Security

BRKOUT is designed to process creator and commerce information without exposing one customer’s private workspace to another. Security controls are built around account isolation, server-side credentials, encryption, controlled access, monitoring and deletion. BRKOUT does not claim security certifications or compliance badges it has not actually earned.

BRKOUT connects to TikTok through authorization flows and approved permissions. BRKOUT does not need your TikTok password. Access and refresh tokens used to maintain authorized connections are treated as secrets, stored server-side and encrypted, and are not intentionally exposed in browser code, client-side storage or application logs.

Each workspace and connected creator account is kept in its own authorization context. BRKOUT validates access before serving creator data so a signed-in user can access only the workspaces and creator accounts their role permits. Reconnecting an existing creator account restores that authorized creator context rather than silently creating a duplicate identity.

BRKOUT uses encrypted network connections for data in transit and encryption for sensitive stored credentials and data where appropriate. Encryption keys and provider secrets are restricted to authorized server-side systems. Payment-card processing is handled by a specialized payment provider rather than stored directly in BRKOUT’s application database.

Passwords are protected using secure one-way password hashing. Users can reset passwords and revoke other active sessions. Workspace roles follow least-privilege access so owners, admins and members receive only the permissions needed for their role. Administrative and employee access to customer information is limited to legitimate support, security and operational needs.

Creative Intelligence compares each connected creator account’s performance with its own history. It does not use one creator’s private content or private performance history to teach a shared AI model for other BRKOUT customers, and information received from customers’ connected TikTok accounts is blocked, in the database itself, from cross-customer benchmarking, research and model training. Optional video analysis sends a video you upload to a transcription provider and the resulting transcript to an AI provider, as described in the Privacy Policy. Uploads are stored in private storage that only BRKOUT’s servers can read, are passed to providers directly or through short-lived private links, and are deleted once the analysis is finished, or within 24 hours if never analyzed. BRKOUT uses those providers through their business APIs, which do not train on customer uploads, and opts out of model training wherever a provider offers that choice.

BRKOUT monitors sign-in activity, authorization changes, synchronization freshness, provider failures, retries and important security events. Sensitive administrative actions are audit logged. If data is stale or a provider connection fails, BRKOUT identifies that state rather than silently presenting stale information as current.

Backups are used for service continuity and disaster recovery. When creator data is deleted from active systems, BRKOUT does not intentionally restore it back into an active creator profile. Deleted information may remain temporarily in encrypted backups until normal backup rotation overwrites it. Limited billing, tax, fraud-prevention, security or legal records may be retained separately when necessary.

BRKOUT maintains processes to investigate suspected unauthorized access, credential exposure, data leakage and service abuse. Depending on the incident, BRKOUT may revoke sessions or tokens, disable affected functionality, require reconnection or password reset, preserve relevant security logs and notify affected users or authorities when required by law.

Use a unique password, protect access to your email account, review active sessions, remove users who no longer need workspace access, connect only creator accounts you are authorized to manage and report suspicious activity promptly. Do not send TikTok passwords, full payment-card numbers or other secrets to BRKOUT Support.

If you believe you found a vulnerability, unauthorized access or suspicious account activity, contact BRKOUT through Support and identify the affected workspace, account and approximate time of the event. Do not publicly expose another user’s private data while reporting a security issue.