Privacy policy
Last updated 30 September 2026
This policy explains what Poppr collects, why, who helps us process it, and what you can ask us to do with it. Poppr (poppr.app) is operated by Digital Solutions Group, LLC ("we", "us"), a company registered in the Sharjah Media City Free Zone (Shams), United Arab Emirates. We are the controller of the personal data described here.
The short version
- We collect what we need to run Poppr for you, and nothing for advertising.
- We never sell your data and we don't use advertising cookies.
- We only post to TikTok when you tell us to, and you can disconnect TikTok at any time.
- You can ask us for a copy of your data, or to delete it, by emailing hello@poppr.app.
What we collect
Your account
Your email address, your name if you give it, and your password, which is stored only as a secure hash. If you sign in with another provider, we receive your name and email from it.
Your brand
What you tell Poppr about your brand: its name, what you sell, who it's for and how it sounds. This is the brief Poppr writes ideas and captions from.
Your content
The videos you upload, and the ideas, shot lists, captions, schedules and settings you create in Poppr.
Your TikTok connection
When you connect a TikTok account, TikTok asks you to approve three permissions: user.info.basic(your account's ID, display name and avatar), video.publish (to post a video you've told us to post) and video.upload (to send a video to your TikTok drafts). We store the account ID, username, display name, avatar and the access tokens TikTok issues, the posting options TikTok reports for your account (such as which privacy levels you can choose), and the ID and status of each video posted through Poppr.
We don't read your messages, followers, likes or other videos, and we never post anything you haven't chosen to post or schedule.
The watch list (coming soon)
When the watch list launches, you'll be able to add creators whose public videos Poppr follows. For those creators we will process public information only: their public profile, public videos, captions and a transcript of the public audio. A creator who wants to be left out can email us and we'll exclude them.
Technical data
Your IP address, browser and device type, and logs of requests and errors, which keep Poppr secure and working. We use only the cookies needed to keep you signed in.
Why we use it
| Purpose | Data | Legal basis |
|---|---|---|
| Running your account and workspace | Account, brand, content | Our contract with you |
| Writing ideas, shot lists and captions | Brand, content | Our contract with you |
| Posting to TikTok when you tell us to | TikTok connection, content | Our contract with you |
| Keeping Poppr secure and fixing faults | Technical data | Legitimate interests |
| Following public creators on your watch list | Public creator data | Legitimate interests |
| Telling you about changes to Poppr or your plan | Email address | Our contract with you |
Who processes it for us
We use a small number of providers, each bound to use your data only to provide their service to us.
| Provider | What they do |
|---|---|
| Vercel Inc. | Hosts the website and app |
| Supabase Inc. | Database, sign-in and video storage |
| Google LLC (Gemini API) | Drafts ideas, shot lists and captions from your brand details and the brief for each video |
| TikTok | Receives the videos and captions you post, under TikTok's own privacy policy |
| Cloudflare Inc. | Domain name service and our email address |
| ScrapeCreators | Fetches public videos for the watch list, once it launches |
These providers may process data outside your country, including in the United States. Where the law requires it, transfers are covered by appropriate safeguards such as standard contractual clauses.
How long we keep it
- Your account, brand and content: for as long as your account is open.
- Uploaded videos: until you delete them or close your account.
- TikTok access tokens: until you disconnect TikTok, when we delete them straight away.
- Technical logs: for a limited period, for security and troubleshooting.
When you close your account we delete your data within 30 days, apart from anything the law requires us to keep. Backups that contain it are overwritten on their normal cycle.
Keeping it safe
Everything travels over encrypted connections. TikTok access tokens are stored encrypted and are used only by our servers, never shown in the browser. Access to production data is limited to the people who run Poppr.
Your rights
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. Email hello@poppr.app and we'll respond within 30 days. You can also complain to your local data protection authority.
You can disconnect TikTok at any time in Poppr, or in TikTok under Settings and privacy, Security and permissions, Apps and services. We don't sell personal information or share it for cross-context advertising.
Children
Poppr is a business tool for people aged 18 and over. We don't knowingly collect data from anyone younger.
Changes to this policy
If we change this policy in a way that matters, we'll email you before the change takes effect. The date at the top always shows the latest version.
Contact
Digital Solutions Group, LLC
Sharjah Media City Free Zone (Shams), United Arab Emirates
hello@poppr.app
See also our terms of service.