Privacy Policy

1. Information we collect

• Account information — name, email address, password (hashed), role (creator or advertiser), and verification (KYC) details you provide.
• Profile information — category, location/state, biography, company details, and other information you add to your profile.
• Connected social account data — when you connect a platform (e.g. TikTok, Instagram, YouTube, Facebook) via its official OAuth flow, we receive your basic profile identifiers and public statistics such as follower count, following count, total likes, and video/post counts.
• Authorization tokens — OAuth access and refresh tokens issued by the connected platform, stored encrypted and never exposed to your browser or to other users.
• Usage & technical data — log-in events, activity logs, and standard technical data (e.g. IP address, browser type) used for security and diagnostics.

2. How we use your information

• To compute and display your transparent Wiradigital ranking score.
• To power creator discovery, campaigns, and brand–creator matching.
• To verify accounts (KYC), process campaign payments, and prevent fraud and abuse.
• To operate, secure, and improve the platform.

3. Data obtained from TikTok and other platforms

When you connect your TikTok account, we use TikTok Login Kit and the TikTok Display API under the scopes you approve (currently user.info.basic and user.info.stats) to retrieve your basic profile and public statistics (such as follower count, total likes, and video count). We use this data solely to calculate and display your ranking and to power creator discovery.

• We do not post, comment, message, or take any action on your TikTok account on your behalf.
• We do not sell your TikTok data or share it with third parties for advertising.
• Our access and use of information received from TikTok comply with the TikTok Developer Terms and TikTok's policies. The same principles apply to other connected platforms, each governed by its own terms.
• You can disconnect a platform at any time from your creator profile, which revokes our stored tokens for that platform.

4. How we share information

We do not sell your personal data. We share it only: (a) as public ranking information — non-sensitive fields such as display name, category, state, score and platform performance appear on public pages; we never publish your email, phone, tokens, or payment details; (b) with service providers who process data on our behalf, such as our payment processor (Bayarcash) for campaign payments; and (c) where required by law.

5. Data security & retention

Passwords are hashed and OAuth tokens are encrypted at rest. We retain your data for as long as your account is active or as needed to provide the service and meet legal obligations. When you delete your account or disconnect a platform, we delete or revoke the associated tokens and personal data, except where retention is legally required.

6. Your rights & choices

• Access, correct, or update your profile information at any time.
• Disconnect any linked social account, revoking our access to its data.
• Request deletion of your account and associated personal data by contacting us.
• Exercise your rights under Malaysia's Personal Data Protection Act 2010 (PDPA).

7. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

8. Contact us

Questions or data requests: hello@wiradigital.my, Kuala Lumpur, Malaysia.