Privacy

Groovent stores the account, brand, creator, brief, deal, message and payment records needed to run a campaign. Social tokens are encrypted at rest. In mock mode they are stand-in tokens, not live Instagram or TikTok credentials.

Audience data used for matching is the UK share, age bands and gender split returned by the platform, or a self-declared UK share for TikTok until an admin verifies it.

Meta data-deletion callbacks are accepted at /api/webhooks/meta-deletion and recorded with a confirmation code. TikTok de-authorisation is accepted at /api/webhooks/tiktok. A full “download my data” export is not in this build.

Session cookies are first-party, signed, and last 14 days. There is no advertising cookie in this demo.