKOUT to delete them. Product briefs posted in the community are written with the help of an AI provider (Anthropic) from public product information, including the text of public buyer reviews. BRKOUT does not keep the names of reviewers or the raw review text with the briefs, and staff review each brief before it is published.

BRKOUT uses information to provide and operate the Service; connect and sync authorized creator accounts; calculate creator-relative and market benchmarks; generate Creative Intelligence, scores, recommendations, alerts and reports; display product and marketplace signals; run the Discord community; administer subscriptions, account entitlements and the Refer & Earn program; provide support; send service communications; diagnose errors and synchronization failures; protect accounts and prevent abuse; comply with law; and improve the reliability, usability and security of BRKOUT. BRKOUT may use de-identified or aggregated operational telemetry to understand service reliability and product usage. That aggregate use excludes information BRKOUT receives from customers’ connected TikTok accounts and anything derived from it. Deleted creator content and deleted creator-specific intelligence are not kept to continue building a profile of that creator after deletion.

BRKOUT uses service providers that process information only as needed to provide services to BRKOUT and subject to contractual, security and confidentiality requirements: Supabase (database, sign-in, file storage and server functions); BRKOUT’s web host; Cloudflare (Turnstile bot protection on forms); Resend (email delivery); Expo (push-notification delivery through Apple and Google); Apple and Google (sign-in where offered, and in-app purchases); RevenueCat (subscription validation, and web checkout where offered, with card payments processed by Stripe); TikTok (the connections you authorize, and BRKOUT’s own market data); Discord (the community); Anthropic and OpenAI (AI features described in Sections 4 and 6); Deepgram (transcription for video analysis); and ScrapeCreators (public TikTok Shop and TikTok data). A payout provider processes Refer & Earn payouts. Subscriptions bought in the BRKOUT app are processed by Apple (App Store) or Google (Google Play). BRKOUT receives the subscription’s status, product and price, but never your payment details, through RevenueCat, which validates purchases for us. Manage or cancel them in your App Store or Google Play account. When you connect TikTok, Discord or another third-party service, that service also processes information under its own terms and privacy practices. BRKOUT is not responsible for the independent privacy practices of third-party platforms.

BRKOUT may disclose information to service providers acting on our behalf; to a connected service when you direct BRKOUT to interact with that service; when you intentionally use a feature to share information with a seller, advertiser or other recipient; to protect BRKOUT, users or others from fraud, abuse or security threats; when required by law, subpoena, court order or valid governmental request; or as part of a merger, acquisition, financing, reorganization or sale of assets subject to appropriate protections. BRKOUT does not sell your private creator data. BRKOUT does not disclose private creator data for third-party targeted advertising. A seller or advertiser does not receive your private BRKOUT analytics merely because you use BRKOUT. BRKOUT does not sell or share personal information, as those terms are defined by US state privacy laws. You can opt out anyway on the Your Privacy Choices page, linked in the site footer as “Do Not Sell or Share My Personal Information,” and BRKOUT honors Global Privacy Control browser signals as an opt-out. When you are signed in, the opt-out is recorded on your account.

BRKOUT may collect technical information such as IP address, browser and device type, operating system, session identifiers, sign-in activity, approximate location inferred from IP, error logs, synchronization status and security events. Cookies or similar technologies may be used for authentication, preferences, security and essential product functionality. Short-lived security records created while connecting an account are deleted within about a day. BRKOUT also records product events, for example opening a recommendation, using a filter or running a search, to understand how BRKOUT is used and to improve it. These records hold no free text: a search is stored as the length of what you typed and the number of results, never the words themselves. They are kept for up to about 13 months. You can turn this off at any time in the Privacy and Data section of Settings. Events that relate to your TikTok content are used only for your own account and are never combined across creators. On the website, sign-in, signup and public forms use Cloudflare Turnstile to block automated abuse; in the BRKOUT app, the waitlist and support forms do. Turnstile loads a script from Cloudflare and may set its own cookies. Fonts are served from BRKOUT’s own servers. BRKOUT does not run advertising pixels or third-party analytics trackers. The Cookie Policy lists each kind of browser storage BRKOUT uses and why. If you arrive via a Refer & Earn referral link, BRKOUT stores the referral code and the time you arrived in your browser’s local storage (first-party only — never a third-party advertising cookie, and never combined with cross-site tracking or device fingerprinting) so that signing up within 30 days can be attributed to that referral. This value is read once, at account creation, and is not used for any other purpose. BRKOUT also stores in your browser’s local storage how you first arrived, meaning campaign parameters contained in the link you used, the referring site and the page you landed on, for up to 30 days, so that a signup can be attributed to the right campaign. In the European Economic Area, the United Kingdom and Switzerland, this referral and campaign information is only stored with your consent. Anyone can turn it off on the Your Privacy Choices page. If you use the BRKOUT app on iOS or Android, BRKOUT stores your sign-in session and preferences on your device. If you allow notifications, BRKOUT stores a push token for your device and uses it only to send the alerts you choose in Settings. The token is sent to Expo, which delivers the notification through Apple or Google. Signing out removes it.

