Privacy Policy — Devign Creator Agency Member

Privacy Policy — Devign Creator Agency Member

Last Updated: April 29, 2026
Effective Date: March 15, 2025

This Privacy Policy applies to Devign Creator Agency Member (the "App"), the official mobile application published by Devign LLC ("we," "us," or "our") on Google Play and the Apple App Store. The Devign Creator Agency Member app lets TikTok creators in our agency network track their LIVE performance, earn DPoints rewards, and manage their agency profile.

By using the Devign Creator Agency Member app, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

1. Information We Collect

We collect the following categories of information:

Account Information:

• Phone number (used for account verification via WhatsApp OTP)
• TikTok username and display name

Performance Data:

• Live streaming statistics (hours streamed, diamonds earned, valid streaming days)
• Estimated bonus and level progression
• DPoints balance and redemption history

Device Information:

• Device push notification token (for sending notifications)
• Device platform (iOS or Android)
• App language preference

Usage Data:

• App session duration and login timestamps
• Feature interactions (for improving app functionality)

We do NOT collect:

• Precise or coarse location data
• Payment or financial information
• Contacts, photos, or files
• Browsing history or advertising identifiers
• Health, fitness, or biometric data

2. How We Use Your Information

We use your information solely for the following purposes:

• To verify your identity and manage your creator account
• To display your streaming performance, level, and bonus information
• To operate the DPoints rewards system (earning, spending, streaks)
• To send push notifications about announcements, streak reminders, and account updates
• To process reward redemptions and creator appeals
• To improve app performance and fix technical issues
• To prevent fraud and enforce rate limits

3. How We Share Your Information

We do NOT sell, rent, or trade your personal data to third parties.

We may share limited data with the following service providers who assist in operating the App:

• Expo (push notification delivery service)
• Firebase Cloud Messaging (Android push notification routing)
• Apple Push Notification service (iOS push notification routing)
• WhatsApp Business API (OTP delivery)

These providers process data solely on our behalf and are contractually bound to protect your information. We do not share data with advertising networks, data brokers, or analytics platforms.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you request account deletion, your data will be permanently removed within 90 days.

Temporary data such as OTP codes expire automatically after 10 minutes. Rate limiting records are automatically deleted after 24 hours.

5. Data Security

We implement industry-standard security measures to protect your data:

• All data transmitted between the App and our servers is encrypted via HTTPS/TLS
• Passwords are hashed using bcrypt
• API endpoints are protected with authentication keys
• Rate limiting prevents brute force and abuse attempts
• Database queries use parameterized statements to prevent injection attacks
• Admin access is protected with reCAPTCHA and session-based authentication

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

For All Users:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and personal data
• Portability: Request your data in a machine-readable format

For European Economic Area (EEA) Residents — GDPR:

• Legal basis for processing: Contractual necessity (to provide the App service) and legitimate interest (to improve the App)
• Right to object to processing
• Right to restrict processing
• Right to withdraw consent at any time
• Right to lodge a complaint with your local data protection authority

For California Residents — CCPA/CPRA:

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at info@devignlb.com or use the in-app account deletion feature.

7. Account Deletion

You may request deletion of your account and all associated data at any time:

• In-app: Through the account deletion form
• Online: https://back.devignlb.com/api/delete-account.php
• Email: info@devignlb.com

Upon receiving a deletion request, all personal data will be permanently removed within 90 days. This includes your profile, streaming statistics, DPoints balance, push tokens, and activity history.

8. Children's Privacy

The App is intended for users aged 18 and older. We do not knowingly collect personal data from anyone under the age of 16 (or 13 in jurisdictions where permitted). If we learn that we have collected data from a child under the applicable age, we will promptly delete that information.

If you believe a minor has provided us with personal data, please contact us at info@devignlb.com.

9. International Data Transfers

Your data may be processed on servers located outside your country of residence. We ensure appropriate safeguards are in place to protect your data in compliance with applicable data protection laws.

10. Push Notifications

We send push notifications for agency announcements, streak reminders, DPoints progress, and account updates. You can disable notifications at any time through your device settings. Disabling notifications does not affect your account or earnings.

11. Cookies and Tracking

The App does not use cookies, tracking pixels, or advertising SDKs. We do not track your activity across other apps or websites.

12. Third-Party Links

The App may contain links to external websites (such as TikTok or WhatsApp). We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the App or by updating the "Last Updated" date at the top of this policy. Your continued use of the App after changes constitutes acceptance of the updated policy.

