Privacy Policy — TikTok Comments by Bandia
Who we are.
Bandia (registered in France, contact support@bandia.fr) publishes "TikTok Comments by Bandia", an app for Zendesk Support that turns public TikTok comments into support tickets. This policy explains what the app processes and why. Bandia acts as a processor on behalf of the Zendesk customer that installs the app (the "Customer"); the Customer is the controller of its support data.
What the app accesses.
- From the Customer's TikTok Business account, with the Customer's authorization through TikTok Login: the account's profile (display name, username, avatar), the list of its own videos (id, caption, thumbnail, posting date, public statistics), and the public comments and replies posted under those videos (comment id, text, posting date, author display name, username and avatar, like and reply counts). The app does not access direct messages, advertising data, or any account the Customer does not own.
- From the Customer's Zendesk account, with the Customer's authorization: ticket data needed to post comments into tickets, to check that a reply was written by an agent before it is published, and to create a view and ticket fields at setup.
What the app does with it.
Creates and updates tickets in the Customer's Zendesk; posts the Customer's agents' replies on TikTok; shows the video and the comment next to the ticket; tags tickets by account, market and detected language. Replies are published on TikTok only when written by a human agent; automations never post.
Where data is stored.
On servers located in Paris, France (European Union): Supabase (database), Fly.io (background processing) and Vercel (web application, EU region). Access tokens are encrypted at rest.
How long.
Comment text, captions and author names are kept for 90 days after import, then deleted; technical identifiers are kept so that a comment is never imported twice. Access tokens are deleted when the Customer disconnects an account or uninstalls the app. Operational logs are kept for 30 days.
Who can see it.
Bandia staff only when needed to provide support to the Customer, under confidentiality. Sub-processors: Supabase Inc. (database hosting, EU), Fly.io Inc. (compute, EU), Vercel Inc. (web hosting, EU). No data is sold or used to train AI models.
Your rights.
TikTok users whose public comments are processed may contact the Customer (the brand) that handles their request, or support@bandia.fr. Customers can disconnect TikTok or Zendesk at any time from the app's settings in Zendesk Admin Center, which revokes the app's access, and can request deletion of all stored data by email.
Changes.
We will post changes on this page with a new date.