BRKOUT keeps creator data while it is needed to provide an active Service. Disconnecting a creator account and removing one do different things. Disconnecting stops BRKOUT from syncing that account, and keeps the history already synced, so that reconnecting later resumes the same account rather than starting over. Removing asks TikTok to revoke BRKOUT’s access where TikTok supports that, and deletes the synced videos, performance history and creator-specific intelligence for that connection. If a plan change leaves more connected creator accounts than your plan covers, the extra accounts are paused: BRKOUT stops syncing them and keeps the history already synced until your plan covers them again or you remove them. If you cancel renewal, your Service may remain active through the end of the current trial or paid period. Your data is not deleted automatically when access ends. You can request deletion at any time in the Privacy and Data section of Settings. A deletion request waits 15 days, during which you can cancel it, and is then carried out automatically. Deleting your account does not cancel an App Store or Google Play subscription; cancel that in your store account. When a deletion is carried out, BRKOUT asks TikTok to revoke access to your connected accounts, deletes the workspace you own together with its connected creator data, synced videos, analytics, video analyses, Creative Intelligence history and your recorded activity in BRKOUT, and then checks that nothing has been left behind. Some information may remain temporarily in encrypted backups until those backups are overwritten through normal rotation. After a deletion, BRKOUT keeps a record of the privacy choices you made and the requests you submitted, its record of security-relevant actions with your email address and IP address removed, and invoices, payments, refunds, chargebacks, referral and reward-ledger records, abuse-prevention events, security events or legal matters when reasonably necessary or required by law. Retained records are not used to rebuild your creator intelligence. If you return after your creator data has been deleted, BRKOUT must reconnect and learn your patterns again from new or newly authorized data. Referral-click records, meaning which referral links were visited before any signup, are kept while the referral program uses them to show click totals. Referral, reward-ledger, withdrawal and related audit records tied to an actual account or payout are retained consistent with the accounting and audit retention described above, and are not deleted on request in the same way ordinary creator content is. Waitlist, newsletter and support submissions are kept until you ask BRKOUT to delete them or they are no longer needed. Market data, benchmarks and Discord records are kept as described in Sections 5 and 6.

You can manage connected creator accounts, notifications and account settings in the Service. You may also request access to personal information, correction of inaccurate information, deletion, or a copy of information associated with your account. Depending on where you live, applicable law may provide additional rights, including rights to object to or restrict certain processing, opt out of certain data uses, or appeal a denied privacy request. BRKOUT does not sell personal information or use private creator data for third-party targeted advertising. In the Privacy and Data section of Settings you can download a copy of your data, ask for a correction, withdraw optional privacy choices and request deletion of your account. Requests can also be submitted through Support, including requests about Discord records and, for people who are not BRKOUT customers, requests about market data that names them. BRKOUT may need to verify your identity before completing a request made outside your signed-in account.

BRKOUT uses administrative, technical and organizational safeguards designed to protect information, including server-side token storage, encryption, access controls, session management, account isolation, logging and monitoring. No online service can guarantee absolute security. If BRKOUT becomes aware of a security incident that legally requires notice, BRKOUT will provide notice as required by applicable law.

The Service is intended for adults who meet the eligibility requirements in the Terms of Service and is not directed to children under 18. BRKOUT does not knowingly permit children under 18 to create BRKOUT customer accounts. If BRKOUT learns that an ineligible minor created an account or provided personal information through the Service, BRKOUT will take reasonable steps to close the account and delete the information as appropriate.

BRKOUT may process information in the United States and in other locations where BRKOUT or its service providers operate. If information is transferred across borders, BRKOUT will use safeguards required by applicable law for those transfers.

BRKOUT may update this Privacy Policy as the Service, technology or legal requirements change. The “Last updated” date will identify the most recent revision. If a change materially affects your rights or the way BRKOUT uses personal information, BRKOUT will provide additional notice when required.

Questions about this Privacy Policy, privacy rights or deletion can be submitted through BRKOUT Support or the contact information published in the Service. Include the workspace or email address associated with the request so BRKOUT can verify and process it.