14. TikTok Login Kit

Note: On the TikTok Developer Portal, the registered TikTok integration "app" associated with this Privacy Policy is named exactly Devign Creator Agency Member, matching the same name published on the Apple App Store and Google Play and on this website.

The Devign Creator Agency Member app uses TikTok Login Kit — the official authentication product of TikTok, published by TikTok Pte. Ltd. and operating under the same TikTok name and brand as the TikTok integration platform — to let creators sign in to the Devign Creator Agency Member app with their TikTok account as an alternative to phone-number sign-in. "TikTok" in this policy refers to the TikTok mobile application — the same app published under the name "TikTok" on the Apple App Store and Google Play — and "TikTok Login Kit" is its official sign-in product, operating under the same TikTok name and brand. When you tap "Continue with TikTok" inside the Devign Creator Agency Member app, you are redirected to the TikTok's official authorization page, where you choose whether to grant access.

If you authorize the request on TikTok, the Devign Creator Agency Member app receives only the fields covered by the user.info.basic scope from TikTok's /v2/user/info endpoint:

• open_id — a stable identifier unique to the Devign Creator Agency Member app, used to recognize you on subsequent logins.
• union_id — a stable identifier across all apps owned by Devign LLC; not actively used today.
• display_name — your visible TikTok name, shown in the app's greeting and dashboard header.
• avatar_url (and 100 px / 1080 px variants) — your TikTok profile photo, shown in the dashboard header.

We do not request your TikTok password, follower lists, private messages, content, or any other data. The TikTok-issued access token is exchanged server-side and is never stored by the app on your device. We only retain the four fields above plus a session token used to keep you signed in.

You can revoke the Devign Creator Agency Member app's access to your TikTok account at any time from on TikTok: open TikTok and go to Profile → Settings & privacy → Security & permissions → Manage app permissions, then remove Devign Creator Agency Member. Revoking access does not delete your Devign account; to delete the account itself, see Section 7 (Account Deletion).

Your use of TikTok features is also subject to TikTok's own Privacy Policy and Terms of Service.

15. AI-Generated Content (Battle Promo Generator)

The Devign Creator Agency Member app includes a Battle Promo Generator that lets creators produce a 9:16 portrait promotional image and an optional 8-second video to announce upcoming TikTok PK Live battles. The feature is creator-initiated — no AI content is generated unless you tap a Generate button inside the app.

When you generate a promo, the following data flow occurs:

• Opponent identification: You enter the TikTok @username of each opponent. The Devign server retrieves each opponent's public TikTok profile photo and display name via the TikWM public TikTok metadata API. Only the public profile photo URL and public display name are fetched — no private TikTok data is accessed.
• Image generation: The opponent profile photos plus the Devign Agency logo are sent to OpenAI's gpt-image-2 model (via the OpenAI API at api.openai.com) along with a layout prompt describing the desired battle poster. OpenAI generates the composed 9:16 poster and returns it to our server. We do not retain the photos at OpenAI; OpenAI's data handling is governed by the OpenAI API Data Usage Policy, which states that API submissions are not used to train OpenAI models by default.
• Video generation (optional, costs DPoints): If you choose to generate a video, the still poster image is sent to Google's Gemini Veo 3.1 model (via the Gemini API at generativelanguage.googleapis.com) which produces an 8-second 720p MP4 with native audio. Google's data handling is governed by the Google Privacy Policy and the Gemini API Additional Terms.
• Storage and download: The generated image (and video, if applicable) is stored on Devign's servers under your creator account and made available for you to download and save to your device's photo library. We retain generated content for up to 30 days then automatically delete it.
• Photo library access: When you tap "Save to Gallery", the app requests permission to write to your device's photo library (iOS: Photos; Android: scoped media storage) and writes the generated file there. The app does not read or upload anything from your existing photo library.

Third parties involved: OpenAI, L.L.C. (image generation), Google LLC (video generation), and TikWM (TikTok metadata fetching). Each is bound by their own privacy policy. By generating a promo, you consent to the relevant data being sent to those services for the sole purpose of producing your promotional content.

You can opt out at any time simply by not using the Battle Promo Generator. The feature is fully optional and never runs in the background.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

Devign LLC
Email: info@devignlb.com
Website: www.devignlb.com

For GDPR-related inquiries, you may also contact your local data protection authority.