Privacy Policy

Effective October 4, 2026 · Last updated October 4, 2026

This Privacy Policy explains how ROASMEDIA LLC, a North Carolina limited liability company doing business as RoasLabs ("RoasLabs", "we", "us"), collects, uses and shares information when you use roaslabs.cc and the RoasLabs campaign management software (together, the "Service").

RoasLabs is a tool for advertisers. It connects to TikTok ad accounts that you authorize so you can build, launch, monitor and manage campaigns. RoasLabs is not affiliated with, endorsed by or sponsored by TikTok.

1. Information we collect

Information you give us

Account details: your name, email address, company name and login credentials when you create an account or request access.
Team members: names, email addresses and permission settings for assistants you invite.
Content you upload: videos, images, ad copy, hooks, presets, templates, instant form and instant page configurations, and similar materials.
Communications: messages you send to support@roaslabs.cc or through forms on our site.
Billing details: if the Service is paid, our payment processor collects payment card details. We receive only limited information such as the card brand, last four digits and billing status. We do not store full card numbers.

Information from TikTok when you connect an ad account

When you connect a TikTok ad account through TikTok's official OAuth authorization, TikTok gives us an access token with the permissions you approve. Using that token, the Service may access:

Advertiser and Business Center identifiers, account names, balances and account status
Campaigns, ad groups, ads, budgets, bids, targeting settings and schedules
Creatives, Spark Ads post authorizations, identities and pixels
Performance metrics such as spend, impressions, clicks, conversions, CPA, CTR, delivery and ad review status
Instant form and instant page configurations, and, only if you use a lead download feature, the lead submissions collected by your forms

We never receive your TikTok password. You can revoke our access at any time from within RoasLabs or from your TikTok for Business settings.

Information collected automatically

Usage and log data: IP address, browser type, device information, pages viewed, actions taken in the Service and timestamps.
Audit log: a record of actions taken in the Service by you, your assistants and automatic rules, including the data that triggered an automatic action.
Cookies: we use essential cookies to keep you signed in and secure your session. We do not use advertising cookies on the Service.

2. How we use information

To provide the Service: creating and managing campaigns you instruct us to create, showing reporting, running the pause rules and alerts you configure, and storing your creative library.
To secure the Service, prevent abuse and keep an audit trail of account activity.
To communicate with you about your account, support requests, security notices and changes to the Service.
To improve the Service using aggregated, de-identified usage information.
To comply with legal obligations and enforce our Terms of Service.

We use data obtained through the TikTok API only to provide the Service to the user who connected the account, and only as permitted by TikTok's developer and API terms. We do not use your TikTok data to build advertising profiles, to target or advertise to anyone, to train AI models made available to others, or to benefit any other customer.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:

With TikTok: when you instruct the Service to create or change campaigns, upload creatives or perform other actions, we send that data to TikTok on your behalf.
With your team: assistants you invite can see the ad accounts and data you give them access to.
With service providers that process data for us under contract, including hosting and infrastructure (Cloudflare), database and authentication (Supabase), email delivery and, if applicable, payment processing ([PAYMENT PROCESSOR]). They may use the data only to provide services to us.
For legal reasons: to comply with law, legal process or lawful government requests, or to protect the rights, safety and property of RoasLabs, our users or others.
In a business transfer: if we are involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction, subject to this Policy.

4. Lead data and other data you control

If you collect leads through instant forms or process other personal data about your customers through the Service, you are the controller of that data and we process it on your behalf as a service provider. You are responsible for having a lawful basis to collect it and for providing any required notices to the people who submit it. We will process it only to provide the Service to you.

5. Security

We protect information with industry-standard measures, including encryption in transit (TLS), encryption of stored OAuth access tokens, role-based access controls, per-assistant account permissions and audit logging. No system is perfectly secure, and we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you as required by law.

6. Retention

When you disconnect a TikTok ad account, we revoke and delete its access token immediately and delete data retrieved from that account within 30 days, except where we must keep it longer by law.
When you close your RoasLabs account, we delete your account data and uploaded content within 30 days.
Audit logs and billing records may be kept for up to [24] months for security, dispute resolution and legal compliance.
Backups are overwritten on a rolling schedule and may persist for a short period after deletion.

7. Your rights and choices

Depending on where you live, including California and the European Economic Area or United Kingdom, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. You can also disconnect any ad account at any time.

To make a request, email support@roaslabs.cc from the address on your account. We will verify your request and respond within the time required by law, generally within 30 days. We will not discriminate against you for exercising these rights. You may also contact your local data protection authority.

8. International transfers

We are based in the United States, and our service providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for transfers of personal data from the EEA, UK or Switzerland.

9. Children

The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

10. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email or through the Service before they take effect. The "Last updated" date above shows when it last changed.

11. Contact

ROASMEDIA LLC (RoasLabs)
[MAILING ADDRESS]
North Carolina, United States
Email: support@roaslabs.cc