Privacy Policy

1. Controller and scope

The data controller is LetHaiduCook, operator of https://lethaiducook.com. Contact: support@lethaiducook.com.

This policy covers the marketing site, user accounts, content ingestion, programmatic video rendering, TikTok OAuth and publishing, and analytics used to auto-tune future creatives. It applies to visitors in the European Economic Area, the United Kingdom, and elsewhere. Where GDPR (Regulation (EU) 2016/679) applies, the following legal bases and rights apply.

2. Data we collect

2.1 Account information

When you register or contact us we collect your name, email address, and account credentials or authentication identifiers needed to operate your LetHaiduCook account.

2.2 TikTok OAuth tokens and profile data

When you connect TikTok, we receive and store OAuth credentials issued by TikTok, including access_token and refresh_token, token expiry metadata, the TikTok user identifier authorized by you, and basic profile fields TikTok returns for the granted scopes (for example display name and avatar, if provided). Tokens are used solely to call TikTok APIs on your behalf.

2.3 User-uploaded assets and prompts

We process content you submit to generate videos: text prompts and ideas, images, raw video clips, website URLs you provide, and derived artifacts (scripts, captions, voiceover audio, and rendered files).

2.4 TikTok video performance metrics

After a video is published to your connected TikTok account, we may collect performance metrics available through authorized TikTok APIs, including views, completion rates, likes, comments counts where exposed, and retention / watch-time data. These metrics are used to optimize subsequent scripts and creatives for your account.

2.5 Technical data

We automatically collect IP address, browser and device type, pages viewed, referrer, and approximate timestamps when you use the website. This is limited to operating, securing, and debugging the service.

3. Legal bases (GDPR)

• Contract (Art. 6(1)(b)) — creating your account, rendering videos, publishing to TikTok, and providing support.
• Consent (Art. 6(1)(a)) — connecting TikTok via OAuth and any optional analytics cookies. You may withdraw consent by disconnecting TikTok or contacting us.
• Legitimate interests (Art. 6(1)(f)) — securing the platform, preventing abuse, and improving reliability, balanced against your rights.
• Legal obligation (Art. 6(1)(c)) — retaining records required by applicable law.

4. How data is used

We use the data described above only to:

• Authenticate you and administer your account;
• Ingest source material and generate scripts and voiceover;
• Programmatically render short-form video creatives;
• Publish, schedule, and manage videos on your connected TikTok account using the TikTok API;
• Analyze TikTok performance metrics to auto-tune future scripts and creatives for your account;
• Provide customer support and service notices;
• Protect the service against fraud, abuse, and security incidents.

We do not use your TikTok data or uploaded assets to build unrelated advertising profiles, and we do not sell personal data.

5. TikTok data compliance

LetHaiduCook integrates with TikTok through official TikTok developer APIs (including login / authorization and content posting). In accordance with the TikTok Developer Terms of Service, TikTok API Terms, and applicable platform policies:

• TikTok user data is never sold.
• TikTok user data is never shared with unauthorized third parties. Sub-processors listed in Section 6 receive only the minimum data required to perform their contracted function (for example, a script sent to a language-model provider, or audio sent to a text-to-speech provider).
• TikTok user data is not used for unrelated tracking, cross-context behavioral advertising, or any purpose other than providing and improving LetHaiduCook for the authorizing user.
• We do not use TikTok data to train foundation models for unrelated products, and we instruct our AI processors not to use submitted content to train their models where that control is available.
• Access tokens and refresh tokens are stored encrypted at rest, transmitted only over TLS, and revoked or deleted when you disconnect TikTok or request deletion.

6. Third-party processors

We use the following categories of processors. Each is bound by a data-processing agreement or equivalent contractual terms where GDPR requires it.

TikTok is the social platform you authorize. Content you publish becomes visible according to your TikTok privacy settings and TikTok’s own policies. Review TikTok’s Privacy Policy for how TikTok processes data on its platform.

7. Sharing and international transfers

We do not sell personal data. We share data only with the processors above, with professional advisers or authorities if legally required, or with a successor in a merger or asset transfer (you will be notified if that occurs).

Some processors are located outside the EEA. Where we transfer personal data internationally, we rely on adequacy decisions or Standard Contractual Clauses (and supplementary measures where appropriate).

8. Retention and deletion

• TikTok tokens: retained only while your TikTok account remains connected. Deleted within 30 days of disconnect, revocation, or a deletion request.
• Uploaded assets and renders: kept while needed to provide the service, then deleted or anonymized within 90 days after account closure or a deletion request, unless a longer period is required by law.
• TikTok performance metrics: retained up to 24 months to power auto-tuning, then aggregated or deleted.
• Account profile: retained until you delete the account, then removed within 30 days except for limited records we must keep (for example invoices or abuse logs).
• Server logs: typically 90 days.

To request permanent deletion of stored data, email support@lethaiducook.com with the subject line “Data Deletion Request” and the email address on your account. We will verify the request and complete deletion within 30 days, then confirm by email.

9. Your rights

If GDPR or UK GDPR applies, you may request access, rectification, erasure, restriction, portability, and objection to processing, and you may withdraw consent at any time without affecting prior lawful processing. You will not be discriminated against for exercising these rights. Email support@lethaiducook.com to exercise them. We may need to verify your identity before fulfilling a request.

10. Revoking TikTok access

You can stop LetHaiduCook from accessing your TikTok account at any time:

1. In TikTok (mobile): go to Settings and privacy → Security and login → Manage app permissions (wording may vary by app version) and revoke LetHaiduCook; or
2. In TikTok web settings under connected apps / authorized apps, remove LetHaiduCook; or
3. Email support@lethaiducook.com and ask us to disconnect TikTok and delete stored tokens.

Revoking access in TikTok invalidates tokens. We will also delete stored tokens and stop publishing or pulling metrics. Videos already posted to TikTok remain on TikTok until you remove them there.

11. Cookies and logs

The marketing site uses cookies in two categories:

• Strictly necessary — required to operate the site, keep it secure, and store your cookie preference. These do not require consent.
• Analytics (optional) — used only if you accept them in the cookie banner. They help us understand aggregate site usage. They are off by default and are not advertising or cross-site tracking cookies.

You can accept, reject, or change this choice at any time via Cookie settings in the footer or the banner on first visit. Your preference is stored for up to 180 days in a first-party cookie named lhc_consent. We do not use advertising cookies on the public landing or legal pages. If Google Analytics is added, it must load after this choice: we send Google Consent Mode defaults (`analytics_storage` denied until you accept) and update dataLayer when you change preferences. Ads storage stays denied.

12. Security

We use TLS in transit, access controls, encrypted storage for OAuth secrets, and least-privilege processor access. No method of transmission or storage is 100% secure; if we become aware of a personal-data breach we will notify affected users and authorities as required by GDPR Articles 33–34.

13. Children

LetHaiduCook is not directed to children under 16, and we do not knowingly collect personal data from children. TikTok’s own age requirements also apply. If you believe a child has provided data, contact support@lethaiducook.com and we will delete it.

14. Changes

We may update this policy. The “Last updated” date at the top will change. Material changes will be indicated on this page or by email if we have your address. Continued use after the update constitutes acknowledgment of the revised policy where permitted by law.

15. Contact and complaints

Privacy and deletion requests: support@lethaiducook.com. Postal or additional identity details can be provided on request.

You have the right to lodge a complaint with a supervisory authority in your country of residence. In the EEA, that is the data protection authority of your member state. In the UK, that is the Information Commissioner’s Office.