# RCC Privacy Policy
**Effective date: August 3, 2026**
## 1. Data controller
The controller of personal data processed through RCC (“Reels Command Center”) is:
Kancelaria Adwokacka Adwokat Łukasz Oleś
al. Wojciecha Korfantego 138A, lok. 114
40-156 Katowice, Poland
Email: contact@lukaszoles.pl
## 2. Information obtained from TikTok
RCC accesses TikTok information only after the user expressly authorizes the application through TikTok Login Kit.
Depending on the permissions granted, RCC may process:
– TikTok Open ID, display name and avatar;
– public profile link, biography and verification status;
– follower count, following count, total likes and video count;
– public video identifiers, descriptions, publication dates, cover images and available links;
– available video metrics, such as views, likes, comment count and share count;
– OAuth access and refresh tokens required to maintain the authorized connection.
RCC’s current TikTok integration does not retrieve the content of TikTok comments.
## 3. Purposes of processing
TikTok information is processed to:
– connect and identify the authorized TikTok account;
– synchronize the user’s public videos and available metrics;
– display dashboards and content rankings;
– maintain historical performance snapshots;
– generate reports and comparisons;
– provide AI-assisted analyses requested by the user;
– protect the security and correct operation of RCC.
RCC does not sell TikTok data and does not use it for third-party advertising.
## 4. Legal basis
Data is processed on the basis of the user’s authorization and request to provide RCC functionality, and where applicable on the operator’s legitimate interest in securing, maintaining and improving the application.
The user can revoke TikTok authorization at any time.
## 5. AI processing
RCC does not initiate paid AI analysis merely because a page is opened. AI processing is performed only when the user selects a function that requires it.
When an AI analysis is requested, selected content or analytical data may be sent to the configured AI service provider for the purpose of generating the requested result. Data is not submitted for independent advertising purposes.
## 6. Storage and retention
In the local version of RCC, synchronized data is stored on infrastructure controlled by the operator.
Information is retained only for as long as required to provide analytics, maintain historical comparisons, comply with legal obligations, and protect the application. Disconnecting TikTok stops future synchronization. Stored records may be deleted at the user’s request, subject to applicable legal obligations and necessary security backups.
## 7. Recipients and international transfers
Data may be processed by service providers necessary to operate RCC, including hosting, infrastructure, security and AI service providers.
Some providers may process information outside the European Economic Area. Where required, appropriate legal safeguards are used.
TikTok independently processes information under its own privacy policy.
## 8. Security
RCC uses reasonable technical and organizational safeguards. OAuth credentials and tokens are not intended to be publicly exposed. Access to the application and stored information is restricted to authorized users.
## 9. User rights
Subject to applicable law, the data subject may request:
– access to personal data;
– correction or deletion;
– restriction of processing;
– data portability;
– objection to processing;
– withdrawal of consent or authorization.
The data subject may also lodge a complaint with the competent data protection authority.
## 10. Revoking TikTok access
The user may disconnect TikTok within RCC or revoke authorization through TikTok account settings. Revocation prevents RCC from retrieving new TikTok information.
## 11. Changes
This Privacy Policy may be updated when RCC functionality, providers, integrations or legal requirements change. The current version will remain available on this page.
## 12. Contact
Privacy-related requests may be sent to:
contact@lukaszoles.pl
