This policy describes what SmartPick AI collects. It is short because the system is small: we publish videos and we run a link redirector. There are no user accounts, no login, and no newsletter.
Only when you click an affiliate link in one of our posts. Those links pass through our own redirector before forwarding you to the merchant, and that redirect records:
| What | Why |
|---|---|
| Which link was clicked, and on which platform | To know which videos lead anywhere |
| Time of the click | To group clicks by campaign |
| Country | Coarse location only — never a city or address |
| A one-way hash of your IP address | To tell repeat clicks from distinct ones. The hash is computed at the edge with a secret salt; the raw address is never written down and we cannot reverse the hash back to it. |
| Browser user-agent and referring page | To separate real visitors from bots and scrapers |
None of this identifies you by name, and we make no attempt to combine it with anything that would.
Our links earn us a commission. When you follow one, the merchant — for example ClickBank or the vendor's own store — receives a tracking code identifying us as the referrer, so that a purchase is credited to us.
Once you arrive at the merchant, their privacy policy governs, not ours. We do not receive your name, address, payment details, or order contents from them — only aggregate reports of whether sales occurred.
Our videos are published on Instagram, Facebook, YouTube and TikTok. While you are on those platforms, their own privacy policies apply and they collect their own data about you. We see only the aggregate statistics each platform reports to us about our own posts — views, likes, and similar — never information about individual viewers.
SmartPick AI connects to one TikTok account, which we own. It does not connect to, read, or post on behalf of anyone else's account, and it does not read other users' videos, comments, followers or messages.
Authorising it grants exactly three permissions, and nothing else:
user.info.basic — reads the connected account's open ID and
display name, so we can confirm which account we are about to post to, and
reads the privacy levels that account is permitted to use. Used only at the
moment of posting; not stored beyond the account identifier needed to keep
posting to the same account.
video.upload — uploads the video file we generated. The file is
our own rendered content. Nothing is read from the account.
video.publish — publishes that uploaded video to our own
account, with a caption we wrote.
The access token and refresh token TikTok issues are stored on our own server, are never shared with third parties, and are used solely to post to the account that granted them. Revoking access in TikTok's own settings stops the integration immediately; we keep no copy that survives revocation beyond the tokens becoming inert. To have the stored tokens deleted, contact us at the address below and we will remove them.
We do not sell, rent or share TikTok data with anyone, and we do not use it for advertising, profiling or training models.
Click records are pruned by age. We keep them long enough to see whether a campaign worked and no longer; they are not retained indefinitely. Hashed IPs are pruned on the same schedule as the click they belong to.
Click records are written at Cloudflare's edge and pulled to a private database that is not reachable from the internet. Aggregated reporting is held in that same database.
Our content is not directed at children under 13, and we do not knowingly collect information from them.
If what we collect changes, this page changes with it and the date at the top is updated.