Privacy Policy

This covers the Devign Creator Platform mobile app and this website, both run by Devign LLC. Last updated 2 August 2026.

What is on your account

• Your name, as the agency that invited you entered it, and as you can correct it.
• Your email address — the one the invitation was sent to. It is how you sign in and the only way we can reach you.
• Your password, stored as a bcrypt hash. Nobody here can read it, including us: a forgotten password is replaced, never recovered.
• A profile picture, if you set one.
• Which agencies you belong to and in what role — creator, agent, manager or owner.
• The time you last signed in, and the sessions currently open on your devices.

What the agency records about you

If you are a creator on a roster, the agency also keeps, inside its own database:

• Your TikTok handle, so its numbers can be matched to you.
• Which of its agents looks after you, and when that changed.
• When you joined the roster and, if you have, when you left.
• Notes its staff have written about working with you.
• Month by month: diamonds, days that counted as valid, how long you were live and across how many streams, average watch time, new followers, and where that left you against any bonus target the agency was working towards.

Where the month numbers come from

From TikTok, and from nowhere else. An agency connects its own TikTok Backstage login here, and we sign in as the agency to read the figures TikTok already reports to it about its own creators. We read; we do not write, post, message, or change anything.

That agency login is encrypted before it is stored, with a key derived per agency, and it is decrypted only at the moment a run needs it. There is no screen anywhere in this product that displays it back — not to us and not to the agency that entered it.

None of this touches your personal TikTok account. We have no access to it and cannot get any: nothing here is connected to your login, your videos, your followers or your inbox.

What we do not collect

• No location, at any precision.
• No contacts, photos, calendar, microphone or camera beyond a profile picture you choose to upload.
• No advertising identifier, and no advertising or marketing profile of any kind.
• No analytics or crash-reporting service, and no third-party tracking SDK. These web pages load nothing across the network at all, which is why there is no cookie banner: there is nothing to ask you about.

Who can see it

Staff at the agencies you belong to, and only those. Every agency's data is held in a separate database, so there is no query anybody can write here that returns two agencies at once, and no address in this application names an agency where somebody could try changing it.

Within an agency it narrows further: an agent sees the creators on their own book, and managers and owners see the whole roster. The agency's TikTok login is owner-only.

Creators cannot see each other. There is no directory, no leaderboard and no ranking.

Who else it is handed to

Three parties, each for one job and none of them for advertising:

• TikTok, when we sign in as your agency to read its figures. That sends the agency's own credentials to TikTok, and nothing about you that TikTok did not already hold.
• An email provider, which receives your address so an invitation, a password reset or a deletion code can be delivered to it.
• A hosting provider, which runs the server the databases sit on.

Each is bound by contract to protect what it is given to at least the standard set out here, to use it only to provide that service, and not to sell it or use it for their own purposes. Nothing is sold, rented or handed to a data broker, an advertiser or an analytics company, because none of those are involved at any point.

We would hand data to a court or a regulator that legally compelled it. That has not happened.

Codes, sessions and the log

Signing in issues a token to your device, which expires on its own and can be ended by signing out. The token is stored here only as a hash.

Codes emailed for a password reset or a deletion expire in minutes, are stored as a hash, are worth five guesses, and are spent the moment they are used.

We keep an audit log of actions that matter — a sign-in, a role change, a deletion — recording who did what and when. It is how an agency can answer what happened to a roster, and how we can answer what happened to your account.

How long it is kept

Your account and everything on it is kept while the account exists, and goes when you delete it. Sessions end when they expire or when you sign out. Codes are discarded once spent or expired. Beyond that we do not run a timer that quietly removes your data, because a creator looking back at a month from two years ago is a normal thing to want.

Deleting your account

Two ways, both of which do the same thing:

• In the app, under your account.
• On this website, which needs neither the app nor your password — only the email address on the account and a code we send to it. It is built for somebody who has already uninstalled the app.

Deleting removes your name, your profile picture, your email address and your password, and ends every session on every device. It is immediate and it is permanent. There is no thirty-day window, no queue, and no way for us to put it back afterwards.

There is one case where it will refuse: if you are the only owner of an agency, deleting you would leave a roster nobody is allowed to touch. The page says so, names the agency, and tells you what to do about it: make somebody else an owner, and wait for them to accept.

What an agency keeps afterwards

The months you worked there, with your name taken off them. That row is the agency's own business record: it is what a payout gets reconciled against and what a tax authority asks the agency for. Once you are deleted it no longer says who you are, and there is nothing left here to connect it back to you.

Your rights

You can see and correct what is on your account from inside the app, and delete the account outright by either route above. If you want a copy of what is held about you, or you think something is wrong and cannot fix it yourself, write to us and we will sort it out. We do not charge for any of this and we will not ask you why.

Not for children

This is not a product for children and it is not directed at them. An account exists because an agency put a working adult on its roster, and TikTok LIVE is not open to under-18s in the first place. We do not knowingly hold data about a child; if you believe we have, write to us and it will be deleted.

If this changes

The date at the top moves and the new version replaces this one here. If a change actually affects what we collect or who we give it to, we will email the address on your account before it takes effect rather than expect you to notice.

Contact

Privacy questions, requests and complaints all go to the same place: info@devignlb.com. A person reads it.