Privacy Policy

1. Controller and contact

The controller responsible for the processing described in this Privacy Policy is:

2. About AlphaOdds Hermes

AlphaOdds Hermes is an artificial intelligence and automation platform used to create, organize, review, and transfer media content through connected systems.

When a user connects a TikTok account, Hermes may use TikTok Login Kit and the TikTok Content Posting API to authenticate the user and prepare, upload, or publish content according to the permissions granted by that user.

Content is transferred only after an authorized user initiates or expressly approves the relevant action.

3. Information we may process

TikTok account information

• TikTok account identifier or Open ID
• Display name, username, avatar, or basic profile information
• Authorization status and approved permission scopes

Authentication information

• Access tokens
• Refresh tokens
• Token expiration and authorization information

Content and publishing information

• Images, videos, captions, hashtags, and selected media
• Visibility and interaction settings
• Upload requests, publication identifiers, and publication status
• Approval records and content workflow history

Technical information

• IP address
• Browser and device information
• Login, security, error, and activity logs
• Date and time of requests

Communications

We may process information provided when a user contacts us for technical support, privacy requests, or account assistance.

4. How we use information

We process information to:

• Authenticate authorized users
• Connect TikTok accounts to AlphaOdds Hermes
• Prepare and validate content workflows
• Upload content as a TikTok draft
• Publish content after explicit authorization where available
• Display upload and publication status
• Maintain posting history and prevent duplicate submissions
• Protect accounts, tokens, infrastructure, and connected services
• Detect errors, abuse, unauthorized access, or security incidents
• Comply with legal and regulatory obligations
• Provide technical and customer support

5. Legal bases

Where the General Data Protection Regulation applies, personal data may be processed on the following legal bases:

• Performance of a contract, when processing is necessary to provide the requested Hermes service.
• Consent, when a user voluntarily authorizes a connected platform or an optional function.
• Legitimate interests, including service security, fraud prevention, troubleshooting, and system improvement.
• Legal obligations, where processing is required by applicable law.

6. TikTok integration

TikTok account access is based on OAuth 2.0 authorization. Users choose whether to authorize AlphaOdds Hermes and which available permissions to grant.

Hermes does not request a user's TikTok password. Authentication takes place through TikTok's authorization interface.

Depending on the permissions granted, Hermes may receive account information and may transfer selected media and publishing settings to TikTok.

TikTok processes information independently under its own policies. Users can review the TikTok Privacy Policy .

AlphaOdds Hermes is an independent application and is not operated or endorsed by TikTok.

7. Sharing of information

We may share information only where necessary with:

• TikTok when an authorized user requests a TikTok related action
• Hosting, infrastructure, storage, and security service providers
• Professional advisers where necessary
• Public authorities where disclosure is legally required

We do not sell personal data. We do not use connected TikTok account data for third party advertising or unrelated profiling.

8. International data transfers

Some connected services or technical providers may process information outside the European Economic Area. Where required, appropriate legal safeguards are used for international transfers.

Information transferred directly to TikTok is also subject to TikTok's own international data processing and transfer practices.

9. Data retention

Personal data is retained only for as long as necessary to provide the requested service, protect the system, meet legal obligations, resolve disputes, and enforce applicable agreements.

Authentication tokens are retained while the relevant account remains connected and are deleted, invalidated, or made unusable when the connection is revoked, subject to technical and legal requirements.

Content, publishing records, and technical logs may be retained for a limited period where necessary for security, audit, troubleshooting, and compliance purposes.

10. Security

We use appropriate technical and organizational safeguards designed to protect personal data and authentication credentials.

These safeguards may include:

• Encrypted network connections
• Restricted access controls
• Credential and secret protection
• Security logging and monitoring
• Backup and recovery procedures
• Approval controls for sensitive publishing actions

No internet based system can guarantee absolute security, but we work to reduce risks and respond to suspected security incidents.

11. User controls and revocation

Users may:

• Decline to connect a TikTok account
• Decline requested permissions
• Disconnect an account from Hermes
• Revoke authorization through TikTok where available
• Request deletion of personal data

Revoking authorization may prevent Hermes from accessing TikTok functions or completing pending uploads.

12. Data protection rights

Depending on applicable law, users may have the right to request:

• Access to personal data
• Correction of inaccurate information
• Deletion of personal data
• Restriction of processing
• Data portability
• Objection to certain processing
• Withdrawal of consent

Users may also have the right to lodge a complaint with a competent data protection authority.

Requests can be submitted to privacy@alphaodds.io.

13. Cookies

This public legal page does not use advertising or analytics cookies. Essential technical cookies may be used where required for security, session management, or operation of authenticated Hermes services.

14. Children

AlphaOdds Hermes is intended for authorized adult and business users. The service is not directed to children.

15. Changes to this Privacy Policy

We may update this Privacy Policy when our services, integrations, or legal obligations change. The effective date displayed at the top of this page identifies the current version.

16. Contact