BoTik
BoTik

Privacy Policy

Learn how BoTik collects, uses, and protects your personal data.

Privacy Policy

1. Information We Collect

We collect information necessary to provide and improve our services:

  • Account Information: Email address, username, display name, and avatar when you create an account.
  • Authentication Data: OAuth tokens from Google or TikTok when you sign in with third-party providers.
  • Payment Information: Transaction details processed through PayPal. We do not store your credit card or PayPal account details directly.
  • Voice Data: Voice recordings you submit for voice cloning, and your ElevenLabs API key (stored encrypted).
  • Usage Data: TikTok usernames used in voice mappings, settings preferences, and feature usage patterns.
  • Technical Data: IP addresses, browser type, and device information for security and analytics purposes.

2. Third-Party Services

BoTik integrates with the following third-party services that have their own privacy policies:

  • ElevenLabs: Text-to-speech synthesis and voice cloning.
  • Stripe: Payment processing for subscriptions, credit packs, gifts and donations.
  • PayPal: Alternative payment processing for subscriptions and one-off purchases.
  • TikTok: OAuth authentication and live stream chat integration.
  • Google: OAuth authentication, translation, AI-powered features, and Google Analytics (analytics cookies, set only with your consent).
  • YouTube: Music integration for playing videos during livestreams.

3. How We Use Your Information

We use your information for the following purposes:

  • To provide text-to-speech services during your TikTok livestreams.
  • To manage your account, voice mappings, and subscription.
  • To process payments and maintain billing records.
  • To send transactional emails (account confirmations, password resets, subscription updates).
  • To improve our services and develop new features.
  • To prevent abuse, fraud, and ensure platform security.

4. Cookies and Local Storage

BoTik uses browser local storage to keep you signed in (JWT access and refresh tokens), and essential cookies for OAuth authentication flows with Google and TikTok. These are strictly necessary for the service to work and are always active. We also use Google Analytics to understand how BoTik is used, which sets analytics cookies such as _ga and _gid. These are optional: Google Analytics is not loaded at all until you explicitly accept it. You can accept or reject analytics the first time you visit, and change your choice at any time from Settings. We do not use advertising cookies.

5. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following data protection rights:

  • Right of Access: You can download all your personal data from your Profile settings at any time.
  • Right to Rectification: You can update your profile information directly in your account settings.
  • Right to Erasure: You can permanently delete your account and all associated data from your Profile settings.
  • Right to Data Portability: You can export your data in a machine-readable format (JSON) from your Profile settings.
  • Right to Restriction: You can contact us to restrict the processing of your personal data.
  • Right to Object: You can object to the processing of your personal data for specific purposes by contacting us.
  • Right to Withdraw Consent: You can withdraw your consent to analytics cookies at any time from Settings, with no effect on your use of BoTik.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. When you delete your account, all associated data is permanently removed from our systems, including your profile, voice mappings, voice recordings, payment history, and settings. Payment records may be retained for up to 7 years for tax and legal compliance purposes.

7. Children's Privacy

BoTik is not intended for use by anyone under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete that information promptly.

8. Security Measures

We implement industry-standard security measures to protect your data, including: encrypted data transmission (HTTPS/TLS), password hashing with bcrypt, rate limiting and DDoS protection, secure token-based authentication, and encrypted storage of sensitive data like API keys. While we strive to protect your personal data, no method of transmission over the Internet is 100% secure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'Last updated' date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us through the support channels provided on our website.

Last updated: September 2026

Terms & Conditions